last executing test programs: 8m2.44749267s ago: executing program 1 (id=306): bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x30, r1, 0x701, 0x0, 0x25dfdbfa, {{}, {@void, @void, @val={0xc, 0x99, {0xfbca, 0x23}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x459}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044881}, 0x40) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100, @val=0x80}}}}}}}}, 0x3a) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000640)={0x0, 0x44c0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000a80)="0549527141e628153e05a761847d8308a8d77881156f0e222ca9da33299c38548042ab69d0be60b20d75633865ae28718df01a206c3f450d4093dd8534a95687ff977c22a83b20e010ce42d939513b5a16ef27cf03358c55082bdb9ae8d451c2ea26065fda7869d3382eab1aa03eaedf8a981c6db0bafcf2b8f94d7b88e8d539f2e43809ae5523", &(0x7f0000000380)=@tcp6=r7, 0x2000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) 8m1.925613434s ago: executing program 1 (id=308): bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x8000}, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) syz_emit_ethernet(0xf8, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000140)=0x400, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 8m0.792580174s ago: executing program 1 (id=312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc) 7m59.911225758s ago: executing program 1 (id=314): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r2, 0x8d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r3, 0x3}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r5, @ANYBLOB="71062abd7000fddbdf251a00000004002e800c0006000100000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\b\x00\x00', @ANYRES16=r2, @ANYRES8=r2], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0xd, &(0x7f0000000380)=0x0) io_destroy(r8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80a00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r9, &(0x7f0000000100)={0x18, 0x0, r10}, 0x18) 7m54.478772827s ago: executing program 1 (id=328): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_pidfd_open(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getdents64(r0, &(0x7f00000006c0)=""/131, 0x83) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "150eb1a5a620150e", "17f256fd3e1da1c3982903936301bad7", "fd7f3ac8", "23052c9824694407"}, 0x28) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 7m52.89339012s ago: executing program 1 (id=331): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x6}}, 0x3, 0x81}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet(0x2, 0x801, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x2, 0x8007, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x0, 0x8000000000000001, 0x48c, 0x1, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x80000000007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) 7m37.448305465s ago: executing program 32 (id=331): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x6}}, 0x3, 0x81}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet(0x2, 0x801, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x2, 0x8007, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x0, 0x8000000000000001, 0x48c, 0x1, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x80000000007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) 4m1.331175698s ago: executing program 0 (id=1061): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000f00)="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", 0x5c6}], 0x1}}], 0x2, 0xc044) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2004}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRESHEX=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x30, r7, 0xe7816804f9787cab, 0x70b52a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="000429bd7000fedbdf250c00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900030000003800000004000a0011000a009b51ce3abc6ea1d201d228a46100000018005080140004008260caed1d678e931c6c43fb980f104f09000a007c70da84e0000000040028000800090005ac0f000c000a004e6bf356d31b9b6434005080050002000300000011000100877111490e78b693c4eaf3337e000000040006000800030001ac0f000500020002000000080037006ae8c82f65bd2901000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x400c840) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x8001af85, &(0x7f000011fec0)) r11 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) r12 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0x724e, 0x800, 0xffffffff, 0x24}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffefffe, 0x0, 0x4) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, r15}}) io_uring_enter(r12, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r11, 0xc0305602, &(0x7f0000000000)={0x1330, 0xc, 0x3008, 0x1}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r16 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) ioctl$BLKGETSIZE(r16, 0x1260, &(0x7f00000000c0)) 4m0.628872948s ago: executing program 0 (id=1062): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x1000) userfaultfd(0x80001) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpid() prlimit64(r1, 0xf, &(0x7f0000000000)={0x10000, 0x3ff}, &(0x7f0000000040)) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44040) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) socket$unix(0x1, 0x5, 0x0) timer_create(0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 3m59.301751514s ago: executing program 0 (id=1065): mount(0x0, 0x0, 0x0, 0x1214040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0xd206, 0x10, 0x3, 0x4f}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x1, &(0x7f0000000480)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1, 0x8}) io_uring_enter(r4, 0x6e69, 0x0, 0xe, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) 3m58.080695537s ago: executing program 0 (id=1068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x2d, 0x10, @val=@kprobe_multi=@addrs={0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x400, 0x9], 0x4}}, 0x30) 3m57.801512656s ago: executing program 0 (id=1070): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304008ff6d9dadbdf2500007400", @ANYRES32, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800600270001040000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000018"], 0x50}}, 0x0) 3m49.657119335s ago: executing program 0 (id=1099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) read$FUSE(r5, &(0x7f00000006c0)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r7 = syz_usb_connect_ath9k(0x3, 0xffffff16, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4c, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x8011}, 0x4000054) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, r0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3m48.030386578s ago: executing program 33 (id=1099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) read$FUSE(r5, &(0x7f00000006c0)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r7 = syz_usb_connect_ath9k(0x3, 0xffffff16, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4c, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x8011}, 0x4000054) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, r0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1m56.503350053s ago: executing program 2 (id=1422): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) semget$private(0x0, 0x4, 0x4f0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r4, 0x0}]) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 1m55.500774312s ago: executing program 2 (id=1427): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0]) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000004b80), 0x0, 0x20000) 1m54.34969394s ago: executing program 2 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x13, r6, 0xb530c000) read$char_usb(r5, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r7, &(0x7f0000005c00)=[{&(0x7f0000000880)=""/256, 0x100}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000a40)={0x28, 0x10000, r8, r8, 0x7fffffffffffbffe, 0xfffffffffffdfffe, 0x0, 0x3ce3e}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r9, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) 1m51.06950802s ago: executing program 2 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r2 = openat$ocfs2_control(0xffffff9c, 0x0, 0x60000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="03000000000000", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r0, &(0x7f0000002a00)) 1m49.927898464s ago: executing program 2 (id=1440): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/180, &(0x7f0000000240)=0xb4) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x1, 0xa, 0x1) setsockopt$WPAN_SECURITY(r4, 0x11e, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x24, &(0x7f0000004700), 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x0, 0x10006e, 0x20000004, 0xc18, 0x6]}, &(0x7f0000000040)=0x54) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 1m48.238752034s ago: executing program 2 (id=1448): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x1, 0x100000, 0x2000, &(0x7f00005e5000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000100), 0x1) ftruncate(r4, 0x51a9497) r5 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 1m47.358263456s ago: executing program 34 (id=1448): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x1, 0x100000, 0x2000, &(0x7f00005e5000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000100), 0x1) ftruncate(r4, 0x51a9497) r5 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 15.857872219s ago: executing program 6 (id=1697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/180, &(0x7f0000000240)=0xb4) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x11e, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x24, &(0x7f0000004700), 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x0, 0x10006e, 0x20000004, 0xc18, 0x6]}, &(0x7f0000000040)=0x54) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 13.299228655s ago: executing program 6 (id=1704): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) epoll_create1(0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x7, &(0x7f0000000380)=""/210) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x440b0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 9.660238831s ago: executing program 6 (id=1714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/180, &(0x7f0000000240)=0xb4) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1, 0xa, 0x1) setsockopt$WPAN_SECURITY(r3, 0x11e, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x24, &(0x7f0000004700), 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x0, 0x10006e, 0x20000004, 0xc18, 0x6]}, &(0x7f0000000040)=0x54) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 7.112888892s ago: executing program 7 (id=1722): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220a000000574c29b7e3677d1c4d02668a6e8704de907a308d5f0d20b0974147d3cbbfed6dbed19190496db7089a12372a280fa4a392bd9ca66bbd045451d0fd125fd32f4685c201c2534f1b31280d237dae4e4ebc96319e766b21eae829ec0a734784c5dde1fc428154695136b62b924eb3d52f9ffc3b3754ac7f698c6344f16226dd62df701281d82c492f14d9f72261823e98c2898a1bd35888ffc616f5828a79a281810f11e93a2d2f005381d4fcd340487b46bec6361894933cc0feae3a8cc94d7f86e7a6ccd266c3b3af063f2d16ade2a61313"], 0x0}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) 7.076260831s ago: executing program 3 (id=1723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000dc0)='syz0\x00', 0x1ff) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r8, r8, 0x0, 0x8000002) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000000c00)=[{0x2, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], &(0x7f0000000340)=[0x2, 0x100000001, 0x8001, 0x7fff]}, {0x7, 0x1, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000cc0)=""/16, 0x10}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/81, 0x51}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/210, 0xd2}], 0x0}, {0x3, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000008c0)=""/33, 0x21}, {&(0x7f0000000900)=""/240, 0xf0}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x0}], 0x3) 6.102448954s ago: executing program 7 (id=1725): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x100000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300b8f454f5d82605e7cf5d448d334fec6ac647f095dbe208234a00fecdc7b92e9ea93f6051fbcef34c4924b67e44b6ea3dcbf61fba7e673be7a5ceb4e37fcf3c8903c0e2d9d364413b67987d9d328ce4aa704369561bf0418666cc660eac13a33b602c658a4a1cbeb336f3d220b5dd995565a82742d0d2746c4601763b53b61bd03de68f4becd5bc0306018566aa9299b2464724b7d7e1cc349a59a14f366404b20a2116172a38381727e59d", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000004c00)={0x0, 0x10, &(0x7f0000004bc0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000004c40)=0x10) shutdown(r3, 0x1) 6.058307196s ago: executing program 3 (id=1727): socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0xffffffffffff8000, 0x8001) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x200000000000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.999460843s ago: executing program 4 (id=1728): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x48040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc0) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000002340)=""/137) add_key$user(0x0, &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r3 = timerfd_create(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) poll(&(0x7f0000000100)=[{r3, 0x44b2}], 0x1, 0x5b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 5.5330567s ago: executing program 4 (id=1729): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340), 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x2, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0xfff3}, {0x1, 0x4}, {0x3, 0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.213033412s ago: executing program 7 (id=1730): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=r2], 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x0, 0x1a2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @empty, 0xffffffff}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) socket(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r6, &(0x7f0000003100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x300000000000000, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 5.192587051s ago: executing program 6 (id=1731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.79137808s ago: executing program 3 (id=1733): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00') readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) r5 = syz_clone3(&(0x7f0000002840)={0x80, &(0x7f0000001400)=0xffffffffffffffff, &(0x7f00000016c0)=0x0, &(0x7f0000001700)=0x0, {0x3f}, &(0x7f0000001740)=""/4096, 0x1000, &(0x7f0000002740)=""/142, &(0x7f0000002800)=[0x0], 0x1, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f0000002900)=0x0, &(0x7f0000002940)=0x0, &(0x7f0000002980)=0x0) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r15, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f000000b980)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000340)="bb045780e992a67e9bb5469813c4860359769214a81ff0ba4fcea1780e586686565ac3fb9196e37bb0397992ba79b83e7cfb08a50a6937eba69d9a4c1260cb3a3a38f0", 0x43}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="23f656fa0e3940dd884fb8e158c23c9fbe4457e82c3e22c47490be3df3649a361e58d7", 0x23}, {&(0x7f0000001480)="a6164902ebf999655f31d1f569c0b350bb5524cd5caefb179270711d41aaa8db0c8687020846425f1d79c547e10c9e2b0d538a51fd394794d7c9c9f8d0bf5614b952214551fc3906a1c39a71a19b6021b8e339eec78576e7463e4bd960f5bef8f3458dc5c73293d4212980e6c8d986c872d02b1b2fdfffaa8d28fe70826c5cb8460c12b8f548e917503cb7b7adc0801218002be47641dbb7281ed99c9022959909509e897b3bfc0734c41522da4245eedb887abb49d9c53a25a7a2ddb8", 0xbd}, {&(0x7f0000001540)="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", 0xfe}], 0x5, &(0x7f0000003b80)=[@rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x2c, 0x1, 0x1, [r1, r4, r3, r2, r3, r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x10}}, @rights={{0x0, 0x1, 0x1, [r3, r4, r6, r1, 0xffffffffffffffff, r3, r2]}}, @rights={{0xfffffffffffffd6e, 0x1, 0x1, [r15, r4, r1, r4, r4]}}, @cred={{0x1c}}], 0xd8, 0x4008020}}, {{&(0x7f0000002ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002b40)="2fef8e2101a5868d2d172e148bb58ca22fa2183007c8dfcc9434b11ebd46159523877ffbb68facd7ac8fe00e749d66429f716a8ac4661cbfde7b5066492ab0d2a5bf5991c8108f115ac88961ff36d3ea74b0c1563531e40ad97f82af616feae4a4252c0b6fcfb486ba4e1b218f6c", 0x6e}, {&(0x7f0000002bc0)="ddcbc9158f9cb078121dc9651dde2c200e35fbdb9643c404925e91f9233d0fc2b72afa4c7d6901271c20b98d579a1166e087843170addd8715f3cb1e4931394354d1b89848ad9bbcd773fe2c49db814592346016a380c2052dfd2622494e8181256da5b84580f7dc5af675e35e2c47a3e90f898c252a63f08fda9c03bf88b71b999167989cfee58c0c9f9fe0406a3853e10d25ab748285e3d995c2aec97773503e0a775fd302c0dafb94ca41f6dfee85d23be479", 0xb4}, {&(0x7f0000002c80)='E\v', 0x2}, {&(0x7f0000002cc0)="842d251abce06b3688130aee3fed7ee778e5850539c36244af6c85250f21041d7133ea876c11ff1405c8de99acdb8177d236b4792e71e53586bb556c882efa7a1181c45c22d03368374d9f9e92a3d21daac2442e06c4ac677edca69e664fa983c83c5c1b3b48ff994778cbe23a1ea3d56ad2ab7e554e6b227c510c8a6a1ee5", 