last executing test programs: 30m27.85816715s ago: executing program 32 (id=282): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)={0x28, 0x13, 0xa, 0x5, 0x0, 0x0, {0x11, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}}, 0x40000) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async, rerun: 32) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x70, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r3, 0x0, &(0x7f0000002500)="c5", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) (async) socket$can_bcm(0x1d, 0x2, 0x2) 28m33.022522616s ago: executing program 33 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x0, 0xa5dfdbfc, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0xffffffc3, 0x40000}, 0x40080) 28m30.807736503s ago: executing program 34 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400040000004fde25f3427b0800070000030000"], 0x60}}, 0x110) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x11}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20008010) epoll_create(0x567) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x4000, 0x102, 0x8}, 0x18) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 28m23.317131782s ago: executing program 35 (id=674): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0xe, 0x2, 0x1, 'queue0\x00', 0x3}) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xe61e}}]}]}]}, 0x54}}, 0x0) r2 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x200840, 0x70) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',ro&9000\x000000000060?\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f05b000000000000000000000000210000000000000000002c3f0ca6ad37ec0ccc807b53c2e873b1a5a6930d02a28f23a33bd8937a97cc57807098a5a2cb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(r5, 0x128) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) io_uring_setup(0x71d7, &(0x7f0000000300)={0x0, 0xa5bb, 0x20, 0x1, 0x2ac}) 27m30.092281596s ago: executing program 36 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448dd, &(0x7f0000000940)={0x0, 0x0}) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) preadv2(r5, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/36, 0x24}], 0x1, 0x1, 0x3, 0x0) 27m29.655916489s ago: executing program 37 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x3}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x4}, 0x40002}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r1}, 0x38) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x9, 0x2000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="041c070000000000c91000000000000000000000000000000000097411dd1202275465b8707306140724e852a692b1e82546f90afd5b1d07aa8e3c5bd8a6f70fa40239e34901716791c34b95d51693b6994fec857abeb57f52901013e010720977a067af17db13eb6dc9520a64c9bb6797bfcd63bfdd6055f92827b8a11d82d6ca0229d084c7d018f591c0adca33f46e000100010400000000074800000002107f09000100000000000000030000000000000009000000000000000900000000000000000000000100000004000000000000000001000000000000020000000000000007000000000700000000000000"], 0xf0) getrlimit(0x0, &(0x7f0000000180)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 25m56.70506903s ago: executing program 38 (id=974): r0 = syz_open_procfs(0x0, &(0x7f0000003c00)='task\x00') fstat(r0, &(0x7f0000004240)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0xfff, 0x0) 25m24.128165059s ago: executing program 39 (id=1047): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x108000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x40008010) 24m11.354866674s ago: executing program 40 (id=1245): socket$inet6(0xa, 0x2, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000340)='erofs\x00', 0x0, &(0x7f0000000240)='acl') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000004000)=""/4099, 0x1003) 24m4.150194253s ago: executing program 41 (id=1266): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x2, 0x9, 0xff06, 0xc00, 0x783, 0x4080000}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001800110000000000000000000a140000a600020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x20008805) epoll_create1(0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0]) chdir(&(0x7f0000000140)='./file1\x00') symlinkat(&(0x7f0000000380)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./file1\x00') listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) open(&(0x7f0000000080)='./file0\x00', 0x400200, 0x12d) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) 23m12.760167078s ago: executing program 1 (id=1496): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(r0, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 22m57.708254569s ago: executing program 42 (id=1496): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(r0, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 21m58.58775317s ago: executing program 43 (id=1700): r0 = syz_open_dev$ublk_chdev(&(0x7f0000000040), 0x0, 0x88002) pwrite64$ublk_ch(r0, 0x0, 0x0, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) 21m21.518797928s ago: executing program 5 (id=1911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) lseek(r1, 0x10001, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) lseek(r1, 0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000900fe258cf9300004a0a62000000000000"], 0x0) 21m21.188114035s ago: executing program 5 (id=1913): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x112) 21m20.883702566s ago: executing program 5 (id=1917): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') r0 = getpid() syz_pidfd_open(r0, 0x0) setns(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0x8554, 0x8000, 0x5, 0x62}, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x2b, 0x80801, 0x1) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x87, 0x0, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 21m19.87222035s ago: executing program 44 (id=1917): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') r0 = getpid() syz_pidfd_open(r0, 0x0) setns(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0x8554, 0x8000, 0x5, 0x62}, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x2b, 0x80801, 0x1) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x87, 0x0, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 19m57.315879995s ago: executing program 45 (id=2214): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) 17m12.789992238s ago: executing program 46 (id=2954): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000005000)='synaptics-smbus', 0xf) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x3, 0x30385056, 0x3, @discrete={0x0, 0x2841}}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x121) 3m54.595417371s ago: executing program 8 (id=6354): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000303000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) syz_emit_vhci(0x0, 0x14) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m52.525698385s ago: executing program 8 (id=6359): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, 0x0, &(0x7f00000004c0)=0x0) r5 = syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getenv(0x4201, r7, 0x1, &(0x7f0000004080)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r8, 0x80000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c1c0100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x1c00) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 3m50.189184107s ago: executing program 8 (id=6368): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x5d) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r8, &(0x7f0000000340)=ANY=[], 0x40) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) 3m47.852162321s ago: executing program 8 (id=6373): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast1}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000006"}, 0x400000, 0x7f, 0x3ff}}}, 0x118) 3m47.819470726s ago: executing program 0 (id=6374): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) openat(r1, &(0x7f0000000280)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='0', 0x1) fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) truncate(&(0x7f00000002c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x6fd2) syz_emit_ethernet(0xfc6, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xbb}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 3m45.01748665s ago: executing program 0 (id=6379): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, r1, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) r6 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x29, 0x800, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') read$FUSE(r8, &(0x7f0000000700)={0x2020}, 0x2020) (async) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) 3m44.697286089s ago: executing program 0 (id=6382): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x80, 0x800) r3 = getpgrp(0xffffffffffffffff) getpriority(0x0, r3) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3m44.585075588s ago: executing program 8 (id=6384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x11) mkdirat(r4, 0x0, 0xa6) openat$comedi(0xffffffffffffff9c, 0x0, 0x20043, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x9e30c03cc814b16f) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000000c0)={{0x80, 0x77}, 'port1\x00', 0xeb, 0xb1c07, 0x10, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x2}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000800100000020000180060001000a000000140004"], 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000040)={0x3, 0x8, 0x6, 0x2}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_usb_connect(0x0, 0x260, &(0x7f0000000180)=ANY=[], 0x0) 3m43.044726817s ago: executing program 8 (id=6390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x1b1}], 0x1, 0x12000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0xfffffffffffffe8b, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x0, 0x27, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) readv(r4, &(0x7f0000000240)=[{0x0}], 0x1) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000084000000010000000000f1000400000000000000a200000000000100005f000000008ce27971a2678c2ffd921a9ab787cbe2a1099b6966b5df08eb5d3e2216030583853830b9e0d2f7b5dc34ba26c6b54d49425126f1cd16bae3c9dafa0b12b9f7168cfe4a6741eddbbd5ded78780000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m42.86137643s ago: executing program 2 (id=6392): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x264200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x240f, 0x26576, 0x8}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x264200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x240f, 0x26576, 0x8}) (async) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) (async) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) 3m42.649329808s ago: executing program 2 (id=6393): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a000201020904010000010200000904010101010220000b24020109028d01e0fe9807240104ff03000905010920"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0xb00, 0x24}, 0x8080) syz_usb_control_io$rtl8150(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000100)={0x0, 0x1, 0x91, {0x91, 0x22, "15aba27d0beecb0c92898ca431e0e209106a3338c095646699ca23b862d88afaae638045e276232b9c558e57fb967457a08b6a876eef61a52e1040e3f944f381d0c0c64582efca42410962917fc646349e623e5a0fdeda91d9d826f5f8e62f54731eba620989a586f1ff434660f5d272dec374071a355c09d18b9b1029cffc2673a951fd3706581505082101560eb3"}}, &(0x7f0000000c40)={0x0, 0x3, 0x96, @string={0x96, 0x3, "af06d7a9698d0b16f1538460f76e7db806b280c1de358364397a571bc09848c3193a6336d490bf093473cd851c21230c35a1d12d21cfbf52f3f846029f83d239cbcb73fbae5b3a6d6cd3de589bf2b170561b5bd346e252d6a379140aa46cd3fb4d8fa469c6330b493f923652105a524f24b02cd8afffc021735a9bb7fae5581517bac7e7fbaa1abd6e61cf44897399b1002a623e"}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x20, 0xe, 0x61, "50eb3962ee3776cb6abea6c107e422379c5160fcddbbecad93bf1e65c06787cbd8c7aa3d3d6b83a95a377861cc01377c1b3554bf20a7e18ed283481dd9fc138b92e85ebdf7d2a19e7e55b2acd45e54e0198963e4f2a247c77998f1ad3e5df5a58f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000b80)={0xc0, 0x5, 0x6, "010200000000"}, &(0x7f00000001c0)}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r5, &(0x7f0000000040)=0x731, 0x8) syz_usb_control_io$rtl8150(r0, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0x9, 0x76, {0x76, 0x3, "26b3637564f5e1a87cd2e3b4258a5bca70dfdb53192a07a66213f1fcfb78978194a0da67c1ab8882408724b7732e7cbb617e52180f094ed9c5742fa09ee3c64da5ab12c10a3b8a15efe784d848f77ae94646e6e4c80c3ea9366fb5762efe20ec80fdf2eaf951b4e257639cfd40c582d9e77a9d49"}}, &(0x7f0000000440)={0x0, 0x3, 0x48, @string={0x48, 0x3, "23d66a65ad4aaf521f7521c0bdc4f8379cc029cb5a423194a2fc94b53e5c27f8436ea58129577dd3534b4554f3d3a6747bbac97f7dd6e89b1d501ed7ee6cae0c98c870e7d848"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0x30, 0x14, "5153324761e1fac8a60b9ec6c304cc20618ac78b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0xc0, 0x5, 0x1, "13"}, &(0x7f0000000600)}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m42.469164254s ago: executing program 9 (id=6395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="1800ffa0020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m42.403283633s ago: executing program 0 (id=6397): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) tkill(0x0, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000002c0)="5c00000030000506000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000180005801400018008000100000000000800030064000000", 0x5c, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000000c0)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000005000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x8, &(0x7f0000000980)="000000000065c6667d3723f691d8", &(0x7f0000000600)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m42.240897405s ago: executing program 9 (id=6399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x43, 0x22, &(0x7f00000002c0)="0030ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m40.480020035s ago: executing program 2 (id=6400): socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xac, 0x5}, [@RTA_PREFSRC={0x8, 0x7, @private=0xa010101}]}, 0x24}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {}, 0x20}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) (async) sendmsg$can_j1939(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0xffffffff, 0x115000, 0x1}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x40000, 0x100000, 0x1}) syz_usb_connect$uac1(0x2, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000201e042030400001020301090275000301071080090400000001010000032401"], 0x0) 3m38.473257227s ago: executing program 0 (id=6402): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a000201020904010000010200000904010101010220000b24020109028d01e0fe9807240104ff03000905010920"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0xb00, 0x24}, 0x8080) syz_usb_control_io$rtl8150(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000100)={0x0, 0x1, 0x91, {0x91, 0x22, "15aba27d0beecb0c92898ca431e0e209106a3338c095646699ca23b862d88afaae638045e276232b9c558e57fb967457a08b6a876eef61a52e1040e3f944f381d0c0c64582efca42410962917fc646349e623e5a0fdeda91d9d826f5f8e62f54731eba620989a586f1ff434660f5d272dec374071a355c09d18b9b1029cffc2673a951fd3706581505082101560eb3"}}, &(0x7f0000000c40)={0x0, 0x3, 0x96, @string={0x96, 0x3, "af06d7a9698d0b16f1538460f76e7db806b280c1de358364397a571bc09848c3193a6336d490bf093473cd851c21230c35a1d12d21cfbf52f3f846029f83d239cbcb73fbae5b3a6d6cd3de589bf2b170561b5bd346e252d6a379140aa46cd3fb4d8fa469c6330b493f923652105a524f24b02cd8afffc021735a9bb7fae5581517bac7e7fbaa1abd6e61cf44897399b1002a623e"}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x20, 0xe, 0x61, "50eb3962ee3776cb6abea6c107e422379c5160fcddbbecad93bf1e65c06787cbd8c7aa3d3d6b83a95a377861cc01377c1b3554bf20a7e18ed283481dd9fc138b92e85ebdf7d2a19e7e55b2acd45e54e0198963e4f2a247c77998f1ad3e5df5a58f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000b80)={0xc0, 0x5, 0x6, "010200000000"}, &(0x7f00000001c0)}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r5, &(0x7f0000000040)=0x731, 0x8) syz_usb_control_io$rtl8150(r0, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0x9, 0x76, {0x76, 0x3, "26b3637564f5e1a87cd2e3b4258a5bca70dfdb53192a07a66213f1fcfb78978194a0da67c1ab8882408724b7732e7cbb617e52180f094ed9c5742fa09ee3c64da5ab12c10a3b8a15efe784d848f77ae94646e6e4c80c3ea9366fb5762efe20ec80fdf2eaf951b4e257639cfd40c582d9e77a9d49"}}, &(0x7f0000000440)={0x0, 0x3, 0x48, @string={0x48, 0x3, "23d66a65ad4aaf521f7521c0bdc4f8379cc029cb5a423194a2fc94b53e5c27f8436ea58129577dd3534b4554f3d3a6747bbac97f7dd6e89b1d501ed7ee6cae0c98c870e7d848"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0x30, 0x14, "5153324761e1fac8a60b9ec6c304cc20618ac78b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0xc0, 0x5, 0x1, "13"}, &(0x7f0000000600)}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m38.276078048s ago: executing program 9 (id=6403): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0xa1) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00e4ff", 0x40, 0x6, 0x1, @remote, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @window={0x3, 0x3, 0xd7}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003240)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003200)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x344, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_USERDATA={0xc1, 0xd, 0x1, 0x0, "7ea3e74ef87b002fb08393d5f2b7293d37090c4c79d8f21b645dff4ea388bdf60780816bbc25c7233b20adf19b3669a6df28cd22055214645ffe76b57071c9fa0313d0af1b1b4b8818a70a3b68bf57c13080683428d8c0414783033951ac79ac4b4da3d77861ba7726d7f5d846cb77b734ea3ee1ea97b0c9640eec546a0cadac24d5ef64b7be4b9acd31832eac794ad6fc60922f11f39deb209aa599173b277adfba60819dee3e828a9d50b97d1a08213ee89cd3620e518b56685cf7f6"}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x17c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x178, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3bee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2fef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1a31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63547e6d}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x984}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4cf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xc7, 0xd, 0x1, 0x0, "927f1e6f5b7035da82f56d69dad23b806f965e443680c46c40e23b2af135f27edc234fa4687afdbd77c7f9f385dfe12797f261b6fc1810793054f537cf520bcd7fc645cb22d7c2042dfa86697cdb3dde3be8bc2f0c853ea5619749a567d967a78e449cb17c251ccc6ea59f2216cf369ebcf29f4be43dfd3a67326ee7662d522764709ec017a039ef0b84d1aa23bccddb80dee33587e35f8a7c38c395e948d4d61f25dedd786181c0327e845e8a7ce162d3e7bdb5132fca8c2d50ef4c0bca70f07a3af0"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x3b0}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) listen(r0, 0x5) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x170, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ad6bcc9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "e6540de3c9fc41d6d96d23e3bf8fcfe6f7358fb46d8ad2308d792af2ab7d9c204bdc828e0731caec"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x93, 0x3, "61f77a20c3fd27ead5d2e1385285abfa78b41b84483a4d21aaebf302dea6e796a41682380e5d1899a2657f617a20ffa01ff4a09f226c023d0c609d9f55e2ba04baa1061442e3e7fb9794ff12fbad90888913f8a69ac5f6096c7b53e7941c25960ebc2a6e38cd55036b9a1861bb0f6c4b3135df1434f82f0610e1b9ce255f6b00cb0dce94b4ba2bdaff78a539690c5b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {}, {0x6, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1089}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="34841317df6a50b780075284b2a6b84576df0a9520c3560cd9c9a507fc9dc442715ac19cb9ec4d525e191e98dddb95490c71ea52e52731c58ca5635d3a0581e89d3e7f93826b0168337c7863b6506284c4819dd6842524728eb055751548ff7b370e5a005938ba52c44dfb96ac8dfc715acdacd1b943bc5a2f6e4fe4d2983bdc529420e65dc5a273658251190658545be25c5a2afb9c4febd8561341c86a18b987154ba45036b220a752656fdeebf73f79", 0xb1}, {&(0x7f0000000140)="c7da7a118210e6ae954d59db5eba324579ed374998354e2199f8456e82b239f5b33c3f40290d67993d2a9afe26b9477b9700de70e0009af1a00c932426c92b76b8a4c29569dcc4f80cfd5c986fb29a7dc252cdd23af7a0101a12d0c8e703068dbc3705cd89d1c0b536b0a29519091a0bb39f892df9d14b65a8af6e7f36ee35b8ae1e3a39b5546a6653af6d121fcb5db8a734d11ca9a4178d5ae2a6c9513c5849f66f0ee2068ee2dfc984e83607d9850cacb3f3", 0xb3}, {&(0x7f0000000200)="0efdedc3acd3de9144b179b2c838c89d3365d78a3367f8fda498953a978516dcb57875f77eb158e793c4cec764f64e6ce4a425a934fe7953f87688e29004bdcd4c37792152279b76970ea294fdb2f81dec75b8172310db6cd7ccb5fa98892d59e45f7da9d9f373d69474da8076247d60737a10916dccbb0e7ced0a5c0fde0319dd1dbc2b32494ffaeda7d2b86116b433a40b634015432eb1a1abcde5296a7ee3b0ee281eed160fb1b508caecbc540a", 0xaf}], 0x3, &(0x7f0000000300)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xd1, 0x0, 0x4, [0x5, 0x7ff, 0x5]}, @noop, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x6, [{@rand_addr=0x64010101, 0x3}, {@empty, 0x6}]}]}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x91, [@loopback, @loopback, @multicast2]}, @ssrr={0x89, 0x1f, 0x49, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x44, 0xd, "df1bf0d87b162fd0309872"}, @rr={0x7, 0x27, 0x46, [@dev={0xac, 0x14, 0x14, 0x31}, @remote, @private=0xa010100, @remote, @multicast1, @rand_addr=0x64010101, @broadcast, @private=0xa010101, @loopback]}, @end, @generic={0x94, 0x7, "f4dca6cf79"}]}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="1539788a5a48e835165aa587d4e5b95f9a9e3ddd85d808681aa382f75a808ffaab65698648f6ab7b", 