0x7f}], 0x4, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r2, r15, r3, r2, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r15, r1, r3, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}], 0x88}}, {{&(0x7f0000002f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002f80)="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", 0xfa}, {&(0x7f0000003080)="5717985bccdd2770", 0x8}, {&(0x7f00000030c0)="612c47540fd61ffd391cfd89905409f19b79fbd538800963ca43f4ea0a071e224e2e73e116d806f17f70ed13ef115dce75cd25e20b585bf3b3ba089491d77188be80b7fd795b589afdf89923256a5ac83483bb25a5c4a8f92064e7ce06ef72bb75fe979ffdb84eddea123ba89c5caf93d1f46fab7df3eb8c9eedacc7d0998ff2fb76f336c88171730edcc7dc9dbd0abb8e5762ff7504942c8c19e4fb7fa7e502362a33cdfa47ccc324c3056cb65da9298221f77dcec14145977313aeaa3b65612d", 0xc1}], 0x3, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0x0, r16, r14}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16}}}], 0xb8, 0x80}}, {{&(0x7f0000003300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003380)="4ea6a2bb0587c6c69fb7bd7602f4fe0abffea5abc3b3f7c3a11686269b5fb8fb6cd08a5e392094a899eeab9d7a7505d6ba5b944f9786ed686aed0ec034af42b574c338cf8ece936afe0531611c238e39dc8cf51f96c1011e255718dcb74e6119e357b2dedbfd1fbb00e24c48ed3b5abc360a881312c8459d76b85eaefe9533af27c1eb6e1930649e82d162e9db40e5e0796b3a45219046278a", 0x99}, {&(0x7f0000003440)="f37b56930c3b30b7e2e0cc14c81e7d19f5a2bb50e3c4618dfd70ed43625d50f536c8958896b65dc5ce893d6cfe8846e373bf659da9d9d6f3c1bff3017cef69c3c57d82c4f4c6e0c314247f228b0fc99b679ea3d04f183c48bab29c4b87a85968b49d668e63af360bfd43176ab54f3b5dd0b1ed007f93de904981b759d0c83a84e0a9ad7d8fb8b06b812bf23327d839785aa0f938475740e7e0c3f3015367f4e3ff414ae3a9db695872d7d2e3f05226f8cb01f171f2af46b983e67c6851f2b42348e8794395f255d5d27403f1c82e3fd5b839c7fc4c32608edeae5cb006746d52928076f48eb5a5b0fb671ec86020c2d187534d7e4d76", 0xf6}, {&(0x7f0000003540)="1ede3288c4dc6d5b8f11f9d80ea21a387245ee91850f17424b4ff899e6773c96fefddd64825406d4a8c509a30a526cb2de7ab18ddbc297bf5c4097b33c3c1c164c34d9405846d9b8b6221e2990c0157f3f1670ec8aad197072ecdbf9b74bba49e433cad11985e80fa0c1a1d049ff21218367be7ab964e8778ebfc3bc1bd6af4761d9dad991c4501c5803fe7f0986f966adaf8a3401725f7dc038b9461f0c259c318c8ce35a5e920e577a1e64d3", 0xad}, {&(0x7f0000003600)="c3499990fbf8634ae28c221897538e4566cf5b1941f4c733949a4017946b4c404aad1c200e68b61747f238423a9e1988ca37a5074f54da34713434ccd6909aaf7257f69fb211e8c89857304f22043c36e8d088b56ee0f781ca08c241864570d54088dc37b925f991eac8ed86cd2e38db39916b45a961c765a464324f4cc4533ab6b9fdc0b0cb42422f65fc132c1d6535f77bf069ec89c12df20b68599fab554c7aeab7aba342221a9d979b8964d5e2a5c567a0abd880a194c606f8172a6f2d9b16f8fbe9", 0xc4}], 0x4, 0x0, 0x0, 0x4000}}, {{&(0x7f0000003740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f00000037c0)="567a19e0a43885ced8632074380f81f6add755fd47b859", 0x17}, {&(0x7f0000003800)="9ec538dcff852c8027e3214a1b53189cadf5c630b127c936a11b6798610ed041ea64ad01b170efd14fa251d15dd185aa559fc57920951ad3f625b4cdf8a37ee45a924860c5c481f1f3a620447bfd5f7d41c7ae7b2da97c8b0dbd705ea374aa5d93951129127b010bb97b771409ccc1dbdb67abf8733bfb7188", 0x79}, {&(0x7f0000003880)="51a8daceecdd6ee10a2e5ddfdba301addf2a5999857e1a002da0b165b0dba3029666c0712d035ec3b823f3b1b8dc18cd54c0dc102cbe11147a7159de3ba558742bad727b87119db22b9770aa2b7e0e54eab3f825bbefc2", 0x57}, {&(0x7f000000a340)="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", 0x1000}, {&(0x7f0000003900)="d7aa4bdaa5b05a1b22a96dedb86d878fad5672ec804c2241dcd8eee1db3d2a22032f4f70b3f6df8aa3f36b20df04135bfa65bfef8266ca185161a88d18607d50d4afa2db26a381686332c52b407515e3ad65ec28fadcd7738c47682b70fd0512e5a40641c4f1da51ab01b92c614c2d422416a9dba301bd7b72e3efaea4bf3d0306135fa839614b7d2cce3389fc81f00e54b192295e289ac4eba4c7dcf689b091d66dcc554116f6ca58f0aafceb933d60f6503e17ffc1a79fcdb6dc8893670f210d446513599bc23b890c15ad15", 0xcd}, {&(0x7f0000003a00)="0eaae42d32999e6dc0bcca34728b03cb53ee216d464c4d90d3b4123bd9c27aacff781675dfa1afd837fbb7ae763ed418747a80d7dce8dba6d437dabb7c575d6d508d34144ae2c39d960ad8da39bdde96873fd8fea961b5a44fceaaedbb41acdcf0a59e30ed66dc0709a7f3b59435e1bca12f2d4f8668fd7a84e095cf8683d1e5588b8ef3f2eaf59cca11e59c8ee91a", 0x8f}, {&(0x7f0000003ac0)="dada627aa9bfbf923bcd5289b60b50571d2ad500da69867b38a3d1d3a997f0", 0x1f}], 0x7, &(0x7f0000004300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, r6, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r13}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x0, 0x1, 0x1, [r6, r4, r3, r2, r6, r9, r3, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0x0, r12}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16}}}], 0xd8, 0x4000}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d80)="0a50498d7c6bad4d7cf01d86c044862ccc0d7b2ff3975eddad444c10bade8b0f57e18d6548df43da594e4ef50fd28becd1994feb05ad936ed65e7fba9cd4cd8d469c7b9eb75ade72f6a190f37286a815af8d3612f762d4f7821d509f2855a1b3c174bbc7feae238a60a0f7ddcf55e9f41d1efff48088917af5b1e3", 0x7b}, {&(0x7f0000003e00)="6dc818f1cf2f834c3dbd13e4ddbe7773256016e175243f307e5625aaeda827931fb88f7e5a927f086571", 0x2a}], 0x2, &(0x7f0000003ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r6, r9, 0xffffffffffffffff]}}], 0x98, 0x1}}, {{&(0x7f0000003f80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000b500)=[{&(0x7f0000004000)="7c13da8fb1c0c134169bf82550017ce866eb0f89ee57c6ac7f56af7eca782559f300582081db0d1e340f3f7ec263a7c44d369f7f40c9179480356d75519497206c470f89d17c7abfca045cbe2396afac61d70287a634bd0ed32c36aefadbeedf6b02e7f7bec23e035212ce8b", 0x6c}, {&(0x7f0000004080)="7ac4f17be0", 0x5}, {&(0x7f00000040c0)="58ecf8df96102e15d83eb0fc1856b32ab1e0a467de05d3dc9975f715e689fd71198cf25e512f583692d2a36f1e0e1093e9e871d9737a93261a2acfbcf69329012e046521e3a4a006b593b84ce126d3959fcea9f5491019e7a5df429b41a9402dcf6777cf77ff974adc1fd6330fc59ff2f5e090500994f6a75b81a767aa78d4", 0x7f}, {&(0x7f0000004140)="4879f85dfebf052494fe633c3b93343c1435ef2726dbe47b8a50a6b04ddfe7bac80fb973966093819c874c408a361368f053a6c0a990f4132bd8fd6e7dacb5e11f9f3a0c3b15f8237b6f2dc86784dab66dc646691882428914611cf114e17e00f8c50e086d3d3afb5ae0ee31c4ad37a92daf34c5dd1df9aab6b665ddec11fe969d11c430a6b0acf9d60bf63430ccea2ad5c180b164ddbedeef41139c7ac40b1d32ad39a1653168ab1bd9bc23bfd3da9fb45a7ad165f61d94da4ba860a28155d60771d68a46e89882c7e26a21feb5d1a49c070bc80000000000", 0xd9}, {&(0x7f0000004240)}, {&(0x7f00000102c0)="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", 0x1000}, {&(0x7f0000004280)="4388cf4a9d1dc9a909a8900e7cec75b3bee1344fd9029e751c193b4df544b5b10558a10700cccd39ab2e7ad5f8818d81da079196633257e0f041a9cbe348e0f66b3933c79f208e205472e70e2ec2153e732a72e5af4ed5f0fa23", 0x5a}, {&(0x7f000000b340)="37edac8435a44efee525de3762686c0e42fb065ed676d1a073d4ec9194ce19aa2e6f81cf79dee86bbae128c8736a1d5bfb4becae2d619830e4280ac6da6093d16f4512e6d5d4675ff6214da3887ec5d89be1b5d00ad27ea405de2c8c620b46397831c4c8913be4a7bc22b7c3d6aa016754b42d6626ae897fd893a15d90ab5fda14e6e67f487ed0773af1939e83db1dc07f7e8d1d033b0785966dbed910735504f947d0a526f207ff779759516d5d1c9fc0464bee7e235910d90cc831d397915a875dfa2e58b94150807de6076b162d8ca13e4f8a826c5db72361239a47d81799e91891a111507570253e", 0xea}, {&(0x7f000000b440)="c151993be4d7afde6344bfd983e4792e7e06287acf467aae7de072f3f7aea73524d1c4bbf141792bad267be4c58940f94bee5b47012815daad9d36f9cbc16267794f461e1dcacf86add99cf71db4efe27f4a8b3ced6e0ce7c30e2d6e6582d87824e4889560c5c36293df96c26f4fe246fcb1399c66984d94e1d88e822ae90dfbc6272b8cf6813c11eecc2f6316055e4b6f18cf82f773ab369cc1", 0x9a}], 0x9, &(0x7f000000b880)=[@cred={{0x1c, 0x1, 0x2, {0x0, r16}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x100, 0x4002}}], 0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000400000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d54452fa37757f1ac0886c1edd7b2ce6602eea1ea6404bb4a6cd00"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r18, 0x0, 0xa0028000}, 0x38) r19 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r19, 0x114, 0x36, 0x0, 0x4) r20 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r20, 0xffffffffffffffff, 0x0) r21 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r21, 0x40046104, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r22 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r22, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c0002800600020008"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) close(0x3) 4.728669338s ago: executing program 6 (id=1734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r5}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10010, r1, 0xae36b000) preadv(r5, &(0x7f0000003300)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x3, 0x7fff) timer_create(0x4, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000019080)=0xc) ptrace$setregs(0x1a, 0x0, 0xc, &(0x7f0000000000)) 4.650450035s ago: executing program 4 (id=1735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1f00, 0x300, 0x300, 0x8, 0x300}}) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ffffffffffe, 0xfffffffffffffffc}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@hyper}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='|raNs,rfd.o=', @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYBLOB=',\x00']) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) open(&(0x7f0000000140)='./file0\x00', 0x210140, 0x2) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x60f]}, 0x8, 0x800) read$FUSE(r5, &(0x7f0000001b40)={0x2020}, 0x205c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioprio_set$uid(0x3, 0x0, 0x0) syz_io_uring_setup(0xb, 0x0, 0x0, &(0x7f0000000340)) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000200)={{}, 0x8, 0xc7, 0x9dc}) r6 = syz_clone(0x8004000, &(0x7f0000000380)="e909aaca91f75a302e49b5163c3eccb235cd36e5422e2bb07a2671d282de82e22789b6b73e07bfd61c1f4f91d242ba8f643ccceb6b8591ea8b22c07c697421fbd9435489316fdd934d19764098962ea7", 0x50, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f000001aa40)="92f6ca7a042b0bbdcce5cd375b0a6c509aa4727642c4bfaf4ab2c502e68aa524228054892d20577a3c1f40f17abdab710943bd30eaa41d4ff8abfaf701e37baebbb7974cafcd06e6eb52ac0f47cb269037454d901051bb3061c8c80012126c811def5b9d7310565664cfc05a95761b7fe39cfd7b49190d0dbbe0f4f5cddf6dfc406c7d9479ecdb8d6647f4e3cedb377db9e602a9044234489497f7eced1cf8dc0eda70346a1059f087b711a6addd1fb36325f78afec3f98c10a5252b06645ab3f8a19c3b2c0b43c66366e20a1c5f9b26e58a7152a6379a1b467c564a0d5ac4d64aebe3a90c8c2ec542e969d054170467d48eec570334da1415a5f4fb56bb54f732ac17111106fc37d749d53240a3384f16be91e2d73c9739ae41905a573e305c6cfdf25e33f4c50ad1765b6b9ebe2a663f6a8ee4a4efabae39725f85faaac155dbd1ca37067f3915a47ae6c93c1c9b8e908fa1a9d15fdaf840a6c427db1a89c6cde1315bc68648b68afb83b9f6674112d756bbba91c5500bc8c52608416dafcc96b728051b16bd843f4a388efff81381123c63c66b0432f4035134b641fbd8dc61ef2412e7e52b2ce7ae3af1c3ce9da43574a809c0ed7807dbfa680ae7809672161576d4ebeb9b2507541b31ba36b11e2fb1f41fdeaa3dfab353ef8274cfbfffa5b4ede5bc735605cd52d40a64472a55fd07596f845b4830f032430f7151ac255128b2c207f9cb3794f80b524b3fc4fec1c3a472413f50b14e1387a1e575706e3459edbd925162080c301f123c7fc8e714ab04b1344f14159ca4b915fa02fbf651aaf01fce30126b2aa3e78081d4ee15de0c40a7cb5499af553c10147068b72d845b0aa5d5dd1ca6dd0ddd2032476b236b3f57731f8536936950fe69439c8b64932ce0e8dbe83f8d2a09b6a1c6eddfb90f53e713aa3966b62f394139727aa7ce38a988129372eb1e47af607b82678c1021af7f3464a2168df5afaf4c043050bb9390121b191743dcd79b55fe8002007a0f1491c0eef8f85605fc49e8102732f28aac456e0cba38a442a836be5eab4c78e5a85ef228f0bbea9dc43ec2265d2439306d3cc480de4bd0e701d9f1ed91040f4b49b3b0850086dbddba2311b6a5f3bda05effd17e8406b417301ea301809c55f9a5ab94f52d6da884627b2d6d015613d2f755113e631556fe06750d2cff6acf853d02f354a84527111f9e3d3bd6cb20c1f61e52aec78b70f82a6e51b8a9b8ceec163ee1e16c16cbe76d67355e62a4d8205e9d8a68e490080ac5bb9c276e02cbcf211185d8879679008a8eb14c8742ba8ada8bee93e34e0a3015027d560d09385ed9535a726d6a2cc40bd73b960b2e59f1530b45bbac59a0887868a6b3454328124f4ba3e16a220ca1fea4976b2fcf96313819add6ac7d37a03d8b49e124a9452eee72b1723fae3cf5765e78b93788ae670aba45d7531ca299d7b50291c30259add877fdb2f8e527cb500bc07283031b24c21e9f9c21258d30f9ebde4768c3226e957edd7cbb7fba0707b39273c080410ae78b68074b333afb596cdf759857531a2c66d96c879305894215e65fd824bcf737ff09ed20e0d91f1c72ea7cffd48ce365685f92ff79d98480cc54c62818ec28dad3d133437423fb0780a4b4264ab883250fd2da7cfa2cadc3dab69f22645376bf41dfb5eaf2c11de70a10853a9d21c7cb8156422c92a446402a73e60e3b8d93687e28378e144839a22b0a83012f999949c72acbf140c3f186e1ac423faad654f238268b20f84d15589f6b844ae8deea184bc4e63c62ac71e177fdc488f2e1efb60106235e5df5ec56f1e0e04648aa5ee73e1ee8ede112524823ba32e17e95eabff49014f5d5bcc3204e8bc372fe132fb5820c9795782a897ae2fc067a5a4eceb4038a98b560c1623ec5113ebf3966e968d9b358c336d0ff391c923d99d187c157f0e7b7b7577b066234037863e87006abe8850973fcbe93432e298f6fbd75eae337e6e499b39109a224ced5637d1192d36fc8fea0ecf9857734eda50a391dafd8364e35f0d3f83222d107b50af2ea9178b39688fa1104e1bb2446e6505a5e17e51d2f1ece9d8bcfb591e21c9edc28a3d24a60954e5afcb5a1d7896d27d94ff736d32f0f5bfa4b88ac23091a450a79f8657711ad219af8d7a309ecf3c60473b87506dea7344692c1745fcd0bcdc151bb421073738d8a2201c39287ec0e9f39fd692cfacb418e698abaefd7ff760990e53563d5fb370176bb68b7b9bb92082f4b496258b814cc186814c3c320afbf883c416576c947f15637c1b67f49c66ea170a4adb1077566cfa7b53cad563ff27f5f3854a3df9ddf22cb1223a6877b7e0c32244a84a72f002cb77e22769153922b0a68c1b3a26353bb98bd35978e55a487f81e3c761431dbe753f257a986fc5d544916b1a2d6c8f55c3b480931e0dac6e9219082a0b669d3312153a6a146bbdd3ec47f44b02e98a8210c9b0a580a348a040277a37ea40971550336468bb0b7e05c750708aeab0988a70f6262c22c7e9980393a452cfba0e3b7dfe2b48f2690e7cb3e3acc490b3ad88dd3ece745db475a54ba3a6b470288d5c4c42ccd15891ba83882c494f8eb0c0580ef6c663117aa4d5e831e5beef6f38417cf5ad33c04a471f247970d48951bc13efadf12874c1391ae3f3d4789d4263dddac29a196c59171cc88afc3959fe887b818cb6f6f8fd5d5dc3f54c96898b45aa243199ee718858fadc2b531e2191f5a8aa6997b28f0eca160df0ef359680324b6f95dce7457c8bc8ef0d2d2943a4a01db216f85944357831eab3afd695a2d43fcbf6f4b8194c84acc950a168c14b2276775507c35110330c721fb662849e229b2c43069dfbb88461dd8713fa21e9103f7cd3724eb96e9d49034ab563e9e7f02bacae16a18cd1e692af9ecd0ce270da5c47304289ae080effeb05c6aeb17a8c6a84364ce04e3b86ffe26049a00965c848b659cb63a3d626ba06f56f4a353e6578d2d13758177222345c4fa2f091090eb5cbbd946c70209172a684e75b57ddcae83b25aad1d540d644cf14fb0bb165e483ea13eb18da465ca6e36b5a98fd72e52117207a26fe59965ba12a22ac49f9a2b150afbd3597a21b4dbf7240eeaf7e637c39e695d9bd8b075dea14584bca059595c77afdc173ac66a2c339d83d909a01aa9915e1ddbd335d6e357ffdddd0639500f0ee316d2fd13d47df1df8ebdbb15dfdfe697c60e88a32e3b30e2ae088b9d9dc16ffac8f83560103f3b14e854d3fa7857e924e1aae8f43e1ea6e64e2c0694db3e02d4124af293088abb7b8c8738fb3fc61819a66f56bdbeb37ef50c9983c0cad2434dbdd9386ebd7175ca823e0a07b287c2ac2867f21ebfe0a778059faddb8d67f090d5a10010a25c7f09272ba9f347cb3e6f686d57ead55664349780ef5669816f9aa08964af621f865c97b343ec220d6b6f543aa84d9d4d33caad959bddae427dd939b91932f7e8d86d9020b724b1fb70de37d7feec14fc72046da305b82432a2b0f1aaaf695fb41be9ce59e3dd3706851946a2a9ac93f2dcf63323c29158327401cdadb0a81216382068769160dc9428acca2e578dc1963323c2a8dc159f857961bfb7fb29040e4a233b170cb054961f3e6e20c1f1ef00110da9229ed5d59ac66fb824026c13e958a44fa85a4a909aae4e55a6133d609d95d107a13a5f62b416954eb8728685dfafe41e567bac728e03ad2c79627e8c96e3b56ca1cf0dfe7fbfe697be51c6aef48bfeb6a41faf9657485aa8a3bf693b9c4850d84f384eb8bbd0670a49ed46e886b2cf20af29b6feace63e9e8341d3ae8924215c2d0fc77888a921a9929d14ed0da4276e017bf36adb55f35ab0db3d78bbe30777a1b1a3816cd4b7a53ae016167c4be8b9ea7fb43bd78d50ce46b713b65104cca4e5b72c1bd84536a6eb07731ac9a886860b5114a3cb3a1670b346166225b862e40811bd76e78ffb0645500c68b8bb410db98e14d83eefd6fc98677007a653cee0dc70650dcb46fc55a9e62b1e229e95e7b3c3b87f67f8e44a8b5ad94f6ae9368156e2ab599e7dc42053bae8ba527d238fc3b6193f484bdda4d75ba1c2b6c25eedaaf4196ee289cca662d972bec7abcc09409c4864e8a3a1917fb28fe454dad92abd38faee992c5aa59a37c8f4f618d5d7104a7715d1d477d66006acfa677bbe68a370f38842faa418d7f2ff452354a7606735c14f3a34d1889cb05cf49585aac71bdc095a5b6b2b945ac17e9af7c50a322094f96fc0dc3d24fd24b56c7bb1e369a941e935ab722dd933f51a323cad9c7fe7d2da39874799714f38a5c14d93551b21e8ff5620a473d08ae53eff3b9249839c2dc2b8e6c5c7d304316408dabc29e41371b3477befe080ab01c725238f2228c3b9a86c92e58d9efe55791efb19d2b8a9441bebf368c691fb336def888b52ac13b7bf3f824b48f378e07b7fee753fcc6cd9569eb8aa0b949f0160af0cd9fd75f95a48b08d20f7ec6754c873cfd554eea81671e32b575bc593ebc5793df82a828508c9959ce78201b9d7976589c820771170ad2c2c66222f49e68c8ca94b9a15e450e2828bf0271d7a567e9529d9c048307534400f21cc90d9625e517f933c4ee6cb7361a3b613ce54c4fc1be3479d596b6e4db44027e68612440d3b1e4bd193925f3f961ce910b11b07a4a4575e0aca8eaf4a63e3a8f12b0e6326b266740157971553daac13ff24acc85ef9e24309ea3440ae2f8d9d6b01b41a48e053c3761464c7ad8bd4ccbe2638bfb7182af03308e0efd580b1c98c78a5726f43c6819fdd09bee7e6250ad879d8129692a8eb705abdd02da6cf7e518d438449333b2f82f85b80b2958e8ea7a3fb10090603dbb9d9e65f6814f68976a0d39373eb1165bc08b16095d8dc10a2e61f6c3b306273798065306268136107d5bca192eae3ad58e32e2aaff677090af98beaa9424e08394409fdbec40b589689f6ed144641f5e201e479d91ce3b0b34c426947b22c59bef987e0b90c8dfe5cad051db8f333b91fada4e3841e88b7fe468cbe3f74b7ddb3750385e88190c001e8a31b4dc7f8febe710050ff8598b5318ddb6b58bb38103b1d34a16faf45d7a85ae62a6255bfed762a7f2eaf6e0bcac269266986c492362c1f554dfd59fd01a6f11c52f2f4c6c66f1bdaba295cc84b3bdbb14b34bdd71c9dc1c60815088b99db635f1612d125f26e0c878089136c965155bfa78c24f06414966a0ec82d846e0f53a5c3352c9525037d938eccfaf9842775f64db16e04e31d664ccd4c8940a2a29e198c5cc4bbb41f8d37246fe4b35b5480b63721805f2279c4bd84c967a0839daafbeb99b51b4c7d329f51ad4be50244fedebf60e31c95e48a17565c05733e75463808e284ab56db4301507555f30fff15849d8241bc5330301e510fb085abe6472c194ae8c051f297c5e6077372b7dd7c3e22b176a0b847eee634900ea765450bf03abcd74f745e21e8a702126558a5fd1ee346459d5d46e199cce2ef96f150d4ad33a5a50f63cabe7f95e319420eb2c1f8c1f64952d091fecb251e0c05b977493fd7fd9b32d97335d61ae3c11c8bbe872bbd10f4142edda34d36af16b1d89805700888e0e76678785d18999cfa429547125cdb5f1cc92de36d690f7ec485fccde8669078f0a4c1272534b47293191c7ab0af1f05af2b0fdd5e65cb3e6204e99704ff6a5cafe21ad4456f1957f6472698ba04f19c91d52664910766a4d55ba3179251aa7148d89e96ebad2f3916152595b3743845f725d7407363b888b6fbe5bbb7168765ee") mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x10, 0x1, @tid=r6}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.697245598s ago: executing program 3 (id=1736): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220a000000574c29b7e3677d1c4d02668a6e8704de907a308d5f0d20b0974147d3cbbfed6dbed19190496db7089a12372a280fa4a392bd9ca66bbd045451d0fd125fd32f4685c201c2534f1b31280d237dae4e4ebc96319e766b21eae829ec0a734784c5dde1fc428154695136b62b924eb3d52f9ffc3b3754ac7f698c6344f16226dd62df701281d82c492f14d9f72261823e98c2898a1bd35888ffc616f5828a79a281810f11e93a2d2f005381d4fcd340487b46bec6361894933cc0feae3a8cc94d7f86e7a6ccd266c3b3af063f2d16ade2a61313"], 0x0}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) 3.432234456s ago: executing program 5 (id=1737): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 3.41543855s ago: executing program 7 (id=1738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000dc0)='syz0\x00', 0x1ff) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r8, r8, 0x0, 0x8000002) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000000c00)=[{0x2, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], &(0x7f0000000340)=[0x2, 0x100000001, 0x8001, 0x7fff]}, {0x7, 0x1, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000cc0)=""/16, 0x10}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/81, 0x51}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/210, 0xd2}], 0x0}, {0x3, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000008c0)=""/33, 0x21}, {&(0x7f0000000900)=""/240, 0xf0}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x0}], 0x3) 3.323872563s ago: executing program 5 (id=1739): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010002000000000002000724"], 0x0) r2 = epoll_create1(0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x30000001}) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010002000000000002000724"], 0x0) (async) epoll_create1(0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x30000001}) (async) 2.287990358s ago: executing program 7 (id=1740): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x100000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300b8f454f5d82605e7cf5d448d334fec6ac647f095dbe208234a00fecdc7b92e9ea93f6051fbcef34c4924b67e44b6ea3dcbf61fba7e673be7a5ceb4e37fcf3c8903c0e2d9d364413b67987d9d328ce4aa704369561bf0418666cc660eac13a33b602c658a4a1cbeb336f3d220b5dd995565a82742d0d2746c4601763b53b61bd03de68f4becd5bc0306018566aa9299b2464724b7d7e1cc349a59a14f366404b20a2116172a38381727e59d", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000004c00)={0x0, 0x10, &(0x7f0000004bc0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000004c40)=0x10) shutdown(r3, 0x1) 2.131387041s ago: executing program 6 (id=1741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/180, &(0x7f0000000240)=0xb4) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1, 0xa, 0x1) setsockopt$WPAN_SECURITY(r3, 0x11e, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x24, &(0x7f0000004700), 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x0, 0x10006e, 0x20000004, 0xc18, 0x6]}, &(0x7f0000000040)=0x54) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 2.049506444s ago: executing program 4 (id=1742): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) connect$llc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xe7e, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0xcb, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.802039935s ago: executing program 5 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x40080) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000480000000008000000aa0b009078032c00004b00000000000000008900000000738e396d6dfbfe3c3b8b9b0000ac1414aa860d0000000000054eb8a60002830b007f0000e57e000001"], 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x9) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "2eed63", 0x800, 0x3a, 0xff, @loopback, @mcast1}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r3, 0x8, 0x0, &(0x7f0000000100)) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0xe8906000) 1.280929015s ago: executing program 4 (id=1744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 959.628157ms ago: executing program 7 (id=1745): close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 948.319532ms ago: executing program 3 (id=1746): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee01, 0x0) socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)=ANY=[]) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSW2(r3, 0x80047456, 0x0) 876.786182ms ago: executing program 4 (id=1747): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0) epoll_create1(0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) keyctl$set_reqkey_keyring(0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x7, &(0x7f0000000380)=""/210) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x440b0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 629.241922ms ago: executing program 5 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x1, @time}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x1, @time}) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x44}}, 0x0) (async) 386.803177ms ago: executing program 5 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 203.460932ms ago: executing program 5 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000dc0)='syz0\x00', 0x1ff) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r8, r8, 0x0, 0x8000002) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000000c00)=[{0x2, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], &(0x7f0000000340)=[0x7ff, 0x100000001, 0x8001, 0x7fff]}, {0x7, 0x1, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000cc0)=""/16, 0x10}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/81, 0x51}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/210, 0xd2}], 0x0}, {0x3, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000008c0)=""/33, 0x21}, {&(0x7f0000000900)=""/240, 0xf0}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x0}], 0x3) 0s ago: executing program 3 (id=1751): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) timer_create(0xfffffffd, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x10) unshare(0x30050d00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @remote, 0xa8bb}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0xffffffffffffffc7) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x44a7e, 0x90) fallocate(r2, 0x1010000, 0x0, 0x1000f4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x111, 0x5, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 589] RIP: 0033:0x7fcf4079c799 [ 495.976311][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.976328][T11589] RSP: 002b:00007fcf416e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.976345][T11589] RAX: ffffffffffffffda RBX: 00007fcf40a15fa0 RCX: 00007fcf4079c799 [ 495.976356][T11589] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 495.976366][T11589] RBP: 00007fcf416e7090 R08: 0000000000000000 R09: 0000000000000000 [ 495.976375][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.976385][T11589] R13: 00007fcf40a16038 R14: 00007fcf40a15fa0 R15: 00007fffd2c34c28 [ 495.976409][T11589] [ 496.248275][T11573] bond5: entered promiscuous mode [ 496.253632][T11573] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.633588][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.955558][T11575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.962690][T11575] bond5: (slave wireguard4): The slave device specified does not support setting the MAC address [ 496.974876][T11575] bond5: (slave wireguard4): Setting fail_over_mac to active for active-backup mode [ 497.116500][T11575] bond5: (slave wireguard4): making interface the new active one [ 497.124538][T11575] wireguard4: entered promiscuous mode [ 497.132001][T11575] bond5: (slave wireguard4): Enslaving as an active interface with an up link [ 497.141298][ T5918] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 497.224850][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.232407][ T9363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.351393][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 497.452836][ T5918] usb 4-1: config 0 has no interfaces? [ 497.458312][ T5918] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 497.467406][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 497.497751][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.591522][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 497.651312][ T5887] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 497.724101][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 497.789313][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.812660][ T5918] usb 4-1: config 0 descriptor?? [ 497.861347][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 497.942833][T11615] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1344'. [ 497.959733][ T5887] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 498.073629][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 498.091311][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.118489][ T5887] usb 6-1: Product: syz [ 498.132917][ T5887] usb 6-1: Manufacturer: syz [ 498.141342][ T5887] usb 6-1: SerialNumber: syz [ 498.163930][ T5887] usb 6-1: config 0 descriptor?? [ 498.198138][T11602] overlayfs: workdir and upperdir must reside under the same mount [ 498.211624][ T5887] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 024 [ 498.238628][ T55] usb 4-1: USB disconnect, device number 43 [ 498.267062][ T30] audit: type=1400 audit(1774843539.097:642): avc: denied { link } for pid=11601 comm="syz.3.1340" name="file1" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 498.451426][ T9363] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 498.659956][ T5887] (null): failure reading functionality [ 498.713157][ T5887] i2c i2c-1: connected i2c-tiny-usb device [ 498.867421][T11622] FAT-fs (nullb0): bogus number of reserved sectors [ 498.874327][T11622] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 498.883788][ T9363] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 498.894453][ T9363] usb 7-1: config 0 has no interface number 0 [ 498.908697][ T9363] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 498.944369][ T9363] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 498.979787][ T9363] usb 7-1: config 0 interface 11 has no altsetting 0 [ 498.987260][ T9363] usb 7-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 498.996385][ T9363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.045367][ T9363] usb 7-1: config 0 descriptor?? [ 499.051722][T11617] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 499.061567][ T9363] keyspan 7-1:0.11: Keyspan 4 port adapter converter detected [ 499.073111][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81 [ 499.082209][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1 [ 499.121549][ T9363] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 499.148160][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82 [ 499.179627][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2 [ 499.211730][ T9363] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 499.263936][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83 [ 499.292233][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3 [ 499.306196][ T9363] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 499.406792][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84 [ 499.416831][ T9363] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4 [ 499.471206][ T9363] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 499.525446][ T9363] usb 7-1: USB disconnect, device number 12 [ 499.554419][ T9363] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 499.581484][ T9363] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 499.617708][ T9363] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 499.636511][T11634] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 499.652765][ T9363] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 499.664228][ T30] audit: type=1326 audit(1774843540.537:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.697109][ T9363] keyspan 7-1:0.11: device disconnected [ 499.731110][ T30] audit: type=1326 audit(1774843540.537:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.776375][ T30] audit: type=1326 audit(1774843540.537:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.817597][ T30] audit: type=1326 audit(1774843540.537:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.850986][ T30] audit: type=1326 audit(1774843540.537:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.879462][ T30] audit: type=1326 audit(1774843540.557:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.905944][ T30] audit: type=1326 audit(1774843540.557:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.932162][ T30] audit: type=1326 audit(1774843540.557:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 499.958445][ T30] audit: type=1326 audit(1774843540.557:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7ffc0000 [ 500.454349][ T5887] usb 6-1: USB disconnect, device number 24 [ 500.562015][T11649] smc: net device bond0 applied user defined pnetid SYZ2 [ 500.956609][T11651] binder: BINDER_SET_CONTEXT_MGR already set [ 500.973002][T11651] binder: 11650:11651 ioctl 4018620d 200000004a80 returned -16 [ 500.991450][ T5918] net_ratelimit: 23 callbacks suppressed [ 500.991464][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.999938][T11651] binder: 11650:11651 unknown command 0 [ 501.006860][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 501.080426][T11651] binder: 11650:11651 ioctl c0306201 2000000002c0 returned -22 [ 501.161369][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 501.281326][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 501.449266][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.470664][T11661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11661 comm=syz.3.1359 [ 501.485742][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 501.594447][T11662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.607119][T11662] comedi comedi3: s526: I/O port conflict (0x8001,64) [ 501.710264][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 501.781596][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a6a000: rx timeout, send abort [ 502.031404][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.044238][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 502.283730][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a6ac00: rx timeout, send abort [ 502.292301][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a6a000: abort rx timeout. Force session deactivation [ 502.791969][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a6ac00: abort rx timeout. Force session deactivation [ 503.791924][ T9363] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 503.961594][ T9363] usb 3-1: Using ep0 maxpacket: 16 [ 503.975171][ T9363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.005253][ T9363] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.010800][T11677] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1364'. [ 504.056020][ T9363] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 504.104870][ T9363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.185816][ T9363] usb 3-1: config 0 descriptor?? [ 504.328385][T11681] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1366'. [ 504.882365][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.891795][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.898669][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.910361][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.920436][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.930533][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.938025][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.953449][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.963378][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 504.970238][ T9363] apple 0003:05AC:027C.000A: unknown main item tag 0x0 [ 505.000220][ T9363] apple 0003:05AC:027C.000A: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 505.256127][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 505.256141][ T30] audit: type=1400 audit(1774843546.127:691): avc: denied { setattr } for pid=11690 comm="syz.3.1369" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 505.466088][ T9363] usb 3-1: USB disconnect, device number 38 [ 505.901351][T11704] netlink: 'syz.3.1371': attribute type 16 has an invalid length. [ 506.014588][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 506.068342][ T2964] net_ratelimit: 33 callbacks suppressed [ 506.068358][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 506.213499][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 506.336754][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 507.182578][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.416029][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 507.666975][ T30] audit: type=1400 audit(1774843548.397:692): avc: denied { create } for pid=11716 comm="syz.3.