0x28}, {&(0x7f0000000400)="3c82fa4cd141f62ef60235558a5991343caee54ffdc07dc91f21780bff61ef30924b781a08ac697d4cd6e7e1ec5d07b0a04789438e1e0ca381ff112b5c52614b4ec426a0e404", 0x46}, {&(0x7f0000000480)="0f2909b20123a1197b6d7bde54f2116fb914", 0x12}, {&(0x7f00000004c0)="0e49462817e2672f1d22445931b99e312f60ba09313d0b6357dc1cd800b97bbc4d8ac0ae7ef30b369bf7bf90e3a9c8420794d223c03158482172853eb3372655a6991fddbe35d10423d63090c87acec31031252c4c7b1b7aa7f0a20f94af6033598c23361d827b8220d4cba8f76ba3adf5b3ad766ade131b588bba9f7342488b739f23076265a2218bc15b1a5e06b6824dd3c7dafc8030f6a941d2db37d026558f5c9a1b6b5cfbd2781a", 0xaa}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="c40fef15756d2365b6d0af6c27b2b5fdd3a2c5a97aa05e79ad88262f007c24dd7fac5cc595c715f5533b35adec9b1491686bf0b58bb7f530c9da88aa6a8f0e0d418a693cdb3652990cfbcbcf6333794d458b18e7c6f303f437d44950ab0e05", 0x5f}], 0x6, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}], 0x78}}, {{&(0x7f0000000740)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000007c0)="68572a461c5e2f24d1ddbc69af61abfc124e517a06e1084c31c115ac742b1d2b7071056d3a2d1435a81e9b7ece3621239f2a80b71a01b2a0c25e3677498a633e3729738478a18913536a795e60fbfdbe1e845f0cdb2b14e979b05cb795d8439a636af098ff06eb69426b8c29eb9c8ba00afedc010380eba095ca81c0cdc8338d2b770b199d96491633be3a675758733a415e2cffa85de1eb9b9125ef56fdb662045cb0fb62631e6c5c5f74080c737acb2f76c0ea74e424a006db4d4ce79f259cdbba28b98735dc9b0b84b0ba6422fe5be6d1738dfd7a7f56677e5a82166903fd1a59b8c672805b2987", 0xe9}, {&(0x7f00000008c0)="5cfe4757ebc0c6553d7867eeaa99952fe79da6c756d32ca3af58c10e53a0b2c60000f06b6032e3aa5ff917e5905fc618ac1ec11ec343edc67750d9d78fd5ac86034b311303899a1159d8d2542b872e6467e1e4887764837c5e536167cf004f033e2b", 0x62}, {&(0x7f0000000940)="270dec79949a57292090666757251f3419ddc6bce27488999b519b11f65cf25c82cccbb82cfb90ef8b1d25f93c995d69f0a68db2073f21e7257c8dc06400eb004a99cd74dd0a1e24180482c0358d9b3acad7882bfbeb1ba3c4a7f3d8f5d0735905fd50f44fccff5fcffceebeef9ca26c9d74b822ed3bac9bcf960ddbbc2b00685447ac0c8cc01ba8e5bfdb31a3db2a0ff03c7038fc", 0x95}], 0x3, &(0x7f0000000a40)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x74, [@empty, @loopback]}, @generic={0x82, 0x6, "08114f54"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x52, 0x3, 0xf, [{@multicast1, 0x6000}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x6}, {@remote}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x3, [{0x2, 0xc, "4aaf47c5c62f22cc6362"}, {0x5, 0xe, "8b0aeb5b1b603987e9a7c08e"}, {0x2, 0x9, "1823a2371474ce"}]}, @cipso={0x86, 0x14, 0x3, [{0x2, 0xe, "209ad7b3b340e565cbff7c3c"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x130}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="499e77380e8ed1771c8f64d60f4a5778746de44356a2f4d9e34d1733a4dd1c893cefe4cd1ae733b4b86b3566137ca127339513935e9a1e4c5a2baf27e7d341c51428c43c73056535a99b7bae6cbb573a7946987666a06eb6f9eb7a1ca81ed5d3b3af49a0c529744c9117593ac6fc78ee8bca157fe0d4d8894e8ac5a6c703ba61e47ead19c54718eafa9aa63d311165114c76e79aeaaebe3d5b58f6e45fb574d2", 0xa0}, {&(0x7f0000000c80)="23628e49cafbfe365f8930177b5b4c0b33819cbe7af7354a10f8432556fd7349dfcb218c2cddef72cc40a3d79d0b660614f0cc7702d021dbf14eac385e216147a609541a7d1903debca3dd28c4fd60949627c87e001c9a8d33280decb6aa1556295370a89b8711f22524a7f99746d6517f772f76f7f4aa4fc8d6fa4aa11141e1c24d74c70cde650d4dc04018e761c41be0b9358af75bac442a3686d6a625848a62605dfaed4949e99ec48a40de39cc4bb17820a134cbb67738da6c24ac822652253782495376d41c1df7d32e", 0xcc}, {&(0x7f0000000d80)="e84538e8bdf02bfa7373d7927f129ebb0a4341cdbbfb2c03f8ceb81657f8b23cce1277", 0x23}], 0x3}}, {{&(0x7f0000000e00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000e40)="02b9d361f5971eeab09f3030c5de0eccc135bd1d031b1e5bd0b6841311e6e49fb5f6e099604fc69ed2a24d1c86f8ea7d7bbbdb7ec3aad54c90a67f8d7409f8b4902506ee8cf9cc4bacf05e748a01065acbf110db", 0x54}, {&(0x7f0000000ec0)="e10858c5cd122d47e161bc55f5714fa6b10e238bf81f33a5726d0d855e2fe33f0765b62779b09494bac2736b0e0fbf6f22b0dfb4aafc648343e4cb416c61b2be14775cc51e018a7398785fba6a64214423dc6a1b6fc8e6", 0x57}, {&(0x7f0000000f40)="332e6c2a8a7db105593f4a97bec3308d868231e4981a6769a8c72b5c2ca08d08c1fb145c6ab6f5f1032c6b9c755c606187f078bab3a8b14f69dd60191526db2ae0a2fadb6c2176794218dc554c02f9b64d8111eddc38bb04678d6bd3f0dbce70aad8a935a946678a76c9a47c56f667078831360c8fe633dab18a5d9d6071a9467cf99afb44cd74b797ea6607809291baadcc418f1020bce77a543ecbcf61ee98f0da7bc05064986f0e7ea83f85ff3cb954212756a6fa63148af584480a6392f259ff7a4b6fc2f090d9451824fc23173faeb15dfb3a", 0xd5}, {&(0x7f0000001040)="56829e7c80b56fac111fa46d3020b7c8b934cf271668610087a969", 0x1b}, {&(0x7f0000001080)="52aa9f24441f1d2400cba16da6200e369b4c2f", 0x13}, {&(0x7f00000010c0)="4ff8d857fadb28047061", 0xa}, {&(0x7f0000001100)="89b6418b6813f86380cdd2f5dafc2ab61d8e373b92aedbc90214fcbe2ed1d5ab39b662f822a08a980dc71fdf383214afc7d84d625f107aef6ae3d915396c28f262ba1020037a3190b9a6be6f028ae03be9d6bf49c5f8ec687e066f45cd2facc25e8695a7506adbde1ab148ab4bf1761c7e4658c9646978ff935193ad", 0x7c}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="2995162d90611c7e2555a140319b020839f1843f8d3cc39b8c83e62b27c3c6f717be54ff917c706d0d130169c6fb8ebbdc87cb02dffa638f92cd015e1a33bacc176222248c145d6526ee2fbe044df29986c0229ac4e61eaf317bcd47a62dc6ca80286f69791d5e7d1129eca67f240ef38420bcac310cad2909ffb3462faf96291959ff805e381801a89d36249a9e76cb3c670a45f049df82d8", 0x99}], 0x9, &(0x7f0000002300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb67}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x40, 0x0, 0x7, {[@end, @noop, @timestamp_prespec={0x44, 0xc, 0x99, 0x3, 0x3, [{@empty, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x5, [{@loopback, 0x1}, {@rand_addr=0x64010102, 0x4ff1}, {@rand_addr=0x64010102, 0x3}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xa8}}, {{&(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002400)="b8cdc567ce32f4c20184e599ac475ea7ab9eb5ab6d6e9f", 0x17}, {&(0x7f0000002440)="57b8153fd4920f445f011bbccb020b29ad9434ed4eb427933fcb16ea36c87ca8780652cd", 0x24}, {&(0x7f0000002480)="6293f2283fe7389581c71d5cad493036b467", 0x12}, {&(0x7f00000024c0)="8fb562aec518ae4492d15ffe37c0e74f5df2ac6c23cb91f1c3f6e2102cc86944aa1b5f4990dea9404c78d80a0e33b89fcf410ceccf2b0e5deaea87929d3b48490e7a9f4904a9caea51fc02e896a8d2f4abc4092ce247c8d404c0483c0987f92829ce7e693ca1e33e8cd65a9232e5f8a9", 0x70}, {&(0x7f0000002540)="89232e48217c3baf104b605fcadf4e61a2fc6c1e621b6051676372e099f2a0d94def413a852ef5a0d2f93f96d80b8a347179cfda9a6a002ef0d9968b396cfc12e6dbd8c279d24efa50d957e8767f0080fd1e7c2d2ac934480e7322417c9531e18182dc018b40e044c133277524aaa6e55ef74aae81f3b59db06cc1571b84605e92d509686e4b5cf6b3a2c5", 0x8b}], 0x5, &(0x7f0000002680)=[@ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xcb, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0xe5, 0x0}, @broadcast, @remote, @local, @rand_addr=0x64010100, @remote, @loopback]}, @timestamp={0x44, 0x14, 0x78, 0x0, 0x0, [0x860, 0x100, 0x100, 0x3]}, @rr={0x7, 0x7, 0x38, [@loopback]}, @lsrr={0x83, 0x27, 0x83, [@private=0xa010102, @loopback, @multicast2, @remote, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast]}, @ssrr={0x89, 0x3, 0x64}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @empty}}}], 0xa0}}, {{&(0x7f0000002740)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002780)="650085c2fc20ab65611b3317e919086e7f0afbb45af1dcc09df2cd7816ac554976898207e7a1d169fd9bd737db696aafb1bae46dc9686f33", 0x38}, {&(0x7f00000027c0)="01a13353497598e47f2788ad17b12515801c1ff50cd9526adcc33acdd68a095c860429bc1a71f882ee49a50fb36d9cb8c7f47469c84efd74f829caca6fc396", 0x3f}, {&(0x7f0000002800)="e3446183ba87781664280da3f015aaa8e904ae853132ec8c6af687c0e92aa7b8d5fbfaf15268e4ced7c94ce3415c5d42d0cc656cb5f8c4763d672862c25afac7625caf76662bd3949c08926a04176de01fecc4ec7de1acb18db85c92db2674193f82c46f6c53b080f61ec1dd7161122be7899e18b44a7617c9e883538a2a26b0af18b43e591001e6f06139e60bd4a90993b3e9328e2a5441655c4c48a0a80a727b4bee6628d8e240e3140a08bf6e092727f8b5a84168d169899d3d875fb7388843", 0xc1}, {&(0x7f0000002900)="4bad84471758b06d3b5834a2742d93df4ea36fb499027cf14c8f15ae0df98c9713be67efaa16a69904dcab8055031303e777826e46c38ce09766ec1002e78b0acb93a5daab4ca7714ed649f683166bd7a8652e5e755c73bb24e4ca475855c506a0b5924b1f40ffef2f35879d6c78c0881c9a890fe9971da6038b31115fb15b39c61d9f372debbdbd8174fadf28ca5a6b", 0x90}, {&(0x7f00000029c0)="4e0d0a0c5860856d31c38e33bf108da32a32fbd450998199db210896461aa5a9b2af7db2d30b7e7d7880c1cd0727c8d918277d674a7bf28d4c9f3e2e821f4140e6acc9758d5c09e3690517ed21c3e06e7cbf4ff62744e1dd7d03321872d59de131d6b2298231", 0x66}, {&(0x7f0000002a40)="8bf662f1a5b9e8b542113c16b10e7eb994af3242cd27710438358f8056fcafdf04ac93946410a08f5ffe63982563792fb77b789692c81958cc6ab398677df358d59f7a9c86ef5e233fb0c128b8cf42567bb29946ee385d0e49de02d1b04f787d49cc8c04bb288cb60b8c0d98d0a500ea3d642e17717d79cc19f6ca094cb539b15987eab80a0be32e1e9c04ba5fcb7fa67b27ff59aebe476a029cae54263235dd238a4e15f26588ca771aadfc6d0a2d5635721365f1fc1a0d21babbbe7a413a6ed61cf9e8afff74807bfb61f42f68c14e45e52e8200eb3e177f4fdf29a576baefa94eb494adf3d6dcef3e347aa4cae90255c9036a", 0xf4}], 0x6}}], 0x7, 0x8001) 3m33.977126509s ago: executing program 2 (id=6404): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x6000000, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 3m31.101731963s ago: executing program 9 (id=6406): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000812}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000340)={[0x7ff]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x1102, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) 3m29.801173494s ago: executing program 2 (id=6407): r0 = memfd_create(&(0x7f0000000200)='}-]\x00', 0x6) fchmod(r0, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = inotify_init() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x51, 0xffffffff, 0x0, 0x3, 0x7fffffffffffffff, 0x0}) process_vm_writev(r4, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/36, 0x24}], 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)}, {&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001a80)=""/112, 0x70}], 0x7, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffef7) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r8 = dup(r7) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r7, r9, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r13, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r14, 0x541c, &(0x7f0000002180)={0x6, 0x5}) connect$pppl2tp(r12, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x0, 0x3}}, 0x26) 3m29.663012899s ago: executing program 0 (id=6408): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x3, 0xe000, 0x0, 0x0}], 0x1}) 3m25.711337887s ago: executing program 47 (id=6390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x1b1}], 0x1, 0x12000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0xfffffffffffffe8b, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x0, 0x27, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) readv(r4, &(0x7f0000000240)=[{0x0}], 0x1) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000084000000010000000000f1000400000000000000a200000000000100005f000000008ce27971a2678c2ffd921a9ab787cbe2a1099b6966b5df08eb5d3e2216030583853830b9e0d2f7b5dc34ba26c6b54d49425126f1cd16bae3c9dafa0b12b9f7168cfe4a6741eddbbd5ded78780000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.649237455s ago: executing program 2 (id=6411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x37, &(0x7f0000000100)={&(0x7f0000000400)=@bridge_newneigh={0x38, 0x1c, 0x300, 0x70bc25, 0x25dfdbfe, {0x2, 0x0, 0x0, r6, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_PROBES={0x8, 0x4, 0xb2}, @NDA_MASTER={0x8, 0x9, 0x1ff}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000000114010027bd7000fddbdf5c050001"], 0x18}, 0x1, 0x0, 0x0, 0x4044880}, 0x8000) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040), 0x0) r9 = accept4$nfc_llcp(r5, &(0x7f0000000180), &(0x7f0000000280)=0x60, 0x180800) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x26}}}) syz_emit_ethernet(0x0, 0x0, 0x0) 3m22.433926943s ago: executing program 9 (id=6412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x300000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 3m15.039009202s ago: executing program 9 (id=6414): socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1, 0xb000000}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) 3m13.011232455s ago: executing program 48 (id=6408): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x3, 0xe000, 0x0, 0x0}], 0x1}) 3m8.655828747s ago: executing program 49 (id=6411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x37, &(0x7f0000000100)={&(0x7f0000000400)=@bridge_newneigh={0x38, 0x1c, 0x300, 0x70bc25, 0x25dfdbfe, {0x2, 0x0, 0x0, r6, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_PROBES={0x8, 0x4, 0xb2}, @NDA_MASTER={0x8, 0x9, 0x1ff}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000000114010027bd7000fddbdf5c050001"], 0x18}, 0x1, 0x0, 0x0, 0x4044880}, 0x8000) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040), 0x0) r9 = accept4$nfc_llcp(r5, &(0x7f0000000180), &(0x7f0000000280)=0x60, 0x180800) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x26}}}) syz_emit_ethernet(0x0, 0x0, 0x0) 2m58.198997916s ago: executing program 50 (id=6414): socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1, 0xb000000}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) 2m22.060504642s ago: executing program 4 (id=6424): r0 = fsopen(&(0x7f00000002c0)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000140)='ramfs\x00', 0x0) io_uring_setup(0x4001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) write$char_usb(r1, &(0x7f0000000300)="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", 0x1000) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r6 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x4, 0x1, 0x5392, 0x9, 0x9, {0x0, @in6={{0xa, 0x4e70, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008"], 0xe4}}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) 2m14.22021069s ago: executing program 4 (id=6425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x300a, 0x4008000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x15, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m10.963687439s ago: executing program 4 (id=6426): syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x2c00, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x11, "9606053d0006ff003a0000b61af93a"}]}, @lsrr={0x83, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 2m8.436603192s ago: executing program 4 (id=6427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffff}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0xe4}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xffffffff, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {0x0, 0x0, 0x400000}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4f6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x5, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1m58.264497203s ago: executing program 4 (id=6428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x10) bind$inet(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000640)={[&(0x7f0000000180)='/dev/sequencer2\x00', &(0x7f0000000240)='{\x00', &(0x7f0000000400)='/dev/snd/midiC#D#\x00', &(0x7f0000000440)='**\x00', &(0x7f0000000480)='tls', &(0x7f00000005c0)=')^+@@!\x00', &(0x7f0000000600)='&$.\x00']}, &(0x7f00000003c0)={[&(0x7f0000000180), &(0x7f0000000500)='),\\@\\(&\x00\xffGiVI\xd5\xabbn}\xbb\x8c[\x82\x1b\x7f{,\bj\xd2\xc6\xc9\xd6\xe7!\xb2\x7fZ\xb8C\xdex\xf5\xcd<795\xf6\\\x98#\xee\x10\xa2\xe8o\b\xca\x89\xf6XA\xdb~\x8b\x91\xfa7G\xe3u*a\xa6\x17T\xa9U\x8dS\xd6\x00\x00\x1c&\x00\x00\x00D/A\x1d\xd6\xd8\x86\x9d\x90/\xa6\x85\x83\x03\xdd>\xe9\xb3R\xe8]\xa0\x04#X\x9e\xb5s\xec\xd7\xec\xa0\xcf\x8a!\xd7\x16)#+g\xd1fT\xef\xfa\xb0\x82', &(0x7f0000000680)='&$.\x00\xca\r\xce\x19\x9c\xfc\x89\xe2j\xcb\xc4\a\x01\x12\xcc\xee9g\xa7\xdeYV7\t\x8c\x90\xb7\xb6\x164\x92\x04c\x05E\xd5,\v\xdb:\xe3\x93\x8b\xc4\fq\xc3\xc3\f\xea>\xbci%\xa3\x00\xff\x0e\x13\x16\xf8a\x87\xe4};\xd9V\xd1\xc0u\xb3 \xc8\x16\x174\x92w5\xcb', &(0x7f0000000300)='^)!\x00']}, 0x400) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r4, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1m49.768968035s ago: executing program 4 (id=6429): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xfffffffd, 0x9}}, 'proc\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000015000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000020850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r6, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400000454490cb7acda3c74d369f42b8fd63d58a224f8898eafe5229092c3c6573f7778c781a1fd8f5beb0221608fd0ed51b8cb10d6d35d6964cd962fb466dc8a0270c587e7be0c1b2b85c18588865ce927ab9e1d758058acf44afa48b973136152"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r10, 0xc008561c, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 1m33.013074474s ago: executing program 51 (id=6429): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xfffffffd, 0x9}}, 'proc\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000015000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000020850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r6, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400000454490cb7acda3c74d369f42b8fd63d58a224f8898eafe5229092c3c6573f7778c781a1fd8f5beb0221608fd0ed51b8cb10d6d35d6964cd962fb466dc8a0270c587e7be0c1b2b85c18588865ce927ab9e1d758058acf44afa48b973136152"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r10, 0xc008561c, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 14.793247023s ago: executing program 5 (id=6417): syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x11, "9606053d0006ff003a0000b61af93a"}]}, @lsrr={0x83, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 13.781426478s ago: executing program 5 (id=6432): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a000201020904010000010200000904010101010220000b24020109028d01e0fe9807240104ff03000905010920"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0xb00, 0x24}, 0x8080) syz_usb_control_io$rtl8150(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000100)={0x0, 0x1, 0x91, {0x91, 0x22, "15aba27d0beecb0c92898ca431e0e209106a3338c095646699ca23b862d88afaae638045e276232b9c558e57fb967457a08b6a876eef61a52e1040e3f944f381d0c0c64582efca42410962917fc646349e623e5a0fdeda91d9d826f5f8e62f54731eba620989a586f1ff434660f5d272dec374071a355c09d18b9b1029cffc2673a951fd3706581505082101560eb3"}}, &(0x7f0000000c40)={0x0, 0x3, 0x96, @string={0x96, 0x3, "af06d7a9698d0b16f1538460f76e7db806b280c1de358364397a571bc09848c3193a6336d490bf093473cd851c21230c35a1d12d21cfbf52f3f846029f83d239cbcb73fbae5b3a6d6cd3de589bf2b170561b5bd346e252d6a379140aa46cd3fb4d8fa469c6330b493f923652105a524f24b02cd8afffc021735a9bb7fae5581517bac7e7fbaa1abd6e61cf44897399b1002a623e"}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x20, 0xe, 0x61, "50eb3962ee3776cb6abea6c107e422379c5160fcddbbecad93bf1e65c06787cbd8c7aa3d3d6b83a95a377861cc01377c1b3554bf20a7e18ed283481dd9fc138b92e85ebdf7d2a19e7e55b2acd45e54e0198963e4f2a247c77998f1ad3e5df5a58f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000b80)={0xc0, 0x5, 0x6, "010200000000"}, &(0x7f00000001c0)}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r5, &(0x7f0000000040)=0x731, 0x8) syz_usb_control_io$rtl8150(r0, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0x9, 0x76, {0x76, 0x3, "26b3637564f5e1a87cd2e3b4258a5bca70dfdb53192a07a66213f1fcfb78978194a0da67c1ab8882408724b7732e7cbb617e52180f094ed9c5742fa09ee3c64da5ab12c10a3b8a15efe784d848f77ae94646e6e4c80c3ea9366fb5762efe20ec80fdf2eaf951b4e257639cfd40c582d9e77a9d49"}}, &(0x7f0000000440)={0x0, 0x3, 0x48, @string={0x48, 0x3, "23d66a65ad4aaf521f7521c0bdc4f8379cc029cb5a423194a2fc94b53e5c27f8436ea58129577dd3534b4554f3d3a6747bbac97f7dd6e89b1d501ed7ee6cae0c98c870e7d848"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0x30, 0x14, "5153324761e1fac8a60b9ec6c304cc20618ac78b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0xc0, 0x5, 0x1, "13"}, &(0x7f0000000600)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.096660734s ago: executing program 5 (id=6436): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f0000000380)="8a709792e605da895d37ed490eb66d350e3865c5dbac4d88c5aec8d61545af32f06d078d71f95cff8df102ef4d9947b837133f1744ee533228b60aad21fb289493e5d615fb5df4473b024eaa3852856e1845231137530335e76de02ed6fac366e39a9e45fcedeb1f7fdc440e4060dcd8f6f790b9d3fb", 0x76, 0x5e93) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f00003ea000/0x2000)=nil) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x100000, 0x2001, 0x1}, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc937253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d85468f02e8b5ad561098840402f168e1012bdfd6977a7fe9cd5b8a3ed012d8e74a3479f", 0x34}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 10.276814211s ago: executing program 3 (id=6438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@delqdisc={0x318, 0x25, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0xd}, {0xc, 0xfff2}, {0xd, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x110, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x101}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe5}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffe}, @TCA_STAB={0x1b8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x5, 0x18000000, 0x1, 0x1ff, 0x2, 0x8}}, {0x14, 0x2, [0x7fff, 0xc, 0x5, 0xc8, 0xbaea, 0x9, 0x7, 0x6]}}, {{0x1c, 0x1, {0x75, 0xb, 0xff9e, 0x5, 0x1, 0x2, 0x8, 0x6}}, {0x10, 0x2, [0x7, 0x8000, 0x100, 0x8, 0x800, 0x1]}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x2, 0x0, 0x2, 0x1, 0x5}}, {0xe, 0x2, [0x5, 0x33, 0xbc0, 0x7, 0x5]}}, {{0x1c, 0x1, {0x7, 0xff, 