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 507.688157][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 507.699745][ T9363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.875345][ T290] bond1: (slave wlan0): failed to get link speed/duplex [ 508.006465][T11728] 9p: Bad value for 'wfdno' [ 508.017801][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 508.044441][ T30] audit: type=1400 audit(1774843548.397:693): avc: denied { write } for pid=11716 comm="syz.3.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 508.081493][ T9363] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 508.112475][T11721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.378400][ T9363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.383693][ T30] audit: type=1400 audit(1774843548.677:694): avc: denied { write } for pid=11723 comm="syz.3.1379" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 508.449675][ T9363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.489160][ T5918] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 508.504032][ T9363] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 508.515226][ T9363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.542982][ T9363] usb 5-1: config 0 descriptor?? [ 509.104026][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 509.110486][ T5918] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 509.124152][ T5918] usb 4-1: config 179 has no interface number 0 [ 509.130438][ T5918] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 509.141512][ T5918] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 509.153122][ T5918] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 509.172894][ T5918] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 509.187208][ T30] audit: type=1400 audit(1774843550.057:695): avc: denied { create } for pid=11738 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 509.229919][ T5918] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 509.243614][ T30] audit: type=1400 audit(1774843550.077:696): avc: denied { ioctl } for pid=11738 comm="syz.2.1382" path="socket:[34921]" dev="sockfs" ino=34921 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 509.277615][ T5918] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 509.286891][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.432810][T11724] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 509.554014][T11742] mkiss: ax0: crc mode is auto. [ 509.569899][ T9363] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 509.656760][ T9363] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 509.674840][ T9363] hid-steam 0003:28DE:1142.000B: No HID_FEATURE_REPORT submitted - nothing to read [ 509.707723][T11746] + [ 509.842796][ T9363] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 510.009207][ T9363] usb 5-1: USB disconnect, device number 34 [ 510.036611][ T9363] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 511.051419][ T5918] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 511.101426][ T290] net_ratelimit: 16 callbacks suppressed [ 511.101443][ T290] bond1: (slave wlan0): failed to get link speed/duplex [ 511.161745][ T55] usb 4-1: USB disconnect, device number 44 [ 511.161839][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 511.175903][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 511.286187][ T5918] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 511.295483][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.303842][ T5918] usb 3-1: Product: syz [ 511.308055][ T5918] usb 3-1: Manufacturer: syz [ 511.326135][ T5918] usb 3-1: SerialNumber: syz [ 511.353753][ T5918] usb 3-1: config 0 descriptor?? [ 511.370194][ T5918] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 039 [ 511.394722][ T30] audit: type=1400 audit(1774843552.267:697): avc: denied { connect } for pid=11757 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 512.536224][ T30] audit: type=1400 audit(1774843552.767:698): avc: denied { listen } for pid=11757 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 512.556893][ T30] audit: type=1400 audit(1774843553.407:699): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 512.585272][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 512.616927][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.701352][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 512.738639][T11767] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1387'. [ 512.893446][ T5918] (null): failure reading functionality [ 512.909590][T11770] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 512.955487][ T671] bond1: (slave wlan0): failed to get link speed/duplex [ 513.016656][ T5918] i2c i2c-1: failure reading functionality [ 513.068253][ T5918] i2c i2c-1: connected i2c-tiny-usb device [ 513.101556][ T671] bond1: (slave wlan0): failed to get link speed/duplex [ 513.166003][ T5918] usb 3-1: USB disconnect, device number 39 [ 513.341292][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 513.601345][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 513.635536][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.806184][ T290] bond1: (slave wlan0): failed to get link speed/duplex [ 513.901441][T11774] serio: Serial port ptm0 [ 514.428459][T11782] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 514.764151][T11782] bond5: entered promiscuous mode [ 514.770429][T11782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.853225][T11784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.887915][ T5819] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 514.941147][T11784] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address [ 514.961459][T11784] bond5: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 514.995410][T11784] bond5: (slave wireguard3): making interface the new active one [ 515.020853][T11784] wireguard3: entered promiscuous mode [ 515.646146][T11784] bond5: (slave wireguard3): Enslaving as an active interface with an up link [ 515.757489][T11802] SQUASHFS error: Failed to read block 0x0: -5 [ 516.204444][ T49] net_ratelimit: 7 callbacks suppressed [ 516.204460][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 516.227142][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.263995][ T55] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 516.361727][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 516.421770][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 516.441354][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.464159][T11807] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1397'. [ 516.482390][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 516.799330][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.840880][ T55] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 516.858427][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.898481][ T55] usb 7-1: config 0 descriptor?? [ 516.903506][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 517.011363][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 517.030993][T11811] kvm: pic: non byte read [ 517.041777][T11811] kvm: pic: non byte read [ 517.046887][T11811] kvm: pic: non byte read [ 517.054784][T11811] kvm: pic: non byte read [ 517.068780][T11811] kvm: pic: non byte read [ 517.080100][T11811] kvm: pic: non byte read [ 517.088381][T11811] kvm: pic: non byte read [ 517.150697][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 517.160748][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 517.221060][T11811] kvm: pic: non byte read [ 517.231505][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.277911][T11811] kvm: pic: non byte read [ 517.283008][T11811] kvm: pic: non byte read [ 517.315750][ T9363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.387566][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 517.401426][ T2964] bond1: (slave wlan0): failed to get link speed/duplex [ 517.409287][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 517.525959][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 517.564417][ T55] usb 7-1: USB disconnect, device number 13 [ 517.696887][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 517.705656][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.716919][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.728787][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 517.737997][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.747979][ T29] usb 3-1: config 0 descriptor?? [ 517.755738][ T29] hub 3-1:0.0: USB hub found [ 517.940174][ T30] audit: type=1400 audit(1774843558.807:700): avc: denied { create } for pid=11820 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 517.956269][ T29] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 517.964136][ T5887] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 517.980024][ T30] audit: type=1400 audit(1774843558.847:701): avc: denied { bind } for pid=11820 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 518.015168][ T29] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1 [ 518.024160][ T29] hid-generic 0003:046D:C31C.000D: probe with driver hid-generic failed with error -22 [ 518.037832][ T30] audit: type=1400 audit(1774843558.847:702): avc: denied { map_create } for pid=11820 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 518.115803][ T30] audit: type=1400 audit(1774843558.917:703): avc: denied { prog_load } for pid=11824 comm="syz.6.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 518.135959][ T30] audit: type=1400 audit(1774843558.917:704): avc: denied { bpf } for pid=11824 comm="syz.6.1403" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.181321][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 518.194148][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short [ 518.204133][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.220710][ T30] audit: type=1400 audit(1774843558.917:705): avc: denied { perfmon } for pid=11824 comm="syz.6.1403" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.232925][T11825] sp0: Synchronizing with TNC [ 518.249434][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.258769][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.261464][ T5887] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.267978][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.289697][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.299299][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.308487][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.317722][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.326610][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.336389][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.338655][ T5887] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 518.345276][T11825] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1403'. [ 518.410051][ T29] usb 3-1: USB disconnect, device number 40 [ 518.437030][T11825] vxcan1 speed is unknown, defaulting to 1000 [ 518.572848][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.581004][ T5887] usb 6-1: Product: syz [ 518.601371][ T5887] usb 6-1: Manufacturer: syz [ 518.605988][ T5887] usb 6-1: SerialNumber: syz [ 518.733136][T11838] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 518.916813][T11842] serio: Serial port ptm1 [ 518.924041][ T5819] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 518.933591][ T5819] Bluetooth: hci4: Injecting HCI hardware error event [ 518.942520][ T5819] Bluetooth: hci4: hardware error 0x00 [ 519.161432][ T5862] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 519.292508][ T30] audit: type=1400 audit(1774843560.167:706): avc: denied { prog_run } for pid=11818 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 519.426702][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.436884][ T5862] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 519.453463][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.472987][ T5862] usb 5-1: config 0 descriptor?? [ 519.517359][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 519.667694][T11852] serio: Serial port ptm0 [ 519.921510][ T5918] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 520.287476][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.305685][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.335894][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.365985][ T5918] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.475959][ T30] audit: type=1400 audit(1774843561.297:707): avc: denied { map_read map_write } for pid=11854 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 520.858360][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.901949][ T30] audit: type=1400 audit(1774843561.317:708): avc: denied { ioctl } for pid=11854 comm="syz.3.1410" path="socket:[35127]" dev="sockfs" ino=35127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.059287][ T5918] usb 3-1: config 0 descriptor?? [ 521.108291][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.137052][ T30] audit: type=1400 audit(1774843562.007:709): avc: denied { validate_trans } for pid=11859 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 521.151538][ T5887] usb 6-1: MIDIStreaming interface descriptor not found [ 521.227289][T11863] net_ratelimit: 232 callbacks suppressed [ 521.227304][T11863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.241479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.251394][T11843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.259912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.278891][ T6780] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.312285][ T5819] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 521.336071][ T6780] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.360783][T11868] netlink: 'syz.6.1411': attribute type 1 has an invalid length. [ 521.384425][ T6780] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.397629][ T5887] usb 6-1: USB disconnect, device number 25 [ 521.544699][ T5862] pwc: recv_control_msg error -71 req 02 val 2b00 [ 521.562012][T11863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.570165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.609142][ T5918] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 521.615038][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.622637][ T5862] pwc: recv_control_msg error -71 req 02 val 2700 [ 521.645669][ T5862] pwc: recv_control_msg error -71 req 02 val 2c00 [ 521.661765][ T9363] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 521.669927][ T5862] pwc: recv_control_msg error -71 req 04 val 1000 [ 521.677083][ T5862] pwc: recv_control_msg error -71 req 04 val 1300 [ 521.787643][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 521.810165][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 521.834360][T11868] bond1: entered promiscuous mode [ 522.248364][T11868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.258412][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.266537][T11863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.267219][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 522.274843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.289247][ T29] usb 3-1: USB disconnect, device number 41 [ 522.349114][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 522.356827][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 522.364778][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 522.371297][ T9363] usb 4-1: Using ep0 maxpacket: 16 [ 522.388689][T11871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.397153][T11871] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 522.407766][T11871] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 522.409335][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 522.418032][ T9363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.438565][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 522.445618][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 522.452537][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 522.461455][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 522.467321][ T9363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.479172][ T5862] pwc: Registered as video103. [ 522.483333][T11880] fido_id[11880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 522.489380][T11871] bond1: (slave wireguard0): making interface the new active one [ 522.498806][ T9363] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 522.512613][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 522.525562][T11871] wireguard0: entered promiscuous mode [ 522.539863][ T5862] usb 5-1: USB disconnect, device number 35 [ 522.598737][ T5887] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 522.608868][T11863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.609987][T11871] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 522.663337][ T6780] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.766874][ T5887] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 522.777962][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.786107][ T5887] usb 6-1: Product: syz [ 522.790541][ T5887] usb 6-1: Manufacturer: syz [ 522.799162][ T5887] usb 6-1: SerialNumber: syz [ 522.802538][ T9363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.260226][ T5887] usb 6-1: config 0 descriptor?? [ 523.268274][ T5887] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 026 [ 523.299169][ T9363] usb 4-1: config 0 descriptor?? [ 523.357545][T11889] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 523.599808][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 523.599824][ T30] audit: type=1400 audit(1774843564.467:711): avc: denied { read } for pid=11892 comm="syz.4.1419" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 523.632586][ T30] audit: type=1400 audit(1774843564.467:712): avc: denied { open } for pid=11892 comm="syz.4.1419" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 523.660827][ T30] audit: type=1400 audit(1774843564.507:713): avc: denied { ioctl } for pid=11892 comm="syz.4.1419" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 523.713361][ T5887] (null): failure reading functionality [ 523.730337][ T9363] usbhid 4-1:0.0: can't add hid device: -71 [ 523.745014][ T5887] i2c i2c-1: connected i2c-tiny-usb device [ 523.752477][ T9363] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 523.787103][ T9363] usb 4-1: USB disconnect, device number 45 [ 523.801111][T11896] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 523.974422][ T24] usb 6-1: USB disconnect, device number 26 [ 524.433763][T11905] serio: Serial port ptm0 [ 524.941326][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 524.976119][T11915] netlink: 'syz.6.1424': attribute type 1 has an invalid length. [ 525.050438][T11915] bond2: entered promiscuous mode [ 525.069579][T11915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.108055][ T24] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 525.144082][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.170248][ T24] usb 4-1: Product: syz [ 525.181842][ T24] usb 4-1: Manufacturer: syz [ 525.182722][T11917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.193055][ T24] usb 4-1: SerialNumber: syz [ 525.208249][ T24] usb 4-1: config 0 descriptor?? [ 525.267096][T11917] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 525.278767][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 525.293844][T11917] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 525.316205][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.332336][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 525.376008][ T24] usb 4-1: media controller created [ 525.387380][ T30] audit: type=1400 audit(1774843566.247:714): avc: denied { read } for pid=11921 comm="syz.4.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 525.864544][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.889632][T11917] bond2: (slave wireguard1): making interface the new active one [ 525.908876][T11917] wireguard1: entered promiscuous mode [ 525.921059][T11917] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 526.046469][T11929] dvb-usb: bulk message failed: -22 (7/0) [ 526.291914][ T671] net_ratelimit: 39 callbacks suppressed [ 526.291926][ T671] bond1: (slave wlan0): failed to get link speed/duplex [ 526.328120][T11914] vxcan1 speed is unknown, defaulting to 1000 [ 526.406359][T11933] __nla_validate_parse: 138 callbacks suppressed [ 526.406371][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 526.431514][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.453982][ T24] DVB: Unable to find symbol mt352_attach() [ 526.557749][ T24] DVB: Unable to find symbol nxt6000_attach() [ 526.565033][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.573173][ T290] bond1: (slave wlan0): failed to get link speed/duplex [ 526.573343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.593244][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 526.624819][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input64 [ 526.631366][T11936] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1429'. [ 526.638885][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 526.652101][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 526.662375][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 526.671907][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 526.684956][ T290] bond1: (slave wlan0): failed to get link speed/duplex [ 526.685891][ T24] usb 4-1: USB disconnect, device number 46 [ 526.731329][ T29] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 526.801341][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 526.822102][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 526.833500][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.881656][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.889825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.901334][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 526.908859][ T29] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 526.919840][ T29] usb 3-1: config 127 has no interface number 0 [ 526.930759][ T29] usb 3-1: config 127 interface 124 has no altsetting 0 [ 526.945359][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 526.955311][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.971000][ T29] usb 3-1: Product: syz [ 526.978699][ T29] usb 3-1: Manufacturer: syz [ 526.985357][ T29] usb 3-1: SerialNumber: syz [ 527.021313][ T55] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 527.182149][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 527.212889][ T55] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 527.247480][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.261371][ T55] usb 5-1: Product: syz [ 527.271465][ T55] usb 5-1: Manufacturer: syz [ 527.276080][ T55] usb 5-1: SerialNumber: syz [ 527.296716][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.307115][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.337635][ T30] audit: type=1400 audit(1774843568.207:715): avc: denied { map } for pid=11932 comm="syz.2.1428" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 527.644313][T11945] pimreg: entered allmulticast mode [ 527.968999][T11936] kvm: pic: level sensitive irq not supported [ 527.969080][T11936] kvm: pic: level sensitive irq not supported [ 528.053134][T11936] kvm: pic: single mode not supported [ 528.059273][T11936] kvm: pic: level sensitive irq not supported [ 528.082805][T11949] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 528.113923][T11936] kvm: pic: single mode not supported [ 528.113935][T11936] kvm: pic: level sensitive irq not supported [ 528.295011][T11936] kvm: pic: level sensitive irq not supported [ 528.321667][T11936] kvm: pic: level sensitive irq not supported [ 528.330130][T11936] kvm: pic: single mode not supported [ 528.336667][T11936] kvm: pic: level sensitive irq not supported [ 528.361028][T11936] kvm: pic: single mode not supported [ 528.367452][T11936] kvm: pic: level sensitive irq not supported [ 529.584062][T11936] kvm: pic: single mode not supported [ 529.712733][ T671] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 529.816170][ T55] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 529.831322][ T5862] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 529.842561][ T55] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 529.875472][ T55] usb 5-1: USB disconnect, device number 36 [ 529.895095][T11967] evm: overlay not supported [ 529.901033][ T30] audit: type=1400 audit(1774843570.767:716): avc: denied { wake_alarm } for pid=11968 comm="syz.4.1439" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 530.193252][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 530.200980][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.219916][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.241331][ T5887] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 530.259912][ T5862] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 530.277039][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.319621][ T5862] usb 7-1: config 0 descriptor?? [ 530.674596][ T29] usb 3-1: USB disconnect, device number 42 [ 530.692569][ T5887] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 530.723188][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.767103][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 530.806415][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 530.834245][ T5887] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 530.849628][ T5887] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 530.858017][ T5887] usb 6-1: Manufacturer: syz [ 530.883708][ T5862] usbhid 7-1:0.0: can't add hid device: -71 [ 530.890577][ T5862] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 530.900813][ T5862] usb 7-1: USB disconnect, device number 14 [ 530.966470][ T30] audit: type=1804 audit(1774843571.837:717): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/291/bus/net_prio.prioidx" dev="overlay" ino=1552 res=1 errno=0 [ 531.012628][ T5887] usb 6-1: config 0 descriptor?? [ 531.069257][T11966] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 531.091134][ T5887] igorplugusb 6-1:0.0: endpoint incorrect [ 531.131758][ T5819] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 531.131797][ T5819] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 531.138948][ T5819] Bluetooth: hci2: Malformed LE Event: 0x02 [ 531.303286][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.319789][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.343942][T11992] netlink: 'syz.4.1442': attribute type 1 has an invalid length. [ 531.380472][T11992] bond6: entered promiscuous mode [ 531.386263][T11992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 531.404444][ T6780] net_ratelimit: 26 callbacks suppressed [ 531.404478][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 531.463913][ T29] usb 6-1: USB disconnect, device number 27 [ 531.578365][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 531.632618][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.643043][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.731685][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.764414][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.061560][ T5887] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 532.342518][ T5887] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.371355][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.390377][ T5887] usb 7-1: config 0 descriptor?? [ 532.426767][T11992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.437976][T11992] bond6: (slave wireguard5): The slave device specified does not support setting the MAC address [ 532.450626][T11992] bond6: (slave wireguard5): Setting fail_over_mac to active for active-backup mode [ 532.461314][ T5862] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 532.476573][ T5887] cp210x 7-1:0.0: cp210x converter detected [ 532.515862][T11992] bond6: (slave wireguard5): making interface the new active one [ 532.525721][T11992] wireguard5: entered promiscuous mode [ 532.555883][T11992] bond6: (slave wireguard5): Enslaving as an active interface with an up link [ 532.634066][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 532.672637][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.754611][T12009] No such timeout policy "syz0" [ 532.961405][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.049355][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.052529][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.070584][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.091324][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 533.104273][ T5862] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 533.113424][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.124527][ T5862] usb 4-1: config 0 descriptor?? [ 533.130871][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.162866][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1446'. [ 533.202426][ T671] bond1: (slave wlan0): failed to get link speed/duplex [ 533.223647][T12013] xt_hashlimit: size too large, truncated to 1048576 [ 533.409154][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.443011][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.447528][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1450'. [ 533.487389][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 533.516383][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1450'. [ 533.525679][ T6780] bond1: (slave wlan0): failed to get link speed/duplex [ 533.574648][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 533.584264][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1450'. [ 533.597648][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1450'. [ 533.667025][T11843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.677205][T11843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.686843][T11843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.724258][T11843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.758230][T11843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.825003][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.851460][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.893416][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 533.980602][T12023] vxcan1 speed is unknown, defaulting to 1000 [ 534.031474][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.144049][ T12] bridge_slave_1: left allmulticast mode [ 534.170884][ T12] bridge_slave_1: left promiscuous mode [ 534.198229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.250039][ T12] bridge_slave_0: left allmulticast mode [ 534.271380][ T12] bridge_slave_0: left promiscuous mode [ 534.300486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.837579][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 534.843717][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 534.854358][ T5862] usb 4-1: USB disconnect, device number 47 [ 535.129479][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.335351][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 535.348244][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.385904][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.428987][ T12] bond0 (unregistering): Released all slaves [ 535.467529][ T12] bond1 (unregistering): (slave wlan0): Releasing active interface [ 535.502128][ T12] bond1 (unregistering): Released all slaves [ 535.542804][ T12] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 535.561137][ T12] wireguard0: left promiscuous mode [ 535.576443][ T12] bond2 (unregistering): Released all slaves [ 535.594380][ T12] bond3 (unregistering): Released all slaves [ 535.628312][ T12] bond4 (unregistering): Released all slaves [ 535.742391][ T5887] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 535.750028][ T5887] cp210x 7-1:0.0: querying part number failed [ 535.763638][ T5887] usb 7-1: cp210x converter now attached to ttyUSB0 [ 535.777291][ T5887] usb 7-1: USB disconnect, device number 15 [ 535.786066][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.795332][ T5887] cp210x 7-1:0.0: device disconnected [ 535.885221][T11843] Bluetooth: hci1: command tx timeout [ 536.478971][T12084] vxcan1 speed is unknown, defaulting to 1000 [ 537.040294][T12023] chnl_net:caif_netlink_parms(): no params data found [ 537.231421][ T9] net_ratelimit: 2 callbacks suppressed [ 537.231438][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.769929][T12023] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.791362][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.805619][T12023] bridge_slave_0: entered allmulticast mode [ 537.819921][T12023] bridge_slave_0: entered promiscuous mode [ 537.954887][ T5819] Bluetooth: hci1: command tx timeout [ 538.166726][T12023] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.179689][T12023] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.200530][T12023] bridge_slave_1: entered allmulticast mode [ 538.214929][T12023] bridge_slave_1: entered promiscuous mode [ 538.231622][T12130] tmpfs: Unknown parameter 'quo' [ 538.271701][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.622533][T12023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.654506][T12023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.816016][T12023] team0: Port device team_slave_0 