0xff, 0x0, 0x1, 0x0, 0xf, 0x5}}, {0xe, 0x2, [0x8, 0x0, 0x1, 0x0, 0x998]}}, {{0x1c, 0x1, {0xff, 0x7, 0x9, 0x5, 0x2, 0x4, 0xe, 0x5}}, {0xe, 0x2, [0x2, 0xfffc, 0x81, 0x1, 0x100]}}, {{0x1c, 0x1, {0xf7, 0x2, 0x553f, 0x6, 0x1, 0x7d0, 0x7, 0x7}}, {0x12, 0x2, [0xfff8, 0x80, 0x485, 0xa, 0x8, 0x4, 0xbce]}}, {{0x1c, 0x1, {0x2, 0x6, 0x6, 0x2, 0x2, 0x200, 0x0, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x1, 0x81, 0x4, 0xf5, 0x2, 0x9, 0x6, 0x6}}, {0x10, 0x2, [0x5, 0x5db8, 0x3, 0xb8, 0x81, 0x2]}}, {{0x1c, 0x1, {0x90, 0xe, 0xfff, 0xfffffffd, 0x2, 0xffffff7f, 0xd, 0x8}}, {0x14, 0x2, [0x9, 0x4e89, 0x7, 0x97, 0x74, 0xa4, 0xfc00, 0x5]}}, {{0x1c, 0x1, {0xfa, 0x40, 0x3, 0x10001, 0x0, 0x2, 0x9, 0x2}}, {0x8, 0x2, [0x1, 0x9]}}]}]}, 0x318}}, 0x20000004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r0, &(0x7f0000000040)={r1, r2}) r6 = socket$pptp(0x18, 0x1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000001300)) readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}], 0x1) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f80, 0x4, 0x6, 0x9, 0x10000008, 0x4, 0x71e, 0x13, 0x8, 0x7f, 0x3f, 0x3c, {0x0, 0x1}, 0x3, 0xed}}) connect$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) socket$inet_mptcp(0x2, 0x1, 0x106) 9.233316122s ago: executing program 3 (id=6440): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a000201020904010000010200000904010101010220000b24020109028d01e0fe9807240104ff03000905010920"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.997822099s ago: executing program 1 (id=6409): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x600, @empty=0x700}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}}}}, 0x0) 8.825496794s ago: executing program 1 (id=6442): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) io_submit(0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f00000043c0)="11000000000000", 0x7}, {&(0x7f00000000c0)="6bb816e1731906937b7bb764dab0eb419c03db9ce3c3738a8d35afe09eef76f72647dcaa", 0x24}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) r5 = socket(0x8, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r4], 0x0, 0x2000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 7.620325883s ago: executing program 6 (id=6446): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) chdir(&(0x7f0000000000)='./cgroup\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0xffffffff) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.532262479s ago: executing program 3 (id=6447): syz_ublk_setup_io_uring(0x6751, &(0x7f00000004c0)={0x0, 0xf6ab, 0x80, 0x3, 0x32a}, &(0x7f0000000540), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c030109021b0001000000040904080001030000000905", @ANYBLOB="9fef"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.994360603s ago: executing program 1 (id=6449): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000840)={'wlan0\x00', &(0x7f0000000700)=@ethtool_regs={0x4, 0x5}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x20) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_disconnect(r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000041000100fcff0700040000000100000004004880140001801000108004000b8008000100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.632342506s ago: executing program 6 (id=6450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e0000000000e9fae391b3e5806b2374193f"], 0x28}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) io_submit(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002c80)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000320800040043000000a80016000a290040fcff0c3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a979832adbca28d9fb1ad28516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b0d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5f0cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9374e2501f7c82a89276a2e116214695", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x14) 4.350853342s ago: executing program 6 (id=6451): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x3d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001280), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "10051200"}, 0x28) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000240)={0x3, 0x1000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003904000000000000ea39bda82e62000000000000", @ANYRES32=0x0, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14140006000300bf000000"], 0x40}}, 0x0) 4.187628938s ago: executing program 3 (id=6452): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r0, 0x0, 0x10, 0x6) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x56, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r4, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x854) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 3.44560299s ago: executing program 7 (id=6453): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xfffffffffffffed3, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) gettid() write(r2, &(0x7f0000000840)="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", 0x259) 3.30106889s ago: executing program 6 (id=6454): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) modify_ldt$write2(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300040000000a881fc10c10a428219c00000000e1fb31cfa89798ead3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000001a000018120000", @ANYRES16=r3, @ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r5}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2e0000006c0001002abd7000ff9bdf2500000000", @ANYRES32=0x0, @ANYBLOB="914001004000000014000300766574683000"/28], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20) 2.849871089s ago: executing program 7 (id=6455): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x3b00, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 2.680763295s ago: executing program 7 (id=6456): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x32a46adde0d34f9e, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r4]}}], 0x20, 0x24040881}, 0x24004094) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x3, &(0x7f0000000440)) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x63}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x2200a, 0x401}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@isdn={0x22, 0x5d, 0x1b, 0x5, 0xff}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000600)="ca3c06af09c5d4d782aca4d014d33d358f1af6b65916b5839173c5ce775c87d64834dc876932da931b71a7e7d8644519748c4318aa850b8ed776e779629934f088bfcee88dd07ccf74305f88d61b3c8b69d2bdc6a7abd31769205869120ceae2d3766a9357ac03930a6f1b90451b4b677fc597f331f61c99be9e3ccea5b01dde02c86dd46d720db6339f51f5f37f307ad32040280385397d93e74c245cef16a623f00ffdcafe2bc9e436aef635a63caf6beb2bafbb9734724bb93bc52c5cc33e5572c111f86f3a3190a0859f31236fa71276262cd90961c3ebc78ef2054800c562b4a534ddd40029d1", 0xe9}, {&(0x7f00000001c0)="b829bd69d623bf5d631883cf86b5c9282b220542476b16a4c5ce98c959dad00c866d11acdbca6db8b8de3dd9b464cf1d39bab25e915417cd46ef36ba215a4fad1eeac7d5b64ad60da03cc9f1a6d982f7f3702a6bbf31f44b352d0911089738ae56f23732ed04e12a90f00c97c0d36985a0baa637259a331285f4707808c50044efef8a6c25167909147c51980069b18228109cc94820167aa365f4ada98ff877eb0b5ed47a325ad59ae7d9b0dcc3", 0xae}, {&(0x7f0000000280)="cc61a80753fefa7141c146b0f95bef4305587962b403bb0a3b9876741acbb9ca34d97c3220f2a073c2dc8f4272f9b4f97f51b5110613895f73943ec9c252aecf1567af7a76879ec22195cb9f62a7412b18aecab5f289fc7b1c1c4780d353719176d179c580d464df3d460f6f2819616196c117f60fb91a518f9fb2dca139fe7c0e1430f877324b04401e529f0bdbb6fcd1822e6b8fedcf3bc7192133689e2e4651eac7285d1f076a2d389af823886873", 0xb0}, {&(0x7f00000000c0)="396e3751135c78d8de3cdc71557adc016ff3b3eaef65c88f4464a47e59ddef35521b518c293b7701ecce9378a177c5d3a1019ee33bef108c0aa75089e66d2a10558b38c1ffaef3cb2390085b1120fbe793491ae8a517b74de13c4c5487ec58ca7bc419a6a545582b6609636efb2de72bf0", 0x71}], 0x4}}], 0x1, 0x20000081) 2.444351967s ago: executing program 7 (id=6457): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') write$eventfd(r1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r3, 0x9f8b}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r2) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) dup3(r0, r4, 0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x38, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@typed={0x8, 0x15f, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x1004c000) writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000000800)="8933", 0x2}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 2.322842896s ago: executing program 6 (id=6458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f00000008c0)={0x5b43, 0x400}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r9 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x2}}]}}]}, 0x48}}, 0x20040080) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r11, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x6f6a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x2) r12 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r12, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r12, 0xe, &(0x7f0000000880)={0x2, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/78, 0x4e}], &(0x7f0000000840)=[0x5, 0x8], 0x5}, 0x20) 2.174063171s ago: executing program 7 (id=6459): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89", 0x3f0c) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9027, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x1b61, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r6, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 996.318435ms ago: executing program 1 (id=6460): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002ac0)=@newtfilter={0x12c0, 0x2c, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0x8, 0xe}, {0x7, 0x2e1d36921f1d5c83}}, [@filter_kind_options=@f_fw={{0x7}, {0x1294, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x40d565c4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FW_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x9, 0xd, 0x10001, 0x1, 0x8, 0x9a, 0x1, 0x3, 0x6b, 0x0, 0xc, 0x8, 0x9, 0x9, 0x2, 0x1, 0x3, 0x79, 0xbf5e, 0x5f0f, 0x8, 0x9, 0x7, 0x8, 0x1ff, 0x45d3, 0x1000, 0x71, 0x30, 0xc, 0x8, 0x6, 0x401, 0x8c, 0x44e543f4, 0x800, 0x6, 0x4, 0x101, 0x3, 0x8000, 0xb, 0x4, 0x30, 0x4, 0x5, 0x5, 0x800, 0x53, 0x3, 0x6, 0x1, 0x7fff, 0xffffcb64, 0x7, 0x7fffffff, 0x0, 0x8, 0x3, 0x6, 0x3, 0x4, 0x2, 0x10, 0x0, 0xfc2, 0x1, 0x7, 0x1ff, 0x40000000, 0x8, 0x9, 0xfff, 0x59, 0x84e, 0xce, 0x1, 0x2, 0x6, 0x6, 0x400, 0x0, 0x1, 0x1, 0x3, 0x3ff, 0x8, 0x55d2, 0x4, 0x6, 0xf3ee, 0x0, 0x5, 0xeae, 0x0, 0xf65, 0x3b, 0x9, 0x6, 0x9, 0xfffffffc, 0x9, 0x1, 0x3, 0xd, 0x7, 0x4, 0x7, 0x0, 0x3, 0x0, 0x7, 0x9, 0x7, 0x39, 0x8, 0xab, 0x6, 0x3ef, 0xfffff75b, 0x724d, 0xfff, 0xfff, 0x101, 0xffff8000, 0x9, 0x5, 0x7, 0x7, 0xb15, 0x197, 0x7fffffff, 0xc4c, 0x4, 0x6, 0x8001, 0x8, 0x7, 0x7, 0x6, 0x8, 0x6, 0x6, 0x6, 0x7, 0x4, 0x3, 0xfffff444, 0x5, 0x4, 0x1, 0x1000, 0x993, 0x7fffffff, 0xf, 0xfff, 0x7fffffff, 0x4, 0x4f, 0x80, 0x8f, 0x81, 0x1ff, 0x9, 0x7ff, 0x6, 0x9, 0x7fff, 0x0, 0x401, 0x6, 0xac, 0x50a, 0xd, 0x3, 0x1, 0x9, 0x1, 0x3b2, 0x3c46, 0x6c6e, 0x2, 0x1ff, 0x7, 0x3bb, 0x2, 0x4, 0x80000001, 0x7, 0x8, 0x7fffffff, 0x2, 0x2, 0x9, 0x7, 0x9, 0x4, 0x80000004, 0x7, 0xc, 0x9ac, 0x10, 0x70d1, 0x1, 0xba, 0x3, 0x7f, 0x9, 0x8, 0x7, 0x4d4, 0x9, 0x9884, 0x401, 0xe6, 0x6, 0xff, 0x17ba, 0x0, 0x7, 0x4, 0x6, 0x6, 0x4, 0x8, 0x2, 0x100, 0x2, 0x80aa, 0x5, 0x2, 0x7ff, 0x1000, 0x8, 0x9f, 0x4, 0x35, 0x7, 0x7501, 0x7, 0x1, 0x2, 0x7, 0x8, 0x9, 0x80000001, 0x4b, 0x3, 0x5, 0x8000, 0x8, 0x5, 0x6, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x86e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb46b21a9, 0x3, 0x2, 0xffff, 0x3ff, 0x8, 0x80000000, 0x5, 0x3, 0x8, 0x2, 0x4, 0x9, 0x6, 0x7ba5, 0x10001, 0x9, 0x9, 0x4, 0x1a5, 0x5, 0x7, 0x9, 0x38da, 0x6a6, 0x400000, 0x4, 0x2837773c, 0x8000, 0x3, 0x435f4dbf, 0xfff, 0x9, 0x89, 0x6, 0xffff, 0x400, 0x0, 0x1a, 0x3ff, 0x3, 0xfffffffb, 0x9, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0xc08, 0x0, 0x6, 0x4, 0x2, 0x401, 0xffff, 0x4, 0x8001, 0x800, 0xe0, 0x6, 0xffffffff, 0x5, 0xcfbc, 0x1000, 0x8000, 0xc, 0x9, 0x7f, 0x9, 0x10001, 0x7, 0x2, 0x51ec725e, 0x6, 0x1, 0x3, 0x7, 0x1, 0x6, 0x1, 0x89a9, 0x80000001, 0x5, 0x3, 0x8, 0x5ea, 0x895d, 0x7f, 0x4384, 0x3, 0xf, 0x2, 0x2, 0x2, 0xe, 0x6, 0xad, 0x67, 0x1, 0x5, 0x6, 0x1, 0x4, 0x0, 0x6, 0x4, 0x7, 0x800, 0x7, 0x80000000, 0xff, 0x6228, 0x1ff, 0x2ad08, 0x40000, 0x3, 0x7, 0x1, 0x0, 0x101, 0x4, 0x8, 0x0, 0x9, 0x10000, 0x8, 0x800, 0x9, 0x17, 0x2, 0x3, 0x6, 0x7fff, 0x8001, 0x1, 0x10001, 0x9, 0x60e8, 0x1000, 0xb9b6, 0x0, 0xff, 0x7, 0x1, 0x3, 0x5, 0x3, 0x7, 0x3, 0x1, 0xdd74, 0xdd900000, 0x5, 0xb0da, 0xc0, 0x6, 0x9, 0x3, 0x9, 0x80000001, 0xe, 0x2, 0xffffffff, 0x8001, 0xfd50, 0x0, 0x9, 0xfffffeff, 0xe, 0x3, 0x2, 0x6, 0xad13, 0x3, 0x6, 0xd0, 0x7ff, 0xffffffc0, 0x7f, 0xad64, 0x40000, 0x8, 0x4, 0x1, 0x2, 0x9, 0x1, 0x8, 0x6, 0x3e, 0x0, 0x2b992f87, 0x2, 0xb3e, 0xcf, 0x9, 0x9bdf, 0xffffffff, 0x0, 0xfffffffb, 0x3, 0x1, 0xa77, 0x4, 0x389d, 0x2, 0x4, 0x4, 0xfffffff8, 0xffffffff, 0xfffffff9, 0x5, 0xb758, 0x1d, 0x9, 0x401, 0x0, 0x1ff, 0x4, 0x66, 0x1, 0x401, 0x7, 0x9, 0x1, 0x0, 0xd, 0x6, 0x7fff, 0xfffffff8, 0x7, 0xc, 0x9, 0x800, 0x2, 0x40, 0x7, 0x100, 0xac3, 0x9, 0x401, 0x7, 0x7, 0x3ff, 0x0, 0x6c3, 0x0, 0x5, 0x2, 0xffff8afa, 0x4, 0x9, 0x3, 0x101, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_POLICE={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4f, 0x2, 0x80000000, 0x5, 0x8, {0x9, 0x0, 0x2, 0xd, 0xfae0, 0x7}, {0x0, 0x1, 0x9, 0x1, 0x8, 0x1}, 0xfffffffa, 0xbafff1bc, 0x482}}]}, @TCA_FW_ACT={0x9dc, 0x4, [@m_skbedit={0xfc, 0x15, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8, 0x5, 0x2a3, 0x10}}]}, {0xa8, 0x6, "f84a966aac6424e9e6083d1ba6eee0e707aa7deca3d46af9725c1f4d36e8f953119dbb444ea1735a5e3afcc4bf19d3cddf1bd8030c6740ff7654cb8782b87809da9619d87a08040ee935620a99e66dc01c362707773e478c93ca880095b13130eebc5e3ea11a994cf4da6c44a2e12c590f0b30b6c25bcf4e7a01ce48dfc5ba5ba60be932557c959be386ee6f8d3e73ba6c18e9d4473b56ea3ce69ff6b90183ddb0ea2f18"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_connmark={0x16c, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x0, 0x6, 0x7}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x20000000, 0x572, 0x3ff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x6, 0x80000000, 0x1}, 0x9}}]}, {0xe5, 0x6, "209a36689b57c2ab76d690ceb6e288138cda64ca7e447833128cb7310f6721d1c3b3cc2d75b39fcc405bb0daf977a50caf69195a079b7351044423c21dc2a248bb04cefca03e06cfc7a0b0ba3ff3ed58bfb0cda1cd13a6307f05d8b4a162aa6f9140a073b5e7d2f2ce54adbbd7a06a5a94b9bf7d9d76630e620c9a9207f1a58b1b2e4f6411a38b92295e7fab29ea06a54d81bbf9daf417f652d728d4af34e51d0c049dffcb6d36a1fdcd3dd76e619361b7f80003fefa81243a23f0374145d2d40945a2692eacd4cd20c4ffd8424531024882346e964c39b21a2e4953d2b944dd1e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x158, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x180, 0xa, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff1, 0xa0, 0x10000000, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x1, 0x0, 0x2, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xb, 0x8, 0x6, 0xfffffffc}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x0, 0x20000000, 0x5002, 0x5}}]}, {0xe9, 0x6, "6a9e0305ab0e713be56e463b030296cf82d1ebab26e881462815d72e71d4ed66f9f21ac29ba68c55f4149e98d18c54c23fb31211a4ebcbe1784bc3ef3d02816564b82d710db986098e8e3678f28166a928710081708be06ed7e808e666724f93a7910f1c53d174b4bee2324f9b5a787385a78f4a68c4987bac9524329b7a0c2506d1ef87d5609f4144ba980bd1d860ff1f00a9418f1ac5b3ec40203d6d32eec8fe82176ce9f30cd49b6fcf3d11ba1154d64aa225eb8202d5efd69e817389047ebf6f4ea998c3a5b9893f965398844caa1942f09aeb35e7fd0f1de72eb9bf2a01433186c788"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x138, 0x12, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x20000000, 0x7, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6863, 0x11ec, 0x6, 0xaa6b, 0xd}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc9d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6d1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x447}]}, {0x92, 0x6, "86c53667df67c91fc25380e6b18eab539db794e8859faa9d4af0effe840828200a21d0906b7ee1916d680384ca9ed317d52f4070acf49598a7b9330b8b78f73361f97a0bfa81f2f81f1343236de30273599104c01c4616383417afc03de3c25dcf193e7334c143b7aa4ef5bfaf14af3142e96128934c0800e719e054e0fbef72e0d902dc37bbf9679b03da323c15"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xc8, 0xd, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x97, 0x6, "d67c5c11a0dfbc88c2c7cc0918d5278a491c0b398be5485e04210ecd4a85b9564388cfe6d21dde8dead273724f93b040183a22f55ab62439910b9f03d1091266457bc6e573d51156911d446aecd0a49b80ee0d86d2fa40b0fe73949314ea070afe0fe1bf5104f5836050ddb7ac1d8e438ca015c69308314140b2eaaacef7c15ff4437ee0a9c4b9acf43b50990aacab01e0eae6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x134, 0x20, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x8, 0xc2, 0x1, 0xdd}, {0xfffc, 0x0, 0x3, 0x2708}, {0x8, 0x9, 0xf}, {0x10, 0x63, 0xf9, 0x3}]}]}, {0xe0, 0x6, "788169400c78f443f399c2d70a10f4eedfd88e638e058471b8da4f343f2fad0431918b19c6c0026503c488295674b78cdc173c73b188d3b2e345bfb06323d3c9c025e2199b074df584abe9f0fa126c9a1ddf9a4265a26e884fe5b979e5bf108ed86e47bb374a9958fe9e977fcf4153ed03549510403883bd1674c28c0c645cebeddd67e589a27ad43c37c4b39b6a626c3f70f89c50b72f4bb27419e081b78f890df2ea88b238bfbb978650b6dd2611c0b110b2860503be6bc356b8420b156bc5c7820c56ecd1ff43c58470a9832b630b099c92e2a2c1944c4f9a6e79"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x164, 0x19, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x10000000, 0x5, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xed}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xcf, 0x6, "ac9fedbad16720f6b3b2a808ef34d9edab1d51c98104eb76e821252a3f8dbb265582de1059df4c3eba1e92a731bd61dc4d8b47a49ca3acf15aa26a47798f40f6f2fa8946703b7e494383935fe4c09b816c0c6a208c1b65d35166019af9270c7fd2b11f1572dbc4aa87e432edf561d838b02e175ad12c4a72e1be99f641a86db5102c87e56627491fdf008855886e2813536f17bb4b2b285769f8daed1f6797e96425f4e9b9a037e625654b87eef1c24616fe513f740bc702c50eae7e8ef2b473369a3a65576227a32c12b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x101800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0xd, 0xa}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004800}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143342) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setpriority(0x1, 0x0, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) shmctl$SHM_LOCK(0x0, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) 873.819124ms ago: executing program 3 (id=6461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090400f5000000000000020000000900010073797a30000000000900020073797a32f5ffffff43000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 770.148622ms ago: executing program 7 (id=6462): r0 = syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x57, {0x2, 0x4e24, @loopback}}, 0x24) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x57, {0x57, 0x22, "85fc55bb61564640d233667a1c6e6713e1d84895be2fab3063dc263e17080a09906a8ba0f909a3c3a51b11c2ebb81ac13ab629cfd06bb5fd7a796abda3eea7a792f56590ad7981709ea69dbfa11bc90f2a46dd198f"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}}, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x40, 0xc, 0x74, "2479d3047c86ed203ba9092269aea44ebcdee0c3fcd7db77389a22778fc437b6c97090df6e33f7591f536fb78da1df71b9c4bd95f3fbb848ab67ca84f63593494ea87c72b7d261cb1f604b228326e2e6599463b2bacf37227268a299fc0ea4980b3c4f7dc6dc0fcc41a73b9f99681bd0d238447d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "6dffdd297fd2a01516147ef19b5cbe7f44274b316e51cdf5c6a0409b98690e70c507a87fe0d0b18a2bba37fd67e157"}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000040)={0x80}) 615.742499ms ago: executing program 3 (id=6463): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a000201020904010000010200000904010101010220000b24020109028d01e0fe9807240104ff03000905010920"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0xb00, 0x24}, 0x8080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 606.390282ms ago: executing program 6 (id=6464): signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x7f]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x2f, 0x2034}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000200000004000b00bca384af9e8e215dfcf612f5d3e3aa1f8dc792b0f8f049b6"], 0x24}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24044080) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f3c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x1000000, 0x234, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x2b0}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 0s ago: executing program 1 (id=6465): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r0, 0x0, 0x10, 0x6) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x56, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r4, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x854) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) kernel console output (not intermixed with test programs): 50:50:50 [ 244.110620][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.238095][ T31] audit: type=1400 audit(1787807800.029:595): avc: denied { mounton } for pid=7137 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 244.239854][ T31] audit: type=1400 audit(1787807800.029:596): avc: denied { mount } for pid=7137 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 244.348076][ T5608] Bluetooth: hci5: command 0x0c1a tx timeout [ 244.492097][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 244.553664][ T7511] FAULT_INJECTION: forcing a failure. [ 244.553664][ T7511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.567972][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT(full) [ 244.567998][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 244.568010][ T7511] Call Trace: [ 244.568017][ T7511] [ 244.568024][ T7511] dump_stack_lvl+0x100/0x190 [ 244.568057][ T7511] should_fail_ex.cold+0x5/0xa [ 244.568083][ T7511] _copy_from_user+0x2e/0xd0 [ 244.568108][ T7511] copy_msghdr_from_user+0x9f/0x4c0 [ 244.568130][ T7511] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 244.568163][ T7511] ___sys_sendmsg+0x106/0x1e0 [ 244.568190][ T7511] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.568209][ T7511] ? get_pid_task+0x106/0x250 [ 244.568243][ T7511] ? find_held_lock+0x2b/0x80 [ 244.568283][ T7511] __sys_sendmsg+0x160/0x210 [ 244.568310][ T7511] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.568354][ T7511] do_syscall_64+0x123/0x790 [ 244.568384][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.568402][ T7511] RIP: 0033:0x7f30e0d9e0d9 [ 244.568418][ T7511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.568435][ T7511] RSP: 002b:00007f30e1d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.568455][ T7511] RAX: ffffffffffffffda RBX: 00007f30e1025fa0 RCX: 00007f30e0d9e0d9 [ 244.568467][ T7511] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 244.568478][ T7511] RBP: 00007f30e1d31090 R08: 0000000000000000 R09: 0000000000000000 [ 244.568489][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.568500][ T7511] R13: 00007f30e1026038 R14: 00007f30e1025fa0 R15: 00007ffec04f5998 [ 244.568530][ T7511] [ 244.787447][ T7518] netlink: 'syz.5.402': attribute type 1 has an invalid length. [ 244.795855][ T31] audit: type=1400 audit(1787807800.579:597): avc: denied { write } for pid=7513 comm="syz.1.400" name="nullb" dev="configfs" ino=3460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.860898][ T7514] erspan0: entered promiscuous mode [ 244.887375][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 244.908241][ T31] audit: type=1400 audit(1787807800.699:598): avc: denied { read } for pid=7513 comm="syz.1.400" name="power" dev="configfs" ino=16174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 244.951221][ T31] audit: type=1800 audit(1787807800.739:599): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.400" name="power" dev="configfs" ino=16174 res=0 errno=0 [ 245.114667][ T7524] team0: No ports can be present during mode change [ 245.184380][ T7525] fuse: Unknown parameter 'ÿ0000000000000000029300000000000000000003' [ 245.546663][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 245.563211][ T7514] null_blk: disk nullb1 created [ 245.610678][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 246.650931][ T7546] gtp0: entered allmulticast mode [ 246.696438][ T5727] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 246.886030][ T5727] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 246.926353][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 246.926402][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 247.233166][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.233210][ T5727] usb 3-1: Product: syz [ 247.233224][ T5727] usb 3-1: Manufacturer: syz [ 247.233237][ T5727] usb 3-1: SerialNumber: syz [ 247.505619][ T7539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.513428][ T7539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.772830][ T5727] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 247.772869][ T5727] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 247.772916][ T5727] usbserial_generic 3-1:1.0: generic converter detected [ 247.777100][ T5727] usb 3-1: generic converter now attached to ttyUSB0 [ 247.827494][ T5690] usb 3-1: USB disconnect, device number 16 [ 247.850846][ T5690] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 247.862495][ T5690] usbserial_generic 3-1:1.0: device disconnected [ 248.063133][ T31] audit: type=1400 audit(1787807803.839:600): avc: denied { getopt } for pid=7560 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.169660][ T31] audit: type=1400 audit(1787807803.949:601): avc: denied { create } for pid=7560 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.326805][ T31] audit: type=1400 audit(1787807804.119:602): avc: denied { name_bind } for pid=7558 comm="syz.5.415" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 248.400067][ T31] audit: type=1400 audit(1787807804.189:603): avc: denied { module_load } for pid=7570 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 248.523014][ T7576] team0: No ports can be present during mode change [ 248.531228][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 248.547621][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 248.624378][ T31] audit: type=1400 audit(1787807804.409:604): avc: denied { open } for pid=7577 comm="syz.2.420" path="/dev/ttyq8" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 248.946597][ T5690] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 249.123899][ T5690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.135221][ T5690] usb 6-1: not running at top speed; connect to a high speed hub [ 249.147473][ T5690] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 249.169467][ T5690] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 249.180269][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.219235][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.230985][ T5690] usb 6-1: Product: syz [ 249.235504][ T5690] usb 6-1: Manufacturer: syz [ 249.241558][ T5690] usb 6-1: SerialNumber: syz [ 249.635902][ T30] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 249.797934][ T30] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 249.823087][ T30] usb 3-1: string descriptor 0 read error: -22 [ 249.823197][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.844620][ T30] usb 3-1: config 0 descriptor?? [ 249.858590][ T30] usbtest 3-1:0.0: FX2 device [ 249.858623][ T30] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 249.910502][ T5690] usb 6-1: USB disconnect, device number 2 [ 250.080445][ T6259] udevd[6259]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.088506][ T31] audit: type=1400 audit(1787807805.869:605): avc: denied { ioctl } for pid=7610 comm="syz.3.424" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 250.091108][ T31] audit: type=1400 audit(1787807805.869:606): avc: denied { write } for pid=7583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.187794][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.194359][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.331380][ T31] audit: type=1400 audit(1787807806.119:607): avc: denied { write } for pid=7619 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.482570][ T31] audit: type=1400 audit(1787807806.269:608): avc: denied { create } for pid=7623 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 250.484774][ T31] audit: type=1400 audit(1787807806.269:609): avc: denied { ioctl } for pid=7623 comm="syz.5.425" path="socket:[17529]" dev="sockfs" ino=17529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 250.538454][ T7624] Bluetooth: MGMT ver 1.23 [ 251.261918][ T7643] FAULT_INJECTION: forcing a failure. [ 251.261918][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.262002][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.5.428 Not tainted syzkaller #0 PREEMPT(full) [ 251.262025][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 251.262035][ T7643] Call Trace: [ 251.262041][ T7643] [ 251.262047][ T7643] dump_stack_lvl+0x100/0x190 [ 251.262071][ T7643] should_fail_ex.cold+0x5/0xa [ 251.262087][ T7643] strncpy_from_user+0x3b/0x2d0 [ 251.262105][ T7643] do_getname+0x78/0x390 [ 251.262126][ T7643] __x64_sys_mkdirat+0x78/0xc0 [ 251.262139][ T7643] do_syscall_64+0x123/0x790 [ 251.262157][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.262169][ T7643] RIP: 0033:0x7f2ea559e0d9 [ 251.262179][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.262191][ T7643] RSP: 002b:00007f2ea64d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 251.262202][ T7643] RAX: ffffffffffffffda RBX: 00007f2ea5826090 RCX: 00007f2ea559e0d9 [ 251.262209][ T7643] RDX: 00000000000001ff RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 251.262216][ T7643] RBP: 00007f2ea64d4090 R08: 0000000000000000 R09: 0000000000000000 [ 251.262222][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.262229][ T7643] R13: 00007f2ea5826128 R14: 00007f2ea5826090 R15: 00007ffe0162d668 [ 251.262242][ T7643] [ 251.746879][ T5727] usb 3-1: USB disconnect, device number 17 [ 251.920913][ T5784] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 252.077457][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 252.083083][ T5784] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 252.094739][ T5784] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.094783][ T5784] usb 5-1: can't read configurations, error -61 [ 252.175130][ T7660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 252.245428][ T5784] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 252.329392][ T7667] team0: No ports can be present during mode change [ 252.337029][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 252.349082][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 252.358377][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 252.395355][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 252.406466][ T5784] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 252.455162][ T5784] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.463414][ T5784] usb 5-1: can't read configurations, error -61 [ 252.472280][ T5784] usb usb5-port1: attempt power cycle [ 252.865464][ T5784] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.890290][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 252.898008][ T5784] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 252.913676][ T5784] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.921935][ T5784] usb 5-1: can't read configurations, error -61 [ 253.055477][ T5784] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 253.076785][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 253.083826][ T5784] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 253.099607][ T5784] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 253.107703][ T5784] usb 5-1: can't read configurations, error -61 [ 253.116480][ T5784] usb usb5-port1: unable to enumerate USB device [ 253.287973][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 253.288009][ T31] audit: type=1400 audit(1787807809.069:614): avc: denied { write } for pid=7671 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.437285][ T31] audit: type=1400 audit(1787807809.229:615): avc: denied { create } for pid=7679 comm="syz.5.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.494135][ T31] audit: type=1400 audit(1787807809.279:616): avc: denied { watch } for pid=7676 comm="syz.1.435" path="/94/file1" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 253.517170][ T31] audit: type=1400 audit(1787807809.279:617): avc: denied { watch_sb watch_reads } for pid=7676 comm="syz.1.435" path="/94/file1" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.945369][ T5727] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.169944][ T5727] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 254.211845][ T5727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.211881][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 254.211903][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 254.211918][ T5727] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 254.211948][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.302849][ T7689] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.302959][ T7689] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.320486][ T5727] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 254.344617][ T5727] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 254.353545][ T5727] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 254.364636][ T5727] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 254.389115][ T5727] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 254.397094][ T5727] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 254.430300][ T5727] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 255.068179][ T31] audit: type=1400 audit(1787807810.859:618): avc: denied { write } for pid=7690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.084048][ T5776] usb 3-1: USB disconnect, device number 18 [ 255.108739][ T31] audit: type=1400 audit(1787807810.899:619): avc: denied { read } for pid=7692 comm="syz.4.437" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.112198][ T5776] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 255.275947][ T7715] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 255.276020][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.1.439 Not tainted syzkaller #0 PREEMPT(full) [ 255.276047][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 255.276060][ T7715] Call Trace: [ 255.276067][ T7715] [ 255.276076][ T7715] dump_stack_lvl+0x100/0x190 [ 255.276114][ T7715] sysfs_warn_dup.cold+0x1c/0x28 [ 255.276144][ T7715] sysfs_create_dir_ns+0x24b/0x2b0 [ 255.276170][ T7715] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 255.276191][ T7715] ? find_held_lock+0x2b/0x80 [ 255.276218][ T7715] ? kobject_add_internal+0x25f/0x930 [ 255.276241][ T7715] ? kobject_add_internal+0x25f/0x930 [ 255.276265][ T7715] ? class_dir_child_ns_type+0xd/0x60 [ 255.276298][ T7715] kobject_add_internal+0x2c8/0x930 [ 255.276325][ T7715] kobject_add+0x16a/0x1e0 [ 255.276347][ T7715] ? __pfx_kobject_add+0x10/0x10 [ 255.276371][ T7715] ? get_device_parent+0x1b3/0x4c0 [ 255.276399][ T7715] ? kobject_put+0xb9/0x640 [ 255.276426][ T7715] device_add+0x294/0x1970 [ 255.276457][ T7715] ? lockdep_init_map_type+0x5c/0x250 [ 255.276479][ T7715] ? __pfx_device_add+0x10/0x10 [ 255.276508][ T7715] ? lockdep_init_map_type+0x5c/0x250 [ 255.276537][ T7715] ? __init_waitqueue_head+0xca/0x150 [ 255.276567][ T7715] tty_register_device_attr+0x388/0x7f0 [ 255.276596][ T7715] ? lockdep_init_map_type+0x5c/0x250 [ 255.276618][ T7715] ? __pfx_tty_register_device_attr+0x10/0x10 [ 255.276652][ T7715] ? tty_port_init+0x156/0x1c0 [ 255.276684][ T7715] gsm_activate_mux+0x155/0x2a0 [ 255.276713][ T7715] gsmld_ioctl+0xbbc/0x15c0 [ 255.276739][ T7715] ? __pfx_gsmld_ioctl+0x10/0x10 [ 255.276778][ T7715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.276801][ T7715] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 255.276828][ T7715] ? __pfx_gsmld_ioctl+0x10/0x10 [ 255.276846][ T7715] tty_ioctl+0x11b4/0x1640 [ 255.276874][ T7715] ? __pfx_tty_ioctl+0x10/0x10 [ 255.276899][ T7715] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 255.276931][ T7715] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 255.276977][ T7715] ? selinux_file_ioctl+0x13b/0x290 [ 255.277003][ T7715] ? selinux_file_ioctl+0xb6/0x290 [ 255.277027][ T7715] ? __pfx_tty_ioctl+0x10/0x10 [ 255.277052][ T7715] __x64_sys_ioctl+0x18e/0x210 [ 255.277084][ T7715] do_syscall_64+0x123/0x790 [ 255.277116][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.277137][ T7715] RIP: 0033:0x7f79f4b9e0d9 [ 255.277154][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.277173][ T7715] RSP: 002b:00007f79f2991028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.277193][ T7715] RAX: ffffffffffffffda RBX: 00007f79f4e26270 RCX: 00007f79f4b9e0d9 [ 255.277206][ T7715] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 255.277219][ T7715] RBP: 00007f79f4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 255.277231][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.277248][ T7715] R13: 00007f79f4e26308 R14: 00007f79f4e26270 R15: 00007ffef459efe8 [ 255.277275][ T7715] [ 255.277388][ T7715] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 255.492729][ T31] audit: type=1400 audit(1787807811.279:620): avc: denied { open } for pid=7692 comm="syz.4.437" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.558243][ T31] audit: type=1400 audit(1787807811.349:621): avc: denied { ioctl } for pid=7692 comm="syz.4.437" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.799034][ T5776] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 255.811241][ T5776] keyspan 3-1:1.0: device disconnected [ 255.904176][ T31] audit: type=1400 audit(1787807811.689:622): avc: denied { write } for pid=7720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.291111][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'. [ 256.295410][ T31] audit: type=1400 audit(1787807812.079:623): avc: denied { ioctl } for pid=7725 comm="syz.2.441" path="socket:[17649]" dev="sockfs" ino=17649 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.423453][ T7732] ªªªªªª: renamed from vlan0 (while UP) [ 256.441189][ T7730] netlink: 120 bytes leftover after parsing attributes in process `syz.3.442'. [ 256.546298][ T7736] FAULT_INJECTION: forcing a failure. [ 256.546298][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.546330][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.1.445 Not tainted syzkaller #0 PREEMPT(full) [ 256.546349][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 256.546359][ T7736] Call Trace: [ 256.546366][ T7736] [ 256.546372][ T7736] dump_stack_lvl+0x100/0x190 [ 256.546401][ T7736] should_fail_ex.cold+0x5/0xa [ 256.546423][ T7736] _copy_from_user+0x2e/0xd0 [ 256.546445][ T7736] copy_msghdr_from_user+0x9f/0x4c0 [ 256.546464][ T7736] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 256.546492][ T7736] ___sys_sendmsg+0x106/0x1e0 [ 256.546510][ T7736] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.546527][ T7736] ? get_pid_task+0x106/0x250 [ 256.546559][ T7736] ? find_held_lock+0x2b/0x80 [ 256.546595][ T7736] __sys_sendmsg+0x160/0x210 [ 256.546617][ T7736] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.546650][ T7736] do_syscall_64+0x123/0x790 [ 256.546675][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.546692][ T7736] RIP: 0033:0x7f79f4b9e0d9 [ 256.546706][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.546721][ T7736] RSP: 002b:00007f79f2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.546737][ T7736] RAX: ffffffffffffffda RBX: 00007f79f4e25fa0 RCX: 00007f79f4b9e0d9 [ 256.546748][ T7736] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 256.546758][ T7736] RBP: 00007f79f2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.546767][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.546776][ T7736] R13: 00007f79f4e26038 R14: 00007f79f4e25fa0 R15: 00007ffef459efe8 [ 256.546797][ T7736] [ 256.766403][ T5727] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 256.926115][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 256.926641][ T5727] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 256.931185][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.934296][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.934319][ T5727] usb 6-1: Product: syz [ 256.934332][ T5727] usb 6-1: Manufacturer: syz [ 256.934344][ T5727] usb 6-1: SerialNumber: syz [ 256.939600][ T5727] usb 6-1: config 0 descriptor?? [ 256.943545][ T5727] smsc75xx 6-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 256.943712][ T5727] smsc75xx 6-1:0.0: probe with driver smsc75xx failed with error -22 [ 257.705973][ T5776] usb 6-1: USB disconnect, device number 3 [ 257.853218][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 260.432357][ T7769] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 260.432427][ T7769] CPU: 1 UID: 0 PID: 7769 Comm: syz.5.453 Not tainted syzkaller #0 PREEMPT(full) [ 260.432453][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 260.432467][ T7769] Call Trace: [ 260.432474][ T7769] [ 260.432482][ T7769] dump_stack_lvl+0x100/0x190 [ 260.432520][ T7769] sysfs_warn_dup.cold+0x1c/0x28 [ 260.432551][ T7769] sysfs_create_dir_ns+0x24b/0x2b0 [ 260.432576][ T7769] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 260.432602][ T7769] ? class_dir_child_ns_type+0xd/0x60 [ 260.432633][ T7769] ? class_dir_child_ns_type+0x45/0x60 [ 260.432668][ T7769] kobject_add_internal+0x2c8/0x930 [ 260.432698][ T7769] kobject_add+0x16a/0x1e0 [ 260.432720][ T7769] ? __pfx_kobject_add+0x10/0x10 [ 260.432746][ T7769] ? get_device_parent+0x1b3/0x4c0 [ 260.432775][ T7769] ? kobject_put+0xb9/0x640 [ 260.432803][ T7769] device_add+0x294/0x1970 [ 260.432834][ T7769] ? lockdep_init_map_type+0x5c/0x250 [ 260.432857][ T7769] ? __pfx_device_add+0x10/0x10 [ 260.432886][ T7769] ? lockdep_init_map_type+0x5c/0x250 [ 260.432908][ T7769] ? __init_waitqueue_head+0xca/0x150 [ 260.432945][ T7769] tty_register_device_attr+0x388/0x7f0 [ 260.432975][ T7769] ? lockdep_init_map_type+0x5c/0x250 [ 260.432997][ T7769] ? __pfx_tty_register_device_attr+0x10/0x10 [ 260.433032][ T7769] ? tty_port_init+0x156/0x1c0 [ 260.433064][ T7769] gsm_activate_mux+0x155/0x2a0 [ 260.433094][ T7769] gsmld_ioctl+0xbbc/0x15c0 [ 260.433121][ T7769] ? __pfx_gsmld_ioctl+0x10/0x10 [ 260.433164][ T7769] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 260.433193][ T7769] ? __pfx_gsmld_ioctl+0x10/0x10 [ 260.433211][ T7769] tty_ioctl+0x11b4/0x1640 [ 260.433241][ T7769] ? __pfx_tty_ioctl+0x10/0x10 [ 260.433267][ T7769] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 260.433298][ T7769] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 260.433344][ T7769] ? selinux_file_ioctl+0x13b/0x290 [ 260.433371][ T7769] ? selinux_file_ioctl+0xb6/0x290 [ 260.433399][ T7769] ? __pfx_tty_ioctl+0x10/0x10 [ 260.433427][ T7769] __x64_sys_ioctl+0x18e/0x210 [ 260.433458][ T7769] do_syscall_64+0x123/0x790 [ 260.433489][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.433510][ T7769] RIP: 0033:0x7f2ea559e0d9 [ 260.433528][ T7769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.433546][ T7769] RSP: 002b:00007f2ea6492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.433567][ T7769] RAX: ffffffffffffffda RBX: 00007f2ea5826270 RCX: 00007f2ea559e0d9 [ 260.433580][ T7769] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 260.433592][ T7769] RBP: 00007f2ea5635024 R08: 0000000000000000 R09: 0000000000000000 [ 260.433604][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.433616][ T7769] R13: 00007f2ea5826308 R14: 00007f2ea5826270 R15: 00007ffe0162d668 [ 260.433643][ T7769] [ 260.433736][ T7769] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 261.095034][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 261.095070][ T31] audit: type=1326 audit(1787807816.879:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.095120][ T31] audit: type=1326 audit(1787807816.879:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.100892][ T31] audit: type=1326 audit(1787807816.889:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.100934][ T31] audit: type=1326 audit(1787807816.889:631): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.100967][ T31] audit: type=1326 audit(1787807816.889:632): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.235832][ T31] audit: type=1326 audit(1787807817.029:633): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.235866][ T31] audit: type=1326 audit(1787807817.029:634): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.235888][ T31] audit: type=1326 audit(1787807817.029:635): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.236352][ T31] audit: type=1326 audit(1787807817.029:636): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 261.236379][ T31] audit: type=1326 audit(1787807817.029:637): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.4.