added [ 538.831438][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 538.843415][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.869087][T12023] team0: Port device team_slave_1 added [ 539.066375][ T12] hsr_slave_0: left promiscuous mode [ 539.102591][ T12] hsr_slave_1: left promiscuous mode [ 539.111692][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.130648][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.173917][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.205382][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.254938][ T12] veth1_macvtap: left promiscuous mode [ 539.272900][ T12] veth0_macvtap: left promiscuous mode [ 539.273884][T12145] Non-string source [ 539.278423][ T12] veth1_vlan: left promiscuous mode [ 539.307739][ T12] veth0_vlan: left promiscuous mode [ 539.447256][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.059447][T11843] Bluetooth: hci1: command tx timeout [ 541.078351][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.093314][ T12] pim6reg (unregistering): left allmulticast mode [ 541.233334][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.394981][ T12] team0 (unregistering): Port device team_slave_1 removed [ 541.471739][ T12] team0 (unregistering): Port device team_slave_0 removed [ 541.552430][T12168] Invalid option length (1048308) for dns_resolver key [ 541.873079][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.009960][T12023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.021207][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.081267][T12023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.111493][T11843] Bluetooth: hci1: command tx timeout [ 542.125256][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.176800][T12161] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 542.186589][T12161] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 542.196157][T12161] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 542.244808][ T30] audit: type=1800 audit(1774843583.047:718): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.4.1468" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 542.494333][T12023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.553862][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.661295][T12023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.793984][T12023] hsr_slave_0: entered promiscuous mode [ 542.800366][T12023] hsr_slave_1: entered promiscuous mode [ 542.981489][ T5918] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 543.134064][ T12] IPVS: stop unused estimator thread 0... [ 543.159602][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.169370][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 543.183628][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.199683][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.230500][ T5918] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 543.249703][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.279708][ T5918] usb 4-1: config 0 descriptor?? [ 543.300907][T12023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 543.345534][T12023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.439733][T12023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 543.861801][T12023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.881651][ T29] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 543.975282][T12023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.004023][T12023] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.015435][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.022522][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.048308][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 544.055980][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 544.056305][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 544.073261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.082433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.094508][ T5918] usb 4-1: USB disconnect, device number 48 [ 544.103340][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 544.123019][T12023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.133542][T12023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.136931][ T29] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 544.173028][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.181022][ T29] usb 6-1: Product: syz [ 544.195492][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.197816][ T29] usb 6-1: Manufacturer: syz [ 544.222234][ T29] usb 6-1: SerialNumber: syz [ 544.241767][ T29] usb 6-1: config 0 descriptor?? [ 544.254275][ T29] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 544.433932][T12023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.567243][ T29] usb 6-1: USB disconnect, device number 28 [ 544.913155][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.038246][T12215] netlink: 'syz.6.1477': attribute type 1 has an invalid length. [ 545.046124][T12215] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1477'. [ 545.091344][T12215] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1477'. [ 545.112156][T12215] netlink: 'syz.6.1477': attribute type 1 has an invalid length. [ 545.134380][T12215] netlink: 634 bytes leftover after parsing attributes in process `syz.6.1477'. [ 545.261022][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.272547][T12230] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 545.374571][T12230] bond7: entered promiscuous mode [ 545.381687][T12230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 545.451354][ T5862] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 545.504987][T12023] veth0_vlan: entered promiscuous mode [ 545.553355][T12023] veth1_vlan: entered promiscuous mode [ 545.609603][T12023] veth0_macvtap: entered promiscuous mode [ 545.636289][T12023] veth1_macvtap: entered promiscuous mode [ 545.660254][T12023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.692075][T12023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.813298][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.841606][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 546.327768][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.344850][ T5862] usb 7-1: unable to get BOS descriptor or descriptor too short [ 546.430756][ T30] audit: type=1326 audit(1774843587.297:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.3.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7fc00000 [ 546.455664][ T30] audit: type=1326 audit(1774843587.337:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.3.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf4079c799 code=0x7fc00000 [ 546.484472][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.495258][ T5862] usb 7-1: config 1 has no interfaces? [ 546.513698][ T5862] usb 7-1: New USB device found, idVendor=12d1, idProduct=1413, bcdDevice= 0.00 [ 546.543818][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.556126][ T30] audit: type=1326 audit(1774843587.337:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.3.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7fc00000 [ 546.588709][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.637341][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.652957][ T30] audit: type=1326 audit(1774843587.337:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.3.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7fc00000 [ 546.766530][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.803816][ T30] audit: type=1326 audit(1774843587.337:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.3.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4079c799 code=0x7fc00000 [ 547.218207][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 547.451655][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.518500][ T5862] usb 7-1: Manufacturer: Ї [ 547.643313][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.652524][T12250] vxcan1 speed is unknown, defaulting to 1000 [ 547.669384][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.954733][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.026663][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.098007][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.288508][ T5862] usb 7-1: USB disconnect, device number 16 [ 548.388486][T12259] smc: net device bond0 applied user defined pnetid SYZ2 [ 548.722192][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.145443][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.265338][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.321429][T12269] sp0: Synchronizing with TNC [ 549.322979][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.407472][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.484223][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.613564][ T55] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 549.659624][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.791989][ T5862] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 549.792611][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 549.840837][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.858307][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 549.891484][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.930938][ T55] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 550.329662][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.364824][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.402897][ T55] usb 4-1: config 0 descriptor?? [ 550.534112][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.546499][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.559212][ T5862] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 550.575315][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.718315][ T30] audit: type=1800 audit(1774843591.577:724): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1492" name="/" dev="fuse" ino=4 res=0 errno=0 [ 550.740083][ T5862] usb 8-1: config 0 descriptor?? [ 550.841383][T12291] sg_write: data in/out 268435685/25 bytes for SCSI command 0x0-- guessing data in; [ 550.841383][T12291] program syz.4.1494 not setting count and/or reply_len properly [ 550.863885][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.911741][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 550.925237][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.971990][ T55] usb 4-1: USB disconnect, device number 49 [ 551.016191][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.189931][ T5862] hid_parser_main: 32 callbacks suppressed [ 551.189943][ T5862] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x2 [ 551.351477][ T5862] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 551.389034][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.403391][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.740098][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.813820][ T5862] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 551.840159][ T5862] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 551.880089][ T5862] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -32 [ 551.923763][ T5862] usb 8-1: USB disconnect, device number 2 [ 552.236149][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.278655][T12313] openvswitch: netlink: IP tunnel TTL not specified. [ 552.433706][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.077806][T12339] vxcan1 speed is unknown, defaulting to 1000 [ 553.216219][T12313] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 553.344374][ T30] audit: type=1400 audit(1774843594.217:725): avc: denied { listen } for pid=12330 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.409819][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.417936][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.426676][ T30] audit: type=1400 audit(1774843594.217:726): avc: denied { accept } for pid=12330 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 555.475803][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.871334][ T55] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 555.881839][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 556.043361][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 556.052634][ T55] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 556.062998][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.067903][ T55] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 556.097787][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 556.116888][ T9] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x38, changing to 0x8 [ 556.127061][ T55] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 556.164435][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 556.180758][ T55] usb 6-1: config 220 has no interface number 2 [ 556.206870][ T55] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 556.215539][ T9] usb 7-1: New USB device found, idVendor=6225, idProduct=a415, bcdDevice= 0.40 [ 556.234119][T12401] FAULT_INJECTION: forcing a failure. [ 556.234119][T12401] name failslab, interval 1, probability 0, space 0, times 0 [ 556.250417][ T55] usb 6-1: config 220 interface 0 has no altsetting 0 [ 556.257547][T12401] CPU: 1 UID: 0 PID: 12401 Comm: syz.7.1519 Not tainted syzkaller #0 PREEMPT(full) [ 556.257569][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.257578][T12401] Call Trace: [ 556.257584][T12401] [ 556.257590][T12401] dump_stack_lvl+0x100/0x190 [ 556.257625][T12401] should_fail_ex.cold+0x5/0xa [ 556.257650][T12401] should_failslab+0xc2/0x120 [ 556.257669][T12401] __kmalloc_cache_noprof+0x7a/0x6f0 [ 556.257694][T12401] ? shrinker_alloc+0xf5/0xbc0 [ 556.257716][T12401] shrinker_alloc+0xf5/0xbc0 [ 556.257741][T12401] ? mark_held_locks+0x40/0x70 [ 556.257759][T12401] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 556.257787][T12401] ? rcu_is_watching+0x12/0xc0 [ 556.257810][T12401] ? __pfx_shrinker_alloc+0x10/0x10 [ 556.257831][T12401] ? lockdep_init_map_type+0x5c/0x250 [ 556.257849][T12401] ? lockdep_init_map_type+0x5c/0x250 [ 556.257869][T12401] ? __raw_spin_lock_init+0x3a/0x110 [ 556.257889][T12401] ? __init_rwsem+0x12d/0x1b0 [ 556.257913][T12401] alloc_super+0x7c7/0xd20 [ 556.257945][T12401] ? __pfx_shmem_fill_super+0x10/0x10 [ 556.257972][T12401] sget_fc+0x117/0xc70 [ 556.257999][T12401] ? __pfx_set_anon_super_fc+0x10/0x10 [ 556.258026][T12401] ? __pfx_shmem_fill_super+0x10/0x10 [ 556.258048][T12401] get_tree_nodev+0x28/0x190 [ 556.258067][T12401] vfs_get_tree+0x92/0x320 [ 556.258092][T12401] path_mount+0x7d0/0x23d0 [ 556.258119][T12401] ? __pfx_path_mount+0x10/0x10 [ 556.258140][T12401] ? lockdep_hardirqs_on+0x78/0x100 [ 556.258169][T12401] ? putname+0xb1/0x110 [ 556.258185][T12401] ? kmem_cache_free+0x124/0x6a0 [ 556.258214][T12401] ? __x64_sys_mount+0x293/0x310 [ 556.258234][T12401] __x64_sys_mount+0x293/0x310 [ 556.258255][T12401] ? __pfx___x64_sys_mount+0x10/0x10 [ 556.258276][T12401] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 556.258300][T12401] ? syscall_user_dispatch+0x76/0x130 [ 556.258322][T12401] do_syscall_64+0x106/0xf80 [ 556.258341][T12401] ? clear_bhb_loop+0x40/0x90 [ 556.258354][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.258365][T12401] RIP: 0033:0x7f4121d9c799 [ 556.258374][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.258384][T12401] RSP: 002b:00007f4122be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 556.258394][T12401] RAX: ffffffffffffffda RBX: 00007f4122015fa0 RCX: 00007f4121d9c799 [ 556.258401][T12401] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 556.258407][T12401] RBP: 00007f4122be3090 R08: 0000000000000000 R09: 0000000000000000 [ 556.258413][T12401] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 556.258419][T12401] R13: 00007f4122016038 R14: 00007f4122015fa0 R15: 00007ffc4e0ec468 [ 556.258432][T12401] [ 556.281631][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 556.313297][ T55] usb 6-1: config 220 interface 76 has no altsetting 0 [ 556.491790][ T9] usb 7-1: Product: syz [ 556.560747][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.028533][ T55] usb 6-1: config 220 interface 1 has no altsetting 0 [ 557.045735][ T55] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 557.054992][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.058692][ T30] audit: type=1400 audit(1774843597.437:727): avc: denied { write } for pid=12399 comm="syz.4.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 557.083171][ T55] usb 6-1: Product: syz [ 557.083190][ T55] usb 6-1: Manufacturer: syz [ 557.083204][ T55] usb 6-1: SerialNumber: syz [ 557.097769][ T9] usb 7-1: Manufacturer: syz [ 557.159920][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 557.165595][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 557.182249][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 557.196700][ T5887] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 557.278580][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.287456][ T30] audit: type=1400 audit(1774843598.167:728): avc: denied { unmount } for pid=12023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 557.309472][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.312919][T12400] nbd0: detected capacity change from 0 to 63 [ 557.328474][ T55] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 557.335857][ T55] uvcvideo 6-1:220.0: No valid video chain found. [ 557.341734][ T5887] usb 5-1: device descriptor read/64, error -71 [ 557.352013][ T55] usb 6-1: selecting invalid altsetting 0 [ 557.358757][ T9] usb 7-1: USB disconnect, device number 17 [ 557.368619][ T55] usb 6-1: selecting invalid altsetting 0 [ 557.374540][ T55] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 557.411131][ T55] usb 6-1: USB disconnect, device number 29 [ 557.601889][ T5887] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 557.672471][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.723297][ T5887] usb 5-1: device descriptor read/64, error -71 [ 558.768393][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.846263][ T5887] usb usb5-port1: attempt power cycle [ 558.933478][T12425] rpc_pipefs: Unknown parameter 'discard' [ 559.201845][ T5887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 559.273277][ T5887] usb 5-1: device descriptor read/8, error -71 [ 559.282243][T11843] block nbd0: Receive control failed (result -104) [ 559.291858][ T902] block nbd0: Receive control failed (result -32) [ 559.300518][ T5819] block nbd0: Receive control failed (result -32) [ 559.848605][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.415642][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.924504][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.155177][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.163287][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.357349][T12463] vxcan1 speed is unknown, defaulting to 1000 [ 562.363624][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.365718][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.389736][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.431429][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.235972][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.400524][T12503] __nla_validate_parse: 3 callbacks suppressed [ 564.400536][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1540'. [ 564.931977][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 566.452007][ T5887] net_ratelimit: 3 callbacks suppressed [ 566.452024][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.481681][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 566.489862][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 566.498817][ T9] usb 4-1: config 179 has no interface number 0 [ 566.505619][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 566.628877][T12527] syz.7.1545 (12527): drop_caches: 2 [ 566.674686][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 566.674720][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.691294][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 566.781361][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 566.889911][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 566.939857][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 566.960233][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 566.993076][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.194499][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1547'. [ 567.316680][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input67 [ 567.479011][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.503385][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.519741][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.542074][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.552533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.568630][ T5166] input input67: unable to receive magic message: -71 [ 567.603298][ T5166] input input67: unable to receive magic message: -71 [ 567.809815][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.882779][ T5166] input input67: unable to receive magic message: -71 [ 567.945382][ T9] usb 4-1: USB disconnect, device number 50 [ 567.951936][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 568.911921][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.299814][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.922168][ T30] audit: type=1400 audit(1774843612.787:729): avc: denied { write } for pid=12590 comm="syz.6.1562" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 571.952813][ T5917] net_ratelimit: 2 callbacks suppressed [ 571.952830][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.436017][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.242080][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.250798][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.404885][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.485535][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.646604][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.844078][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.976169][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 576.545675][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.593785][T12634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12634 comm=syz.3.1572 [ 576.671364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.317416][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.556076][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.552644][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.347760][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.157780][T12694] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1586'. [ 581.523875][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.552505][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.677720][T12698] netlink: 'syz.7.1587': attribute type 1 has an invalid length. [ 581.873078][T12698] bond1: entered promiscuous mode [ 581.881382][T12698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.379727][T12711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.388000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.619462][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.641128][T12700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.650622][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.676694][T12700] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 582.688770][T12700] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 582.834449][T12700] bond1: (slave wireguard0): making interface the new active one [ 582.962827][T12700] wireguard0: entered promiscuous mode [ 582.978957][T12700] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 582.991303][ T55] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 583.080943][T12721] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 583.953744][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.111290][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 584.396561][ T55] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.445687][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 584.455212][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.463497][ T55] usb 6-1: Product: syz [ 584.467814][ T55] usb 6-1: Manufacturer: syz [ 584.479175][ T55] usb 6-1: SerialNumber: syz [ 585.860315][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.879087][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.915314][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.481838][ T5918] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 587.630719][T12762] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1598'. [ 587.716684][ T5918] usb 7-1: device descriptor read/64, error -71 [ 587.772564][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 587.840336][ T55] usb 6-1: cannot setup if 1: error -71 [ 587.853389][ T55] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 587.878438][ T55] usb 6-1: cannot setup if 1: error -71 [ 587.885798][ T55] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 587.900503][ T55] usb 6-1: cannot setup if 1: error -71 [ 587.978839][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.988665][ T2826] block nbd0: Connection timed out, retrying (0/3 alive) [ 588.003194][ T2826] block nbd0: Connection timed out, retrying (0/3 alive) [ 588.011540][ T2826] block nbd0: Connection timed out, retrying (0/3 alive) [ 588.102176][T12768] smc: net device bond0 applied user defined pnetid SYZ2 [ 588.448982][ T5918] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 588.482522][T10125] block nbd0: Dead connection, failed to find a fallback [ 588.496070][T10125] block nbd0: shutting down sockets [ 588.505922][T10125] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.521100][ T2826] block nbd0: Connection timed out, retrying (0/3 alive) [ 588.522362][ T55] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 588.528994][T10125] buffer_io_error: 11 callbacks suppressed [ 588.529005][T10125] Buffer I/O error on dev nbd0, logical block 1, async page read [ 588.555383][T10125] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.566048][T10125] Buffer I/O error on dev nbd0, logical block 0, async page read [ 588.575172][T10125] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.589015][T10125] Buffer I/O error on dev nbd0, logical block 3, async page read [ 588.598194][T10125] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.609436][T10125] Buffer I/O error on dev nbd0, logical block 2, async page read [ 588.621506][T10764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.701920][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 588.707837][T10764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 588.717008][T10764] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.727397][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.738827][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.749132][T10764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 588.772733][T10764] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.777922][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.782787][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.799025][ T55] usb 6-1: USB disconnect, device number 30 [ 588.812449][T10764] Buffer I/O error on dev nbd0, logical block 2, async page read [ 588.900622][ T5918] usb 7-1: device descriptor read/64, error -71 [ 588.911773][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.912051][T10764] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.932013][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.942876][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.960912][T10764] Buffer I/O error on dev nbd0, logical block 3, async page read [ 588.983593][T10764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.025976][ T5918] usb usb7-port1: attempt power cycle [ 589.060002][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.070335][ T9] usb 4-1: config 0 descriptor?? [ 589.076119][T10764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 589.101690][T10764] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.113123][T10764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 589.123085][T10764] ldm_validate_partition_table(): Disk read failed. [ 589.164521][T10764] Dev nbd0: unable to read RDB block 0 [ 589.174924][T10764] nbd0: unable to read partition table [ 589.194259][T10764] ldm_validate_partition_table(): Disk read failed. [ 589.211687][T10764] Dev nbd0: unable to read RDB block 0 [ 589.217785][T10764] nbd0: unable to read partition table [ 589.388046][T12783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63744 sclass=netlink_route_socket pid=12783 comm=syz.7.1604 [ 589.468282][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 589.477318][T12784] openvswitch: netlink: Flow actions attr not present in new flow. [ 589.819859][ T9] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 589.838993][ T9] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0 [ 589.849260][ T30] audit: type=1400 audit(1774843630.377:730): avc: denied { watch watch_reads } for pid=12758 comm="syz.3.1601" path="/331/file0" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 589.873267][ T5918] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 589.884569][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 589.896119][ T9] microsoft 0003:045E:07DA.0010: implement() called with n (152) > 32! (kworker/0:0) [ 589.910606][ T9] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0 [ 589.931162][ T9] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 589.943772][ T5918] usb 7-1: device descriptor read/8, error -71 [ 589.981057][ T9] microsoft 0003:045E:07DA.0010: no inputs found [ 590.069546][ T9] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 590.168838][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.203401][ T6780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.213446][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.231295][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.261264][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 590.445602][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.475617][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 590.476069][ T5862] usb 4-1: USB disconnect, device number 51 [ 590.796556][T12794] affs: No valid root block on device nullb0 [ 591.124154][T12793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.132762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.326310][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 591.467450][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 591.511619][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 591.549730][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.580809][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 591.625669][ T24] usb 5-1: SerialNumber: syz [ 591.641299][T12778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 591.670621][T12778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 591.695846][T12805] serio: Serial port ptm0 [ 591.782028][T12800] xt_HMARK: proto mask must be zero with L3 mode [ 592.012801][ T24] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 592.030738][ T24] usb 5-1: USB disconnect, device number 41 [ 592.045323][ T55] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 592.723654][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 592.743661][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 592.805617][ T55] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 592.815373][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.824844][ T55] usb 6-1: Product: syz [ 592.829457][ T55] usb 6-1: Manufacturer: syz [ 592.834678][ T55] usb 6-1: SerialNumber: syz [ 592.905486][ T55] usb 6-1: config 0 descriptor?? [ 593.006515][ T55] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 593.093698][ T55] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 593.184916][T12824] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 593.324822][T12827] net_ratelimit: 4 callbacks suppressed [ 593.324838][T12827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.562115][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.628082][ T55] em28xx 6-1:0.0: chip ID is em2874 [ 594.041679][ T29] IPVS: starting estimator thread 0... [ 594.131337][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 594.144042][T12835] IPVS: using max 41 ests per chain, 98400 per kthread [ 594.301280][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 594.308917][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 594.318789][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.326885][ T24] usb 5-1: Product: syz [ 594.331190][ T24] usb 5-1: Manufacturer: syz [ 594.335902][ T24] usb 5-1: SerialNumber: syz [ 594.343790][ T24] usb 5-1: config 0 descriptor?? [ 594.406137][ T55] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 594.414254][ T55] em28xx 6-1:0.0: board has no eeprom [ 594.553226][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 594.604178][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.687037][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.700143][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.991726][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.204313][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.217090][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.234362][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 595.289007][ T24] usb 5-1: USB disconnect, device number 42 [ 595.321772][ T671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.333446][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.349155][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.464181][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 595.489190][T12800] em28xx 6-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 595.541276][ T55] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 596.037256][ T55] em28xx 6-1:0.0: dvb set to bulk mode. [ 596.063116][ T29] em28xx 6-1:0.0: Binding DVB extension [ 596.081828][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 596.111158][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.127359][T12855] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1624'. [ 596.301824][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.355183][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 596.370908][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.379993][ T9] usb 7-1: Product: syz [ 596.385435][ T9] usb 7-1: Manufacturer: syz [ 596.385668][T12855] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1624'. [ 596.399016][ T9] usb 7-1: SerialNumber: syz [ 596.402639][ T29] em28xx 6-1:0.0: Registering input extension [ 596.432203][ T9] usb 7-1: config 0 descriptor?? [ 596.441924][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.584200][ T29] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 596.614334][ T29] Registered IR keymap rc-empty [ 596.849401][T12869] smc: net device bond0 applied user defined pnetid SYZ2 [ 597.174102][ T29] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 597.208192][ T29] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68 [ 597.246757][ T29] em28xx 6-1:0.0: Input extension successfully initialized [ 597.483402][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.493021][ T30] audit: type=1400 audit(1774843638.357:731): avc: denied { getopt } for pid=12860 comm="syz.3.