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1857d9e0d9 code=0x7ffc0000 [ 266.341258][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 266.341309][ T31] audit: type=1400 audit(1787807822.069:648): avc: denied { write } for pid=7808 comm="syz.3.465" name="os_desc" dev="configfs" ino=8604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.419092][ T31] audit: type=1400 audit(1787807822.209:649): avc: denied { read } for pid=7808 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.503643][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 266.645756][ T31] audit: type=1400 audit(1787807822.329:650): avc: denied { write } for pid=7808 comm="syz.3.465" name="os_desc" dev="configfs" ino=8604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.693695][ T31] audit: type=1400 audit(1787807822.429:651): avc: denied { mount } for pid=7811 comm="syz.4.458" name="/" dev="autofs" ino=17380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 266.875592][ T5331] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 267.067146][ T5331] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 267.099022][ T5331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.110717][ T5331] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 267.110849][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.277428][ T31] audit: type=1400 audit(1787807823.069:652): avc: denied { ioctl } for pid=7793 comm="syz.2.461" path="socket:[17384]" dev="sockfs" ino=17384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.306855][ T31] audit: type=1400 audit(1787807823.099:653): avc: denied { connect } for pid=7793 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.472396][ T5331] cxacru 4-1:1.0: invalid response length to cm 0x90: 0 [ 267.472445][ T5331] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 267.472738][ T5331] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 267.511893][ T31] audit: type=1400 audit(1787807823.299:654): avc: denied { name_bind } for pid=7819 comm="syz.1.460" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 267.585940][ T5784] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 267.681715][ T31] audit: type=1400 audit(1787807823.469:655): avc: denied { connect } for pid=7808 comm="syz.3.465" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.707795][ T31] audit: type=1400 audit(1787807823.499:656): avc: denied { write } for pid=7808 comm="syz.3.465" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.816343][ T5698] usb 4-1: USB disconnect, device number 25 [ 267.829377][ T5784] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 267.830247][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.830281][ T5784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.830304][ T5784] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 267.830335][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.877743][ T5331] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 268.016525][ T7827] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 268.016594][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.4.467 Not tainted syzkaller #0 PREEMPT(full) [ 268.016620][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.016633][ T7827] Call Trace: [ 268.016640][ T7827] [ 268.016648][ T7827] dump_stack_lvl+0x100/0x190 [ 268.016687][ T7827] sysfs_warn_dup.cold+0x1c/0x28 [ 268.016716][ T7827] sysfs_create_dir_ns+0x24b/0x2b0 [ 268.016741][ T7827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 268.016767][ T7827] ? kobject_namespace+0x72/0x1a0 [ 268.016790][ T7827] ? __sanitizer_cov_trace_pc+0x5b/0x70 [ 268.016814][ T7827] ? class_dir_child_ns_type+0xd/0x60 [ 268.016849][ T7827] kobject_add_internal+0x2c8/0x930 [ 268.016876][ T7827] kobject_add+0x16a/0x1e0 [ 268.016899][ T7827] ? __pfx_kobject_add+0x10/0x10 [ 268.016924][ T7827] ? get_device_parent+0x1b3/0x4c0 [ 268.016954][ T7827] ? kobject_put+0xb9/0x640 [ 268.016981][ T7827] device_add+0x294/0x1970 [ 268.017012][ T7827] ? lockdep_init_map_type+0x5c/0x250 [ 268.017034][ T7827] ? __pfx_device_add+0x10/0x10 [ 268.017063][ T7827] ? lockdep_init_map_type+0x5c/0x250 [ 268.017084][ T7827] ? __init_waitqueue_head+0xca/0x150 [ 268.017114][ T7827] tty_register_device_attr+0x388/0x7f0 [ 268.017143][ T7827] ? lockdep_init_map_type+0x5c/0x250 [ 268.017165][ T7827] ? __pfx_tty_register_device_attr+0x10/0x10 [ 268.017199][ T7827] ? tty_port_init+0x156/0x1c0 [ 268.017230][ T7827] gsm_activate_mux+0x155/0x2a0 [ 268.017259][ T7827] gsmld_ioctl+0xbbc/0x15c0 [ 268.017285][ T7827] ? __pfx_gsmld_ioctl+0x10/0x10 [ 268.017326][ T7827] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 268.017353][ T7827] ? __pfx_gsmld_ioctl+0x10/0x10 [ 268.017377][ T7827] tty_ioctl+0x11b4/0x1640 [ 268.017406][ T7827] ? __pfx_tty_ioctl+0x10/0x10 [ 268.017431][ T7827] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 268.017462][ T7827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 268.017507][ T7827] ? selinux_file_ioctl+0x13b/0x290 [ 268.017533][ T7827] ? selinux_file_ioctl+0xb6/0x290 [ 268.017563][ T7827] ? __pfx_tty_ioctl+0x10/0x10 [ 268.017593][ T7827] __x64_sys_ioctl+0x18e/0x210 [ 268.017624][ T7827] do_syscall_64+0x123/0x790 [ 268.017655][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.017676][ T7827] RIP: 0033:0x7f1857d9e0d9 [ 268.017693][ T7827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.017712][ T7827] RSP: 002b:00007f1858cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.017733][ T7827] RAX: ffffffffffffffda RBX: 00007f1858026270 RCX: 00007f1857d9e0d9 [ 268.017746][ T7827] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 268.017758][ T7827] RBP: 00007f1857e35024 R08: 0000000000000000 R09: 0000000000000000 [ 268.017770][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.017781][ T7827] R13: 00007f1858026308 R14: 00007f1858026270 R15: 00007ffe2c93e9b8 [ 268.017808][ T7827] [ 268.017888][ T7827] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 268.485835][ T5331] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 268.497304][ T5784] usb 3-1: can't set config #1, error -71 [ 268.516187][ T5784] usb 3-1: USB disconnect, device number 19 [ 268.524128][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.524154][ T5331] usb 2-1: Product: syz [ 268.524169][ T5331] usb 2-1: Manufacturer: syz [ 268.524183][ T5331] usb 2-1: SerialNumber: syz [ 268.597965][ T7829] team0: entered allmulticast mode [ 268.603923][ T7829] team_slave_0: entered allmulticast mode [ 268.612199][ T7829] team_slave_1: entered allmulticast mode [ 268.622956][ T5331] usb 2-1: config 0 descriptor?? [ 268.629093][ T7829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.729360][ T5331] hub 2-1:0.0: bad descriptor, ignoring hub [ 268.729398][ T5331] hub 2-1:0.0: probe with driver hub failed with error -5 [ 268.845495][ T5331] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 269.121173][ T5331] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 269.137698][ T5331] dib0700: firmware download failed at 7 with -22 [ 269.874544][ T5331] usb 2-1: USB disconnect, device number 17 [ 271.480526][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 271.480563][ T31] audit: type=1400 audit(1787807827.269:682): avc: denied { write } for pid=7859 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.480675][ T31] audit: type=1400 audit(1787807827.269:683): avc: denied { connect } for pid=7859 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.489834][ T189] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 271.630029][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 271.639843][ T189] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 271.651262][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.651307][ T189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.651369][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.663500][ T189] usb 5-1: config 0 descriptor?? [ 271.717083][ T7868] team0: No ports can be present during mode change [ 271.734279][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 271.734313][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 273.405992][ T5331] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 273.620633][ T5331] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 273.654586][ T5331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.654758][ T5331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.654915][ T5331] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.656771][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.760166][ T5331] cyberjack 2-1:1.0: required endpoints missing [ 274.248064][ T189] usbhid 5-1:0.0: can't add hid device: -71 [ 274.248148][ T189] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 274.265050][ T189] usb 5-1: USB disconnect, device number 25 [ 274.434166][ T5784] usb 2-1: USB disconnect, device number 18 [ 275.730310][ T31] audit: type=1400 audit(1787807831.519:684): avc: denied { write } for pid=7889 comm="syz.2.484" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 275.815390][ T189] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 275.968010][ T189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.968074][ T189] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 275.987523][ T189] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 275.987554][ T189] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 275.987574][ T189] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 275.987587][ T189] usb 5-1: config 129 has no interface number 0 [ 275.987598][ T189] usb 5-1: config 129 has no interface number 1 [ 275.987624][ T189] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 275.987641][ T189] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 275.987667][ T189] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 275.987683][ T189] usb 5-1: config 129 interface 135 has no altsetting 0 [ 275.987696][ T189] usb 5-1: config 129 interface 5 has no altsetting 0 [ 276.084857][ T189] usb 5-1: string descriptor 0 read error: -22 [ 276.084973][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.152152][ T189] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.174258][ T189] usb 5-1: MIDIStreaming interface descriptor not found [ 276.192493][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 277.469053][ T5331] usb 5-1: USB disconnect, device number 26 [ 277.716203][ T31] audit: type=1400 audit(1787807833.499:685): avc: denied { write } for pid=7916 comm="syz.5.493" name="functions" dev="configfs" ino=8601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.819588][ T31] audit: type=1400 audit(1787807833.609:686): avc: denied { write } for pid=7917 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.826714][ T5608] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 277.884789][ T31] audit: type=1400 audit(1787807833.669:687): avc: denied { relabelfrom } for pid=7915 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 277.902266][ T31] audit: type=1400 audit(1787807833.689:688): avc: denied { relabelto } for pid=7915 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 278.049393][ T7929] openvswitch: netlink: IP tunnel dst address not specified [ 278.515590][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 278.564942][ T31] audit: type=1400 audit(1787807834.349:689): avc: denied { read } for pid=7940 comm="syz.2.498" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.565003][ T31] audit: type=1400 audit(1787807834.349:690): avc: denied { open } for pid=7940 comm="syz.2.498" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.625863][ T31] audit: type=1400 audit(1787807834.409:691): avc: denied { remount } for pid=7940 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 278.695881][ T10] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 278.703182][ T31] audit: type=1400 audit(1787807834.489:692): avc: denied { bind } for pid=7940 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.725809][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.725863][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 278.725899][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.725940][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.780080][ T7936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.789511][ T10] cyberjack 4-1:1.0: required endpoints missing [ 279.143047][ T10] usb 4-1: USB disconnect, device number 26 [ 279.860154][ T31] audit: type=1400 audit(1787807835.649:693): avc: denied { mount } for pid=7959 comm="syz.2.506" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 280.149625][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 280.223494][ T7968] team0: No ports can be present during mode change [ 280.239029][ T31] audit: type=1400 audit(1787807836.029:694): avc: denied { create } for pid=7967 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 280.281193][ T7970] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 280.281230][ T7970] CPU: 1 UID: 0 PID: 7970 Comm: syz.5.503 Not tainted syzkaller #0 PREEMPT(full) [ 280.281257][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 280.281270][ T7970] Call Trace: [ 280.281276][ T7970] [ 280.281285][ T7970] dump_stack_lvl+0x100/0x190 [ 280.281321][ T7970] sysfs_warn_dup.cold+0x1c/0x28 [ 280.281352][ T7970] sysfs_create_dir_ns+0x24b/0x2b0 [ 280.281377][ T7970] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 280.281399][ T7970] ? preempt_schedule_common+0x3c/0xb0 [ 280.281427][ T7970] ? preempt_schedule_thunk+0x16/0x40 [ 280.281455][ T7970] ? class_dir_child_ns_type+0xd/0x60 [ 280.281488][ T7970] kobject_add_internal+0x2c8/0x930 [ 280.281516][ T7970] kobject_add+0x16a/0x1e0 [ 280.281538][ T7970] ? __pfx_kobject_add+0x10/0x10 [ 280.281563][ T7970] ? get_device_parent+0x1b3/0x4c0 [ 280.281593][ T7970] ? kobject_put+0xb9/0x640 [ 280.281623][ T7970] device_add+0x294/0x1970 [ 280.281653][ T7970] ? lockdep_init_map_type+0x5c/0x250 [ 280.281676][ T7970] ? __pfx_device_add+0x10/0x10 [ 280.281704][ T7970] ? lockdep_init_map_type+0x5c/0x250 [ 280.281726][ T7970] ? __init_waitqueue_head+0xca/0x150 [ 280.281757][ T7970] tty_register_device_attr+0x388/0x7f0 [ 280.281786][ T7970] ? lockdep_init_map_type+0x5c/0x250 [ 280.281807][ T7970] ? __pfx_tty_register_device_attr+0x10/0x10 [ 280.281842][ T7970] ? tty_port_init+0x156/0x1c0 [ 280.281873][ T7970] gsm_activate_mux+0x155/0x2a0 [ 280.281908][ T7970] gsmld_ioctl+0xbbc/0x15c0 [ 280.281935][ T7970] ? __pfx_gsmld_ioctl+0x10/0x10 [ 280.281976][ T7970] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 280.282003][ T7970] ? __pfx_gsmld_ioctl+0x10/0x10 [ 280.282021][ T7970] tty_ioctl+0x11b4/0x1640 [ 280.282049][ T7970] ? __pfx_tty_ioctl+0x10/0x10 [ 280.282073][ T7970] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 280.282106][ T7970] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 280.282152][ T7970] ? selinux_file_ioctl+0x13b/0x290 [ 280.282177][ T7970] ? selinux_file_ioctl+0xb6/0x290 [ 280.282205][ T7970] ? __pfx_tty_ioctl+0x10/0x10 [ 280.282234][ T7970] __x64_sys_ioctl+0x18e/0x210 [ 280.282265][ T7970] do_syscall_64+0x123/0x790 [ 280.282296][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.282317][ T7970] RIP: 0033:0x7f2ea559e0d9 [ 280.282334][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.282353][ T7970] RSP: 002b:00007f2ea6492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.282374][ T7970] RAX: ffffffffffffffda RBX: 00007f2ea5826270 RCX: 00007f2ea559e0d9 [ 280.282386][ T7970] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 280.282398][ T7970] RBP: 00007f2ea5635024 R08: 0000000000000000 R09: 0000000000000000 [ 280.282410][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.282422][ T7970] R13: 00007f2ea5826308 R14: 00007f2ea5826270 R15: 00007ffe0162d668 [ 280.282449][ T7970] [ 280.282534][ T7970] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 280.487265][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 280.487286][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 281.492624][ T7979] jffs2: notice: (7979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 281.649528][ T7988] binder: BINDER_SET_CONTEXT_MGR already set [ 281.649566][ T7988] binder: 7985:7988 ioctl 4018620d 200000000040 returned -16 [ 281.726621][ T5331] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 281.895337][ T5331] usb 6-1: Using ep0 maxpacket: 16 [ 281.991804][ T5331] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.105580][ T5331] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 282.105652][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.231003][ T5784] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 282.288059][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.288105][ T5331] usb 6-1: Product: syz [ 282.288119][ T5331] usb 6-1: Manufacturer: syz [ 282.288132][ T5331] usb 6-1: SerialNumber: syz [ 282.638886][ T5331] usb 6-1: config 0 descriptor?? [ 282.672120][ T5331] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 282.672172][ T5331] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 282.692666][ T5784] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 282.705074][ T5784] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 282.705111][ T5784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.705148][ T5784] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.705179][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.717649][ T7984] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 282.719180][ T5784] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 282.727441][ T5784] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 282.879281][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 282.900830][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 282.900878][ T31] audit: type=1400 audit(1787807838.689:706): avc: denied { create } for pid=8004 comm="syz.4.517" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 282.938184][ T31] audit: type=1400 audit(1787807838.729:707): avc: denied { write } for pid=8004 comm="syz.4.517" name="file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 282.938244][ T31] audit: type=1400 audit(1787807838.729:708): avc: denied { open } for pid=8004 comm="syz.4.517" path="/99/file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 282.987311][ T31] audit: type=1400 audit(1787807838.779:709): avc: denied { ioctl } for pid=8004 comm="syz.4.517" path="/99/file0" dev="tmpfs" ino=547 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.009918][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 283.009941][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 283.019440][ T5784] usb 4-1: USB disconnect, device number 27 [ 283.036365][ T5784] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 283.043026][ T5784] cyberjack 4-1:1.0: device disconnected [ 283.061213][ T31] audit: type=1400 audit(1787807838.849:710): avc: denied { write } for pid=7980 comm="syz.5.510" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 283.078460][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.078849][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.093928][ T7981] binder: 7980:7981 ioctl c0306201 200000000080 returned -14 [ 283.104235][ T31] audit: type=1400 audit(1787807838.899:711): avc: denied { setopt } for pid=7980 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 283.111208][ T7981] binder: 7980:7981 ioctl c0306201 2000000003c0 returned -14 [ 283.137404][ T31] audit: type=1400 audit(1787807838.929:712): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.231281][ T31] audit: type=1400 audit(1787807839.019:713): avc: denied { append } for pid=8008 comm="syz.4.519" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.453103][ T5331] em28xx 6-1:0.0: chip ID is em2874 [ 283.465609][ T30] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 283.636540][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 283.637104][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.637994][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.638027][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.638049][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.638067][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.638086][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.638936][ T30] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.638954][ T30] usb 5-1: Manufacturer: syz [ 283.641170][ T30] usb 5-1: config 0 descriptor?? [ 283.716663][ T5784] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 283.875834][ T5784] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 283.876703][ T5784] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.876738][ T5784] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 283.876759][ T5784] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.876789][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.884276][ T8011] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 283.892091][ T5784] cyberjack 2-1:1.0: required endpoints missing [ 283.945637][ T30] rc_core: IR keymap rc-hauppauge not found [ 283.945662][ T30] Registered IR keymap rc-empty [ 283.946034][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.968447][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.993921][ T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 283.996379][ T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 284.000752][ T31] audit: type=1400 audit(1787807839.779:714): avc: denied { read } for pid=4950 comm="acpid" name="event2" dev="devtmpfs" ino=3718 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.001019][ T31] audit: type=1400 audit(1787807839.779:715): avc: denied { open } for pid=4950 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3718 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.020489][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.046080][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.075494][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.095486][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.098990][ T5784] usb 2-1: USB disconnect, device number 19 [ 284.115603][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.150270][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.167012][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.187096][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.215790][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.246467][ T30] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.267859][ T30] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 284.267890][ T30] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 284.429795][ T5784] usb 5-1: USB disconnect, device number 27 [ 284.604252][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 284.622652][ T8023] team0: No ports can be present during mode change [ 284.632056][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 284.642245][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 284.905921][ T189] usb 6-1: USB disconnect, device number 4 [ 284.906693][ T189] em28xx 6-1:0.0: Disconnecting em28xx [ 284.968894][ T189] em28xx: Freeing device [ 285.709872][ T8030] binder: BINDER_SET_CONTEXT_MGR already set [ 285.728215][ T8030] binder: 8029:8030 ioctl 4018620d 200000000040 returned -16 [ 285.736834][ T8033] erofs (device loop5): cannot find valid erofs superblock [ 285.749798][ T5612] Bluetooth: hci0: unexpected event for opcode 0x203d [ 285.820450][ T8038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.528'. [ 286.075607][ T8043] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.098055][ T8043] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 286.098121][ T8043] overlayfs: failed to look up (tracing) for ino (-66) [ 287.455878][ T8048] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 288.374588][ T8063] netlink: 76 bytes leftover after parsing attributes in process `syz.2.534'. [ 288.374627][ T8063] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 288.797440][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 289.083178][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 289.113721][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 289.113754][ T31] audit: type=1400 audit(1787807844.899:723): avc: denied { create } for pid=8067 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.114479][ T31] audit: type=1400 audit(1787807844.899:724): avc: denied { bind } for pid=8067 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.181694][ T31] audit: type=1400 audit(1787807844.969:725): avc: denied { read } for pid=8067 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.280387][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.537'. [ 289.357361][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.537'. [ 289.370943][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.537'. [ 289.475360][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 289.822538][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 289.886825][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.684881][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 291.203592][ T8102] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 291.203668][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.4.543 Not tainted syzkaller #0 PREEMPT(full) [ 291.203696][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 291.203709][ T8102] Call Trace: [ 291.203716][ T8102] [ 291.203726][ T8102] dump_stack_lvl+0x100/0x190 [ 291.203763][ T8102] sysfs_warn_dup.cold+0x1c/0x28 [ 291.203793][ T8102] sysfs_create_dir_ns+0x24b/0x2b0 [ 291.203816][ T8102] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 291.203844][ T8102] ? class_dir_child_ns_type+0xd/0x60 [ 291.203879][ T8102] kobject_add_internal+0x2c8/0x930 [ 291.203907][ T8102] kobject_add+0x16a/0x1e0 [ 291.203931][ T8102] ? __pfx_kobject_add+0x10/0x10 [ 291.203956][ T8102] ? get_device_parent+0x1b3/0x4c0 [ 291.203985][ T8102] ? kobject_put+0xb9/0x640 [ 291.204013][ T8102] device_add+0x294/0x1970 [ 291.204044][ T8102] ? lockdep_init_map_type+0x5c/0x250 [ 291.204068][ T8102] ? __pfx_device_add+0x10/0x10 [ 291.204098][ T8102] ? lockdep_init_map_type+0x5c/0x250 [ 291.204121][ T8102] ? __init_waitqueue_head+0xca/0x150 [ 291.204152][ T8102] tty_register_device_attr+0x388/0x7f0 [ 291.204182][ T8102] ? __pfx_tty_register_device_attr+0x10/0x10 [ 291.204216][ T8102] ? tty_port_init+0x156/0x1c0 [ 291.204246][ T8102] gsm_activate_mux+0x155/0x2a0 [ 291.204276][ T8102] gsmld_ioctl+0xbbc/0x15c0 [ 291.204302][ T8102] ? __pfx_gsmld_ioctl+0x10/0x10 [ 291.204324][ T8102] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.204352][ T8102] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 291.204388][ T8102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.204410][ T8102] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 291.204436][ T8102] ? __pfx_gsmld_ioctl+0x10/0x10 [ 291.204454][ T8102] tty_ioctl+0x11b4/0x1640 [ 291.204481][ T8102] ? __pfx_tty_ioctl+0x10/0x10 [ 291.204509][ T8102] ? preempt_schedule_irq+0x79/0x90 [ 291.204537][ T8102] ? irqentry_exit+0x24d/0xa10 [ 291.204564][ T8102] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.204591][ T8102] ? irqentry_exit+0x24d/0xa10 [ 291.204626][ T8102] ? __pfx_tty_ioctl+0x10/0x10 [ 291.204663][ T8102] ? __pfx_tty_ioctl+0x10/0x10 [ 291.204691][ T8102] __x64_sys_ioctl+0x18e/0x210 [ 291.204722][ T8102] do_syscall_64+0x123/0x790 [ 291.204754][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.204776][ T8102] RIP: 0033:0x7f1857d9e0d9 [ 291.204793][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.204812][ T8102] RSP: 002b:00007f1858cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.204833][ T8102] RAX: ffffffffffffffda RBX: 00007f1858026270 RCX: 00007f1857d9e0d9 [ 291.204847][ T8102] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 291.204859][ T8102] RBP: 00007f1857e35024 R08: 0000000000000000 R09: 0000000000000000 [ 291.204871][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.204883][ T8102] R13: 00007f1858026308 R14: 00007f1858026270 R15: 00007ffe2c93e9b8 [ 291.204910][ T8102] [ 291.205009][ T8102] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 291.665921][ T8100] printk: console [ttyS0] disabled [ 291.738615][ T31] audit: type=1400 audit(1787807847.529:726): avc: denied { ioctl } for pid=8067 comm="syz.2.536" path="socket:[18326]" dev="sockfs" ino=18326 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1833.139659][T28600] printk: console [ttyS0] enabled [ 1835.833779][T28615] netlink: 'syz.9.6406': attribute type 1 has an invalid length. [ 1836.742566][T28628] netlink: 'syz.0.6408': attribute type 1 has an invalid length. [ 1837.489899][T28615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1837.666267][T28635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.667971][T28635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.938290][T28628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1844.152919][T28632] bond1: (slave veth0_to_bond): making interface the new active one [ 1845.414687][T28632] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1848.002811][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1849.325827][T28634] bond1: entered promiscuous mode [ 1849.326184][T28634] veth0_to_bond: entered promiscuous mode [ 1849.327616][T28634] bond1: entered allmulticast mode [ 1849.327730][T28634] veth0_to_bond: entered allmulticast mode [ 1851.921229][T25072] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 1854.141657][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1854.286303][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1854.304393][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1854.339510][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1854.355939][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1857.155456][T25072] Bluetooth: hci3: command tx timeout [ 1858.727456][T21037] process 21913 (syz.2.4311) no longer affine to cpu1 [ 1858.727629][T21037] process 27178 (syz.2.5973) no longer affine to cpu1 [ 1859.234897][T25072] Bluetooth: hci3: command tx timeout [ 1861.306103][T25072] Bluetooth: hci3: command tx timeout [ 1861.585700][T28667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1861.617348][T28667] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1861.653650][T28667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1861.692256][T28667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1861.796784][T28667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1863.384967][T28667] Bluetooth: hci3: command tx timeout [ 1864.505443][T28667] Bluetooth: hci5: command tx timeout [ 1866.585160][T28667] Bluetooth: hci5: command tx timeout [ 1867.917963][T25072] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1867.970658][T25072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1868.002088][T25072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1868.075843][T25072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1868.093150][T25072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1869.060330][T25072] Bluetooth: hci5: command tx timeout [ 1869.369540][T28681] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6418'. [ 1871.249747][T28667] Bluetooth: hci5: command tx timeout [ 1871.250016][T28667] Bluetooth: hci6: command tx timeout [ 1873.345162][T25072] Bluetooth: hci6: command tx timeout [ 1875.417638][T25072] Bluetooth: hci6: command tx timeout [ 1877.360980][T28667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1877.387158][T28667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1877.438376][T28667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1877.567053][T28667] Bluetooth: hci6: command tx timeout [ 1878.028191][T28667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1878.058722][T28667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1880.185198][T28667] Bluetooth: hci1: command tx timeout [ 1882.269383][T28667] Bluetooth: hci1: command tx timeout [ 1884.353643][T28667] Bluetooth: hci1: command tx timeout [ 1886.441200][T28667] Bluetooth: hci1: command tx timeout [ 1887.552790][T18169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.164123][ T31] audit: type=1400 audit(2000000095.480:3487): avc: denied { write } for pid=28705 comm="syz.4.6422" name="header" dev="configfs" ino=44700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1891.354240][ T31] audit: type=1400 audit(2000000095.670:3488): avc: denied { write } for pid=28705 comm="syz.4.6422" name="fs" dev="configfs" ino=44709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1891.354389][ T31] audit: type=1400 audit(2000000095.670:3489): avc: denied { write } for pid=28705 comm="syz.4.6422" name="fs" dev="configfs" ino=44709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1891.909061][ T31] audit: type=1400 audit(2000000096.230:3490): avc: denied { write } for pid=28705 comm="syz.4.6422" name="c.1" dev="configfs" ino=8607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1891.909411][ T31] audit: type=1400 audit(2000000096.230:3491): avc: denied { write } for pid=28705 comm="syz.4.6422" name="c.1" dev="configfs" ino=8607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1897.339340][T18169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.002350][ T31] audit: type=1400 audit(2000000104.320:3492): avc: denied { listen } for pid=28735 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1900.161206][T28667] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1900.161351][T28667] CPU: 0 UID: 0 PID: 28667 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.161372][T28667] Tainted: [L]=SOFTLOCKUP [ 1900.161376][T28667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1900.161386][T28667] Workqueue: hci2 hci_rx_work [ 1900.161407][T28667] Call Trace: [ 1900.161412][T28667] [ 1900.161418][T28667] dump_stack_lvl+0x100/0x190 [ 1900.161439][T28667] sysfs_warn_dup.cold+0x1c/0x28 [ 1900.161457][T28667] sysfs_create_dir_ns+0x24b/0x2b0 [ 1900.161473][T28667] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1900.161488][T28667] ? find_held_lock+0x2b/0x80 [ 1900.161506][T28667] ? kobject_add_internal+0x25f/0x930 [ 1900.161520][T28667] ? kobject_add_internal+0x25f/0x930 [ 1900.161534][T28667] ? do_raw_spin_unlock+0x145/0x1e0 [ 1900.161550][T28667] kobject_add_internal+0x2c8/0x930 [ 1900.161565][T28667] kobject_add+0x16a/0x1e0 [ 1900.161578][T28667] ? __pfx_kobject_add+0x10/0x10 [ 1900.161590][T28667] ? class_to_subsys+0x10f/0x150 [ 1900.161604][T28667] ? kobject_put+0xb9/0x640 [ 1900.161616][T28667] ? _raw_spin_unlock+0x28/0x50 [ 1900.161634][T28667] device_add+0x294/0x1970 [ 1900.161656][T28667] ? __pfx_dev_set_name+0x10/0x10 [ 1900.161669][T28667] ? __pfx_device_add+0x10/0x10 [ 1900.161687][T28667] ? mgmt_send_event_skb+0x2fb/0x460 [ 1900.161707][T28667] hci_conn_add_sysfs+0x1a3/0x260 [ 1900.161726][T28667] le_conn_complete_evt+0x121b/0x2120 [ 1900.161746][T28667] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1900.161761][T28667] ? hci_event_packet+0x186/0xcd0 [ 1900.161780][T28667] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1900.161796][T28667] ? skb_pull_data+0x15f/0x1e0 [ 1900.161814][T28667] hci_le_meta_evt+0x34a/0x5f0 [ 1900.161831][T28667] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1900.161852][T28667] hci_event_packet+0x51c/0xcd0 [ 1900.161869][T28667] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1900.161887][T28667] ? __pfx_hci_event_packet+0x10/0x10 [ 1900.161906][T28667] ? lockdep_hardirqs_on+0x7d/0x110 [ 1900.161926][T28667] hci_rx_work+0x451/0xfc0 [ 1900.161944][T28667] process_one_work+0xac7/0x1b10 [ 1900.161969][T28667] ? __pfx_process_one_work+0x10/0x10 [ 1900.161993][T28667] ? __pfx_hci_rx_work+0x10/0x10 [ 1900.162009][T28667] worker_thread+0x5ef/0xe50 [ 1900.162030][T28667] ? __pfx_worker_thread+0x10/0x10 [ 1900.162048][T28667] ? kthread+0x13a/0x450 [ 1900.162063][T28667] ? __pfx_worker_thread+0x10/0x10 [ 1900.162079][T28667] kthread+0x373/0x450 [ 1900.162095][T28667] ? __pfx_kthread+0x10/0x10 [ 1900.162111][T28667] ret_from_fork+0x730/0xd60 [ 1900.162126][T28667] ? __pfx_ret_from_fork+0x10/0x10 [ 1900.162139][T28667] ? __switch_to+0x800/0x10f0 [ 1900.162156][T28667] ? __pfx_kthread+0x10/0x10 [ 1900.162173][T28667] ret_from_fork_asm+0x1a/0x30 [ 1900.162193][T28667] [ 1900.162486][T28667] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1900.162629][T28667] Bluetooth: hci2: failed to register connection device [ 1902.539548][T18169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.508778][T25072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1905.603321][T25072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1905.614262][T25072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1905.618498][T25072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1905.632263][T25072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1906.675652][ T9521] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1906.955243][ T9521] usb 5-1: Using ep0 maxpacket: 32 [ 1906.962029][ T9521] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1907.000190][ T9521] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.041355][ T9521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.041705][ T9521] usb 5-1: Product: syz [ 1907.041940][ T9521] usb 5-1: Manufacturer: syz [ 1907.042168][ T9521] usb 5-1: SerialNumber: syz [ 1907.110404][ T9521] usb 5-1: config 0 descriptor?? [ 1907.218404][ T9521] usb 5-1: No union descriptors [ 1907.221714][ T9521] usb 5-1: unsupported MDLM descriptors [ 1907.883841][T28667] Bluetooth: hci0: command tx timeout [ 1907.948040][T18169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.083584][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.944990][T28667] Bluetooth: hci0: command tx timeout [ 1910.476470][ T5727] usb 5-1: USB disconnect, device number 88 [ 1912.035711][T28667] Bluetooth: hci0: command tx timeout [ 1914.105136][T28667] Bluetooth: hci0: command tx timeout [ 1919.497733][T25072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1919.522548][T25072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1919.543412][T25072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1919.572322][T25072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1919.590151][T25072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1921.955612][T28667] Bluetooth: hci4: command tx timeout [ 1924.036801][T28667] Bluetooth: hci4: command tx timeout [ 1924.314086][T25072] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1924.475697][T25072] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1924.519538][T25072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1924.532788][T25072] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1924.545050][T25072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1926.113885][T28667] Bluetooth: hci4: command tx timeout [ 1926.752389][T28667] Bluetooth: hci7: command tx timeout [ 1928.185175][T28667] Bluetooth: hci4: command tx timeout [ 1928.832572][T28667] Bluetooth: hci7: command tx timeout [ 1930.904936][T28667] Bluetooth: hci7: command tx timeout [ 1931.784270][T28782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1932.917035][T18169] bridge_slave_1: left allmulticast mode [ 1932.917612][T18169] bridge_slave_1: left promiscuous mode [ 1932.918764][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.985180][T28667] Bluetooth: hci7: command tx timeout [ 1933.700469][T18169] bridge_slave_0: left allmulticast mode [ 1933.701150][T18169] bridge_slave_0: left promiscuous mode [ 1933.702471][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.982678][T25072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1937.036188][T28792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1937.059817][T28792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1937.160573][T28792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1937.174353][T28792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1938.687143][T28790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6429'. [ 1939.307052][T28792] Bluetooth: hci3: command tx timeout [ 1941.393651][T28792] Bluetooth: hci3: command tx timeout [ 1943.605938][T28792] Bluetooth: hci3: command tx timeout [ 1945.636646][T28792] Bluetooth: hci3: command tx timeout [ 1948.356599][T18169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.754567][T18169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.984511][T18169] bond0 (unregistering): Released all slaves [ 1949.320665][T18169] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1949.331208][T18169] veth0_to_bond: left promiscuous mode [ 1949.352844][T18169] veth0_to_bond: left allmulticast mode [ 1949.441381][T18169] bond1 (unregistering): Released all slaves [ 1949.906926][T28790] tipc: Resetting bearer [ 1950.434047][T28790] tipc: Disabling bearer [ 1951.702663][T28790] team0 (unregistering): Port device xfrm0 removed [ 1953.395371][T23362] process 26735 (syz.4.5819) no longer affine to cpu1 [ 1958.243961][T28667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1958.262365][T28667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1958.277370][T28667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1958.312333][T28667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1958.442828][T28667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1960.665222][T28667] Bluetooth: hci1: command tx timeout [ 1962.745187][T28667] Bluetooth: hci1: command tx timeout [ 1963.995491][T18169] hsr_slave_0: left promiscuous mode [ 1964.215311][T18169] hsr_slave_1: left promiscuous mode [ 1964.220008][T18169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1964.220481][T18169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1964.579139][T18169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1964.579498][T18169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1964.825241][T28667] Bluetooth: hci1: command tx timeout [ 1966.894623][T18169] veth1_macvtap: left promiscuous mode [ 1966.911609][T28667] Bluetooth: hci1: command tx timeout [ 1967.045918][T18169] veth0_macvtap: left promiscuous mode [ 1967.046883][T18169] veth1_vlan: left promiscuous mode [ 1967.047865][T18169] veth0_vlan: left promiscuous mode [ 1967.866730][T28792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1967.900480][T28792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1967.920140][T28792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1967.936206][T28792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1967.976370][T28792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1970.275302][T28792] Bluetooth: hci2: command tx timeout [ 1970.564162][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1972.354467][T28792] Bluetooth: hci2: command tx timeout [ 1974.425046][T28792] Bluetooth: hci2: command tx timeout [ 1976.505808][T28792] Bluetooth: hci2: command tx timeout [ 1979.254182][T28667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1979.295826][T28667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1979.345937][T28667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1979.366151][T28667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1979.379857][T28667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1981.552135][T28667] Bluetooth: hci0: command tx timeout [ 1983.643053][T28667] Bluetooth: hci0: command tx timeout [ 1984.633861][T18169] team0 (unregistering): Port device team_slave_1 removed [ 1985.043608][T18169] team0 (unregistering): Port device team_slave_0 removed [ 1985.100855][T28792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1985.127469][T28792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1985.141879][T28792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1985.176909][T28792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1985.191491][T28792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1985.705612][T28667] Bluetooth: hci0: command tx timeout [ 1987.759276][T28667] Bluetooth: hci5: command tx timeout [ 1987.785089][T28667] Bluetooth: hci0: command tx timeout [ 1989.795303][T28667] Bluetooth: hci5: command tx timeout [ 1991.886104][T28667] Bluetooth: hci5: command tx timeout [ 1993.945105][T28792] Bluetooth: hci5: command tx timeout [ 1994.013554][T28792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1994.155387][T28792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1994.172719][T28792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1994.205650][T28792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1994.219480][T28792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1996.346047][T28792] Bluetooth: hci6: command tx timeout [ 1998.425028][T28792] Bluetooth: hci6: command tx timeout [ 2000.505525][T28792] Bluetooth: hci6: command tx timeout [ 2002.593445][T28792] Bluetooth: hci6: command tx timeout [ 2007.624131][T18169] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2007.646674][T18169] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2007.878633][T18169] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2007.896418][T18169] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2008.039659][T18169] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2008.061309][T18169] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2008.215775][T18169] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2008.227430][T18169] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2008.684163][T28810] bridge0: port 1(bridge_slave_0) entered blocking state [ 2008.692761][T28810] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.700591][T28810] bridge_slave_0: entered allmulticast mode [ 2008.709147][T28810] bridge_slave_0: entered promiscuous mode [ 2008.869438][T28810] bridge0: port 2(bridge_slave_1) entered blocking state [ 2008.877435][T28810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.885239][T28810] bridge_slave_1: entered allmulticast mode [ 2008.894315][T28810] bridge_slave_1: entered promiscuous mode [ 2009.143399][T28810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2009.168894][T28810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2009.410523][T28810] team0: Port device team_slave_0 added [ 2009.529936][T28810] team0: Port device team_slave_1 added [ 2009.990861][T18169] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2010.015172][T18169] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.058577][T28810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2010.067844][T28810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2010.095456][T28810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2010.111053][T28810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2010.111075][T28810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2010.111106][T28810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2010.340338][T18169] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2010.340384][T18169] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.513427][T28820] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.513498][T28820] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.513642][T28820] bridge_slave_0: entered allmulticast mode [ 2010.537350][T28820] bridge_slave_0: entered promiscuous mode [ 2010.556356][T28820] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.556431][T28820] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.556549][T28820] bridge_slave_1: entered allmulticast mode [ 2010.578640][T28820] bridge_slave_1: entered promiscuous mode [ 2010.715496][T18169] team0: Port device netdevsim1 removed [ 2010.724490][T18169] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2010.738688][T18169] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.804236][T28810] hsr_slave_0: entered promiscuous mode [ 2010.811246][T28810] hsr_slave_1: entered promiscuous mode [ 2010.853441][T28834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.854264][T28834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.854372][T28834] bridge_slave_0: entered allmulticast mode [ 2010.879033][T28834] bridge_slave_0: entered promiscuous mode [ 2010.898410][T28820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2010.913140][T28839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.913212][T28839] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.913352][T28839] bridge_slave_0: entered allmulticast mode [ 2010.914367][T28839] bridge_slave_0: entered promiscuous mode [ 2010.943995][T28839] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.953622][T28839] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.962563][T28839] bridge_slave_1: entered allmulticast mode [ 2010.972235][T28839] bridge_slave_1: entered promiscuous mode [ 2011.063541][T18169] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2011.074628][T18169] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.129139][T28834] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.129221][T28834] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.129320][T28834] bridge_slave_1: entered allmulticast mode [ 2011.130301][T28834] bridge_slave_1: entered promiscuous mode [ 2011.181716][T28820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.226947][T28829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.234333][T28829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.243226][T28829] bridge_slave_0: entered allmulticast mode [ 2011.252547][T28829] bridge_slave_0: entered promiscuous mode [ 2011.262312][T28829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.262394][T28829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.262495][T28829] bridge_slave_1: entered allmulticast mode [ 2011.286981][T28829] bridge_slave_1: entered promiscuous mode [ 2011.347833][T28820] team0: Port device team_slave_0 added [ 2011.438803][T28834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2011.458425][T28834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.473710][T28820] team0: Port device team_slave_1 added [ 2011.482024][T28839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2011.503678][T28839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.520423][T28829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2011.548145][T28829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.719026][T28834] team0: Port device team_slave_0 added [ 2011.736888][T28834] team0: Port device team_slave_1 added [ 2011.761438][T28820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.768823][T28820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.797285][T28820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.812406][T28820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.821743][T28820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.849385][T28820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2011.939570][T28834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.939604][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.939635][T28834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.940647][T28834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.940657][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.940681][T28834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.107722][T28839] team0: Port device team_slave_0 added [ 2012.118921][T28829] team0: Port device team_slave_0 added [ 2012.234434][T28839] team0: Port device team_slave_1 added [ 2012.270150][T28829] team0: Port device team_slave_1 added [ 2012.402395][T28820] hsr_slave_0: entered promiscuous mode [ 2012.403032][T28820] hsr_slave_1: entered promiscuous mode [ 2012.403459][T28820] debugfs: 'hsr0' already exists in 'hsr' [ 2012.403483][T28820] Cannot create hsr debugfs directory [ 2012.466661][T28839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.466693][T28839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2012.466723][T28839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.567043][T28667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2012.586426][T28667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2012.601308][T28667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2012.611153][T28667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2012.619242][T28667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2012.816565][T28839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.816596][T28839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2012.816633][T28839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.902533][T28829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.902566][T28829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2012.902599][T28829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.903712][T28829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.903733][T28829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2012.903757][T28829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2013.033896][T28834] hsr_slave_0: entered promiscuous mode [ 2013.042470][T28834] hsr_slave_1: entered promiscuous mode [ 2013.052387][T28834] debugfs: 'hsr0' already exists in 'hsr' [ 2013.059092][T28834] Cannot create hsr debugfs directory [ 2013.485261][T18169] bridge_slave_1: left allmulticast mode [ 2013.485297][T18169] bridge_slave_1: left promiscuous mode [ 2013.485446][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.511806][T18169] bridge_slave_0: left allmulticast mode [ 2013.511841][T18169] bridge_slave_0: left promiscuous mode [ 2013.511989][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.573247][T18169] batman_adv: batadv0: Interface deactivated: gretap1 [ 2014.120613][T18169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2014.138800][T18169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2014.150588][T18169] bond0 (unregistering): Released all slaves [ 2014.169862][T18169] bond1 (unregistering): Released all slaves [ 2014.518698][T18169] batman_adv: batadv0: Removing interface: gretap1 [ 2014.646908][T18169] bond0 (unregistering): Released all slaves [ 2014.669584][T28667] Bluetooth: hci3: command tx timeout [ 2014.681395][T18169] bond1 (unregistering): Released all slaves [ 2014.779378][T28839] hsr_slave_0: entered promiscuous mode [ 2014.780020][T28839] hsr_slave_1: entered promiscuous mode [ 2014.780416][T28839] debugfs: 'hsr0' already exists in 'hsr' [ 2014.780439][T28839] Cannot create hsr debugfs directory [ 2014.944826][T28829] hsr_slave_0: entered promiscuous mode [ 2014.945448][T28829] hsr_slave_1: entered promiscuous mode [ 2014.965896][T28829] debugfs: 'hsr0' already exists in 'hsr' [ 2014.965944][T28829] Cannot create hsr debugfs directory [ 2016.444646][T18169] hsr_slave_0: left promiscuous mode [ 2016.459076][T18169] hsr_slave_1: left promiscuous mode [ 2016.465494][T18169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2016.480049][T18169] hsr_slave_0: left promiscuous mode [ 2016.487184][T18169] hsr_slave_1: left promiscuous mode [ 2016.548902][T18169] veth1_macvtap: left promiscuous mode [ 2016.562001][T18169] veth0_macvtap: left promiscuous mode [ 2016.568498][T18169] veth1_vlan: left promiscuous mode [ 2016.573992][T18169] veth0_vlan: left promiscuous mode [ 2016.744847][T28667] Bluetooth: hci3: command tx timeout [ 2016.953111][T18169] team0 (unregistering): Port device team_slave_1 removed [ 2016.971698][T18169] team0 (unregistering): Port device team_slave_0 removed [ 2018.272151][T28907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.282229][T28907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.289721][T28907] bridge_slave_0: entered allmulticast mode [ 2018.312092][T28907] bridge_slave_0: entered promiscuous mode [ 2018.313176][T28907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.313225][T28907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.313303][T28907] bridge_slave_1: entered allmulticast mode [ 2018.314543][T28907] bridge_slave_1: entered promiscuous mode [ 2018.463971][T28907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2018.490199][T28907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2018.503012][T18169] IPVS: stop unused estimator thread 0... [ 2018.557049][T18169] IPVS: stop unused estimator thread 0... [ 2018.573645][T28820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2018.590264][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2018.598064][T28820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2018.607021][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2018.620850][T28820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2018.652589][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2018.668765][T28907] team0: Port device team_slave_0 added [ 2018.686503][T28820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2018.698509][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2018.721403][T28907] team0: Port device team_slave_1 added [ 2018.775183][T18169] bridge_slave_1: left allmulticast mode [ 2018.775209][T18169] bridge_slave_1: left promiscuous mode [ 2018.775317][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.776210][T18169] bridge_slave_0: left allmulticast mode [ 2018.776224][T18169] bridge_slave_0: left promiscuous mode [ 2018.776316][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.824866][T28667] Bluetooth: hci3: command tx timeout [ 2018.887042][T18169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2018.902215][T18169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2018.912153][T18169] bond0 (unregistering): Released all slaves [ 2019.112234][T28907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2019.112256][T28907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.112279][T28907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.113337][T28907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.113349][T28907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.195710][T28907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.209834][T18169] hsr_slave_0: left promiscuous mode [ 2019.216373][T18169] hsr_slave_1: left promiscuous mode [ 2019.216790][T18169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2019.230338][T18169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2019.377773][T18169] team0 (unregistering): Port device team_slave_1 removed [ 2019.395443][T18169] team0 (unregistering): Port device team_slave_0 removed [ 2019.632851][T28907] hsr_slave_0: entered promiscuous mode [ 2019.647293][T28907] hsr_slave_1: entered promiscuous mode [ 2019.968506][T28820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2020.050753][T28820] 8021q: adding VLAN 0 to HW filter on device team0 [ 2020.174423][T18165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.174488][T18165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2020.203039][T18165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.203094][T18165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2020.906013][T28667] Bluetooth: hci3: command tx timeout [ 2020.977343][T28820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2021.053451][T28820] veth0_vlan: entered promiscuous mode [ 2021.080811][T28820] veth1_vlan: entered promiscuous mode [ 2021.092812][T28839] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2021.105778][T28839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2021.120522][T28839] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2021.131627][T28839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2021.132031][T28839] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2021.156137][T28839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2021.167039][T28839] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2021.182300][T28839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2021.348535][T28820] veth0_macvtap: entered promiscuous mode [ 2021.362903][T28820] veth1_macvtap: entered promiscuous mode [ 2021.391572][T28820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2021.413918][T28820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2021.640526][T28839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2021.745804][ T6241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.745953][ T6241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.746388][ T6241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.746542][ T6241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.790257][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.790279][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.810024][T28839] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.829855][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.829908][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.901712][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.901768][T18169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.940571][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.940597][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.440736][T28792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2022.450821][T28792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2022.467775][T28792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2022.490548][T28792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2022.498354][T28792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2023.140929][T28834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2023.200270][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2023.200699][T28834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2023.221312][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2023.453789][T14331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.517976][T28834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2023.526826][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2023.534507][T28834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2023.548632][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2023.757068][T14331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.019935][T28907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.114955][T28839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2024.287918][T14331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.429387][T28907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.497234][T14331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.572548][T28907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.586633][T28792] Bluetooth: hci1: command tx timeout [ 2024.678595][T28834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2024.727697][T28907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.839828][T28834] 8021q: adding VLAN 0 to HW filter on device team0 [ 2024.885877][T28839] veth0_vlan: entered promiscuous mode [ 2024.907688][T26171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.907751][T26171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2025.046748][T26171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.046805][T26171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2025.099911][T28839] veth1_vlan: entered promiscuous mode [ 2025.263992][T14331] bridge_slave_1: left allmulticast mode [ 2025.272383][T14331] bridge_slave_1: left promiscuous mode [ 2025.278437][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.290377][T14331] bridge_slave_0: left allmulticast mode [ 2025.290404][T14331] bridge_slave_0: left promiscuous mode [ 2025.290497][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.543921][T14331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2025.559680][T14331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2025.573265][T14331] bond0 (unregistering): Released all slaves [ 2025.859241][T28839] veth0_macvtap: entered promiscuous mode [ 2025.954289][T28839] veth1_macvtap: entered promiscuous mode [ 2026.000477][T28953] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.009941][T28953] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.010049][T28953] bridge_slave_0: entered allmulticast mode [ 2026.032898][T28953] bridge_slave_0: entered promiscuous mode [ 2026.073063][T14331] hsr_slave_0: left promiscuous mode [ 2026.081191][T14331] hsr_slave_1: left promiscuous mode [ 2026.088026][T14331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2026.095581][T14331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2026.103872][T14331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2026.103893][T14331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2026.128027][T14331] veth1_macvtap: left promiscuous mode [ 2026.128064][T14331] veth0_macvtap: left promiscuous mode [ 2026.128117][T14331] veth1_vlan: left promiscuous mode [ 2026.128169][T14331] veth0_vlan: left promiscuous mode [ 2026.449273][T14331] team0 (unregistering): Port device team_slave_1 removed [ 2026.469818][T14331] team0 (unregistering): Port device team_slave_0 removed [ 2026.607024][T28953] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.614215][T28953] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.626536][T28953] bridge_slave_1: entered allmulticast mode [ 2026.633361][T28953] bridge_slave_1: entered promiscuous mode [ 2026.666465][T28792] Bluetooth: hci1: command tx timeout [ 2026.743180][T28839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2026.751949][T28829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2026.778771][T28829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2026.792045][T28829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2026.803877][T28829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2026.838095][T28953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.878039][T28839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2026.897059][T28829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2026.922424][T28829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2026.940606][T28953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.968194][T28829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2026.993747][T28829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2027.060700][T26171] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.060748][T26171] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.060783][T26171] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.060804][T26171] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.130229][T28953] team0: Port device team_slave_0 added [ 2027.142382][T28953] team0: Port device team_slave_1 added [ 2027.375879][T28953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2027.375899][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2027.375921][T28953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2027.422717][T28953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2027.429881][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2027.429908][T28953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2027.917129][T28953] hsr_slave_0: entered promiscuous mode [ 2027.925685][T28953] hsr_slave_1: entered promiscuous mode [ 2027.932531][T28953] debugfs: 'hsr0' already exists in 'hsr' [ 2027.938665][T28953] Cannot create hsr debugfs directory [ 2027.953081][T28834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2027.967473][T18160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.967488][T18160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.088334][T28907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2028.098515][T28907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2028.109919][T28907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2028.120867][T28907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2028.130839][T28907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2028.144056][T28907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2028.173393][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.173416][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.192104][T28907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2028.207185][T28907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2028.371121][T28829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2028.453413][T28829] 8021q: adding VLAN 0 to HW filter on device team0 [ 2028.505728][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.505786][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2028.553704][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.553760][ T7594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2028.745972][T28792] Bluetooth: hci1: command tx timeout [ 2028.912860][T28907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2029.001512][T28834] veth0_vlan: entered promiscuous mode [ 2029.018005][T28907] 8021q: adding VLAN 0 to HW filter on device team0 [ 2029.033330][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.033393][T18169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2029.085896][T28834] veth1_vlan: entered promiscuous mode [ 2029.098046][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.098107][T18169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2029.199188][T28834] veth0_macvtap: entered promiscuous mode [ 2029.301916][T28834] veth1_macvtap: entered promiscuous mode [ 2029.387266][T28834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2029.408288][T28834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2029.545961][T18169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.546638][T18169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.546847][T18169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.547037][T18169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.793482][T18160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.793504][T18160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.988487][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.988512][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2031.073916][T28792] Bluetooth: hci1: command tx timeout [ 2031.505099][ T5713] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2031.665552][T28829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2031.674548][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2031.674587][ T5713] usb 6-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 2031.694650][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2031.694760][ T5713] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2031.694799][ T5713] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2031.727907][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.727933][ T5713] usb 6-1: Product: syz [ 2031.727948][ T5713] usb 6-1: Manufacturer: syz [ 2031.727959][ T5713] usb 6-1: SerialNumber: syz [ 2031.848850][T28953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2031.946350][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2031.957381][T29042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.957621][T29042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.992362][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2032.032371][T28907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2032.051720][T28953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2032.068750][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2032.079364][T28953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2032.110410][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2032.110906][T28953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2032.136484][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2032.298295][T28907] veth0_vlan: entered promiscuous mode [ 2032.329427][T28907] veth1_vlan: entered promiscuous mode [ 2032.461345][T28907] veth0_macvtap: entered promiscuous mode [ 2032.488200][T28907] veth1_macvtap: entered promiscuous mode [ 2032.531683][T28953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2032.588522][T28907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2032.617285][T28953] 8021q: adding VLAN 0 to HW filter on device team0 [ 2032.630898][T28907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2032.695732][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.695794][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2032.719384][T29069] vivid-000: disconnect [ 2032.757670][T26171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.769622][T28829] veth0_vlan: entered promiscuous mode [ 2032.788890][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.788949][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2032.815194][ T6241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.815631][ T6241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.815661][ T6241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.916425][T28829] veth1_vlan: entered promiscuous mode [ 2033.091618][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2033.091640][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2033.187935][T28829] veth0_macvtap: entered promiscuous mode [ 2033.219290][T28829] veth1_macvtap: entered promiscuous mode [ 2033.281780][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2033.309022][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2033.319060][T28947] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2033.332862][T28829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2033.386762][T28829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2033.468621][ T6241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2033.468820][ T6241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2033.469005][ T6241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2033.469249][ T6241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2033.511144][T28947] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 2033.521763][T28947] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2033.521809][T28947] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2033.521837][T28947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.570876][T28947] pl2303 8-1:1.0: required endpoints missing [ 2033.629556][T28947] pl2303 8-1:1.1: required interrupt-in endpoint missing [ 2033.833084][T18166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2033.833108][T18166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2033.972352][T18169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2033.972383][T18169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2034.797122][T28953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2034.922628][T28953] veth0_vlan: entered promiscuous mode [ 2034.947486][T28953] veth1_vlan: entered promiscuous mode [ 2035.047902][T28953] veth0_macvtap: entered promiscuous mode [ 2035.076655][T28953] veth1_macvtap: entered promiscuous mode [ 2035.155772][T28953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2035.192948][T28953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2035.256136][T18169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.256387][T18169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.256425][T18169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.256445][T18169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.619924][T18166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2035.619963][T18166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2035.773960][T28947] usb 8-1: USB disconnect, device number 36 [ 2035.796772][T14331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2035.796808][T14331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2035.822700][T29070] vivid-000: reconnect [ 2036.116140][T29097] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2036.216636][ T31] audit: type=1400 audit(2000000240.540:3493): avc: denied { write } for pid=29110 comm="syz.1.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2036.278401][T29097] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2036.278463][T29097] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 2036.296886][T29097] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.296909][T29097] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2036.296944][T29097] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2036.330783][T29097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.330815][T29097] usb 4-1: Product: syz [ 2036.330832][T29097] usb 4-1: Manufacturer: syz [ 2036.330842][T29097] usb 4-1: SerialNumber: syz [ 2036.388038][T29114] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6441'. [ 2036.570811][T29117] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6443'. [ 2036.597438][ T5713] usb 6-1: 1:1 : invalid UAC_AS_GENERAL desc [ 2036.614188][T29104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2036.623891][T29104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2036.656863][ T5713] usb 6-1: 0:2 : does not exist [ 2036.792183][ T5713] usb 6-1: USB disconnect, device number 25 [ 2037.063259][ T31] audit: type=1400 audit(2000000241.380:3494): avc: denied { getopt } for pid=29110 comm="syz.1.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2037.767884][T29132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.796194][T29132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.621658][ T31] audit: type=1400 audit(2000000243.940:3495): avc: denied { listen } for pid=29126 comm="syz.6.6446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2039.916641][T29127] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 2040.335735][ T5713] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2040.495280][ T5713] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 2040.505835][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.703903][T29144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2040.734047][ T5713] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 2041.038474][T29149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2041.072260][T29149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2041.212292][T29145] binder: 29143:29145 ioctl c018620c 200000000240 returned -22 [ 2041.404578][T29097] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 2041.415039][T29097] usb 4-1: 0:2 : does not exist [ 2041.587590][T29097] usb 2-1: USB disconnect, device number 28 [ 2041.701297][ T9521] usb 4-1: USB disconnect, device number 45 [ 2041.722798][T29160] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2041.751606][T29160] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6453'. [ 2041.905484][T29154] openvswitch: netlink: IPv4 tunnel dst address is zero [ 2042.076456][T29163] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6454'. [ 2044.276657][T29181] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6461'. [ 2044.298188][T29183] xt_cgroup: invalid path, errno=-2 [ 2044.545290][ T9521] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 2044.580624][T29183] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2044.723329][ T9521] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2044.723364][ T9521] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 2044.743390][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 2044.743417][ T9521] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 2044.776570][ T9521] usb 8-1: string descriptor 0 read error: -22 [ 2044.776642][ T9521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.792845][T29184] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2044.792882][T29184] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2044.816168][ T9521] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2044.864859][T29097] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2045.031681][T29097] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2045.031722][T29097] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 2045.050862][T29097] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.050887][T29097] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2045.050919][T29097] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2045.094957][T29097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.094985][T29097] usb 4-1: Product: syz [ 2045.095001][T29097] usb 4-1: Manufacturer: syz [ 2045.095011][T29097] usb 4-1: SerialNumber: syz [ 2045.254891][ T9521] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 2045.331552][T29189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.331818][T29189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.427875][ T9521] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2045.441339][ T9521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.441366][ T9521] usb 2-1: Product: syz [ 2045.441384][ T9521] usb 2-1: Manufacturer: syz [ 2045.441396][ T9521] usb 2-1: SerialNumber: syz [ 2045.469042][ T9521] usb 2-1: config 0 descriptor?? [ 2045.573701][ T5833] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 2045.585764][ T5833] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 2045.594164][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/0:2H Tainted: G L syzkaller #0 PREEMPT(full) [ 2045.605162][ T5833] Tainted: [L]=SOFTLOCKUP [ 2045.609475][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2045.619514][ T5833] Workqueue: events_highpri f_midi_in_work [ 2045.625311][ T5833] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 2045.630483][ T5833] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 4b 6c 2e fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 2045.650072][ T5833] RSP: 0018:ffffc90004857a08 EFLAGS: 00010006 [ 2045.656108][ T5833] RAX: dffffc0000000000 RBX: ffff88807f6b4210 RCX: 0000000000000001 [ 2045.664049][ T5833] RDX: 000000000000000c RSI: ffffffff87dd67e5 RDI: 0000000000000060 [ 2045.672002][ T5833] RBP: ffff88802178c248 R08: 0000000000000005 R09: 0000000000000005 [ 2045.679944][ T5833] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802178cc00 [ 2045.687891][ T5833] R13: ffff88807f6b4200 R14: ffff88802178c240 R15: 0000000000000000 [ 2045.695833][ T5833] FS: 0000000000000000(0000) GS:ffff888123b6d000(0000) knlGS:0000000000000000 [ 2045.704734][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2045.711296][ T5833] CR2: 0000001b2f806ff8 CR3: 000000006b77b000 CR4: 00000000003526f0 [ 2045.719246][ T5833] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 2045.727200][ T5833] DR3: 00000000c0f00480 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2045.735148][ T5833] Call Trace: [ 2045.738402][ T5833] [ 2045.741313][ T5833] usb_ep_queue+0xfa/0x3c0 [ 2045.745704][ T5833] f_midi_in_work+0x9b0/0x1580 [ 2045.750444][ T5833] ? __pfx_f_midi_in_work+0x10/0x10 [ 2045.755613][ T5833] ? process_one_work+0x906/0x1b10 [ 2045.760707][ T5833] ? process_one_work+0x906/0x1b10 [ 2045.765804][ T5833] process_one_work+0xac7/0x1b10 [ 2045.770717][ T5833] ? __pfx___mod_timer+0x10/0x10 [ 2045.775636][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 2045.780992][ T5833] ? __pfx_f_midi_in_work+0x10/0x10 [ 2045.786176][ T5833] worker_thread+0x5ef/0xe50 [ 2045.790742][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 2045.795828][ T5833] ? kthread+0x13a/0x450 [ 2045.800094][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 2045.805214][ T5833] kthread+0x373/0x450 [ 2045.809317][ T5833] ? __pfx_kthread+0x10/0x10 [ 2045.813897][ T5833] ret_from_fork+0x730/0xd60 [ 2045.818476][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 2045.823573][ T5833] ? __switch_to+0x800/0x10f0 [ 2045.828241][ T5833] ? __pfx_kthread+0x10/0x10 [ 2045.832824][ T5833] ret_from_fork_asm+0x1a/0x30 [ 2045.837568][ T5833] [ 2045.840561][ T5833] Modules linked in: [ 2045.844442][ T5833] ---[ end trace 0000000000000000 ]--- [ 2045.849879][ T5833] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 2045.849906][ T5833] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 4b 6c 2e fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 2045.849917][ T5833] RSP: 0018:ffffc90004857a08 EFLAGS: 00010006 [ 2045.849927][ T5833] RAX: dffffc0000000000 RBX: ffff88807f6b4210 RCX: 0000000000000001 [ 2045.849935][ T5833] RDX: 000000000000000c RSI: ffffffff87dd67e5 RDI: 0000000000000060 [ 2045.849941][ T5833] RBP: ffff88802178c248 R08: 0000000000000005 R09: 0000000000000005 [ 2045.849948][ T5833] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802178cc00 [ 2045.849955][ T5833] R13: ffff88807f6b4200 R14: ffff88802178c240 R15: 0000000000000000 [ 2045.849962][ T5833] FS: 0000000000000000(0000) GS:ffff888123b6d000(0000) knlGS:0000000000000000 [ 2045.849974][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2045.849981][ T5833] CR2: 0000001b2f806ff8 CR3: 000000006b77b000 CR4: 00000000003526f0 [ 2045.849988][ T5833] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 2045.849994][ T5833] DR3: 00000000c0f00480 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2045.850003][ T5833] Kernel panic - not syncing: Fatal exception [ 2045.965909][ T5833] Kernel Offset: disabled [ 2045.970289][ T5833] Rebooting in 86400 seconds..