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 598.025058][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.033980][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.051232][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.066350][T12878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.080064][T12878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.687383][ T977] usb 7-1: USB disconnect, device number 22 [ 598.714005][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.797396][T12878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.809171][T12878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.831407][ T55] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 598.865137][ T24] usb 6-1: USB disconnect, device number 31 [ 598.871726][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 598.884497][ T24] em28xx 6-1:0.0: Closing input extension [ 598.988061][T12878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.016153][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.030266][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.105239][T12878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.123101][ T24] em28xx 6-1:0.0: Freeing device [ 599.128115][ T55] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 599.138554][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 599.564231][ T55] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 599.572712][ T55] usb 8-1: Manufacturer: syz [ 599.581508][ T55] usb 8-1: config 0 descriptor?? [ 599.635798][T12878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.650049][T12878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.791915][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.330559][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.338982][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.369204][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.377910][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.508412][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.517229][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.533122][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.541923][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.766708][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.864870][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.893909][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.901996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.910339][ T55] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 600.921146][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.079809][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.706139][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.722430][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.788336][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.852980][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.004852][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.628679][T12932] vxcan1 speed is unknown, defaulting to 1000 [ 603.102451][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.157934][ T24] usb 8-1: USB disconnect, device number 3 [ 603.514671][T12940] netlink: 'syz.7.1646': attribute type 3 has an invalid length. [ 604.128105][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.139398][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.592033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.643905][ T30] audit: type=1400 audit(1774843645.507:732): avc: denied { node_bind } for pid=12950 comm="syz.4.1650" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 605.185885][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.521304][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.581376][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.979707][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.151750][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.182035][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.312554][ T6780] wlan0: Trigger new scan to find an IBSS to join [ 607.722145][T12982] binder: 12974:12982 ioctl 4018620d 0 returned -22 [ 607.867186][T12991] FAULT_INJECTION: forcing a failure. [ 607.867186][T12991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.883418][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.5.1659 Not tainted syzkaller #0 PREEMPT(full) [ 607.883438][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.883447][T12991] Call Trace: [ 607.883452][T12991] [ 607.883459][T12991] dump_stack_lvl+0x100/0x190 [ 607.883492][T12991] should_fail_ex.cold+0x5/0xa [ 607.883516][T12991] _copy_from_user+0x2e/0xd0 [ 607.883535][T12991] copy_msghdr_from_user+0x9f/0x4f0 [ 607.883554][T12991] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 607.883581][T12991] ___sys_sendmsg+0x106/0x1e0 [ 607.883598][T12991] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.883639][T12991] __sys_sendmsg+0x170/0x220 [ 607.883660][T12991] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.883695][T12991] do_syscall_64+0x106/0xf80 [ 607.883719][T12991] ? clear_bhb_loop+0x40/0x90 [ 607.883740][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.883758][T12991] RIP: 0033:0x7f697d79c799 [ 607.883772][T12991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.883786][T12991] RSP: 002b:00007f697e728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.883801][T12991] RAX: ffffffffffffffda RBX: 00007f697da15fa0 RCX: 00007f697d79c799 [ 607.883811][T12991] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 607.883819][T12991] RBP: 00007f697e728090 R08: 0000000000000000 R09: 0000000000000000 [ 607.883828][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.883836][T12991] R13: 00007f697da16038 R14: 00007f697da15fa0 R15: 00007ffed43c71c8 [ 607.883856][T12991] [ 608.066512][T12989] vxcan1 speed is unknown, defaulting to 1000 [ 608.276370][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.641991][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.071766][ T24] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 610.192052][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.353867][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.407777][ T977] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 610.573960][ T24] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 610.670615][ T977] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 610.736554][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.974968][ T977] usb 4-1: config 0 descriptor?? [ 611.071360][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.092601][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.130966][ T24] usb 8-1: config 0 descriptor?? [ 611.151897][ T24] cp210x 8-1:0.0: cp210x converter detected [ 611.915861][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 611.924800][T13014] openvswitch: netlink: Flow actions attr not present in new flow. [ 612.115559][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.274456][ T6780] wlan0: Trigger new scan to find an IBSS to join [ 612.549857][T13034] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 612.721230][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'. [ 613.025880][T13041] xt_hashlimit: size too large, truncated to 1048576 [ 613.233026][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.255671][ T9363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.586738][ T977] usb 4-1: Cannot read MAC address [ 613.597148][ T977] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 613.651509][ T977] usb 4-1: USB disconnect, device number 52 [ 613.886068][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1662'. [ 614.231516][T13054] nfs: Unknown parameter 'G' [ 614.859362][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.334778][ T671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.521018][T13061] vxcan1 speed is unknown, defaulting to 1000 [ 615.872481][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.191429][ T24] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 616.213799][ T24] cp210x 8-1:0.0: querying part number failed [ 616.251665][ T24] usb 8-1: cp210x converter now attached to ttyUSB0 [ 616.288257][ T24] usb 8-1: USB disconnect, device number 4 [ 616.315962][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.328442][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 616.374890][ T24] cp210x 8-1:0.0: device disconnected [ 616.546869][T13066] vxcan1 speed is unknown, defaulting to 1000 [ 617.152874][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.931257][ T5887] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 618.321927][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.564633][ T5887] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 618.574239][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.582980][ T5887] usb 4-1: Product: syz [ 618.587402][ T5887] usb 4-1: Manufacturer: syz [ 618.604427][ T5887] usb 4-1: SerialNumber: syz [ 618.609184][T13090] vxcan1 speed is unknown, defaulting to 1000 [ 618.675110][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.706882][ T5887] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 618.827699][ T5918] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 619.068277][T13093] fuse: Bad value for 'fd' [ 619.380292][ T977] usb 4-1: USB disconnect, device number 53 [ 619.396515][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.405260][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.192538][ T5918] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 620.203022][ T5918] ath9k_htc: Failed to initialize the device [ 620.213440][ T977] usb 4-1: ath9k_htc: USB layer deinitialized [ 620.236856][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.442095][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.858801][T13114] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1687'. [ 621.473734][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.622106][ T30] audit: type=1400 audit(1774843662.497:733): avc: denied { execute } for pid=13120 comm="syz.5.1690" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 621.651381][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 621.951528][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 621.988141][ T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 621.998309][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.012787][ T24] usb 4-1: Product: syz [ 622.016985][ T24] usb 4-1: Manufacturer: syz [ 622.026371][ T24] usb 4-1: SerialNumber: syz [ 622.042747][ T24] usb 4-1: config 0 descriptor?? [ 622.061738][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 622.177978][ T5862] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 622.403920][ T5862] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 622.414589][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.428090][ T5862] usb 8-1: config 0 descriptor?? [ 622.443191][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.454397][ T5862] cp210x 8-1:0.0: cp210x converter detected [ 622.511845][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.976340][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1685'. [ 622.990974][T13136] xt_hashlimit: size too large, truncated to 1048576 [ 623.099502][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1685'. [ 623.179399][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1685'. [ 623.432124][ T5819] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 623.554577][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.806419][ T24] gspca_ov534_9: reg_r err -110 [ 624.820866][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.071401][ T24] gspca_ov534_9: Unknown sensor 0000 [ 625.071471][ T24] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 625.276607][T13162] vxcan1 speed is unknown, defaulting to 1000 [ 625.823498][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.876907][ T24] usb 4-1: USB disconnect, device number 54 [ 625.893576][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.096300][ T5862] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 626.121774][ T5862] cp210x 8-1:0.0: querying part number failed [ 626.163451][ T5862] usb 8-1: cp210x converter now attached to ttyUSB0 [ 626.212358][ T5862] usb 8-1: USB disconnect, device number 5 [ 626.233870][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 626.256260][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 626.589478][ T5862] cp210x 8-1:0.0: device disconnected [ 626.631935][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 626.638396][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.711162][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.720945][ T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 626.770585][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.793498][ T24] usb 4-1: config 0 descriptor?? [ 626.917687][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.024178][ T5862] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 627.305559][T13181] vlan2: entered promiscuous mode [ 627.378170][ T5862] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 627.379512][ T24] ntrig 0003:1B96:0008.0012: item fetching failed at offset 5/7 [ 627.387381][ T5862] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 627.435902][ T24] ntrig 0003:1B96:0008.0012: parse failed [ 627.441228][ T5862] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 627.497496][T13184] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1703'. [ 627.522742][ T24] ntrig 0003:1B96:0008.0012: probe with driver ntrig failed with error -22 [ 627.542183][T13187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.550471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.586718][ T5862] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 627.652234][ T5862] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 627.714206][T13189] netlink: 'syz.6.1704': attribute type 1 has an invalid length. [ 627.723959][ T5918] usb 4-1: USB disconnect, device number 55 [ 627.762683][ T5862] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 627.802145][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 627.845091][ T5862] usb 8-1: Product: syz [ 627.849232][ T5862] usb 8-1: Manufacturer: syz [ 627.885821][T13189] bond3: entered promiscuous mode [ 627.891398][T13187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.899647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.909284][ T5862] cdc_wdm 8-1:1.0: skipping garbage [ 627.932226][ T5862] cdc_wdm 8-1:1.0: skipping garbage [ 627.955416][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.969942][T13189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.030435][ T5862] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 628.049666][ T5862] cdc_wdm 8-1:1.0: Unknown control protocol [ 628.120697][ T5862] usb 8-1: USB disconnect, device number 6 [ 628.138611][T13191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.224829][T13191] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address [ 628.245584][T13191] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 628.245788][T13187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.263431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.498239][T13191] bond3: (slave wireguard2): making interface the new active one [ 628.540879][T13191] wireguard2: entered promiscuous mode [ 628.549193][T13191] bond3: (slave wireguard2): Enslaving as an active interface with an up link [ 628.574249][T13195] bridge0: port 3(vlan2) entered blocking state [ 628.585481][T13195] bridge0: port 3(vlan2) entered disabled state [ 628.609589][T13195] vlan2: entered allmulticast mode [ 628.619984][T13195] dummy0: entered allmulticast mode [ 628.621713][ T5862] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 628.650379][T13195] vlan2: entered promiscuous mode [ 628.655728][T13195] dummy0: entered promiscuous mode [ 628.942033][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 628.971679][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.016067][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.042534][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.070355][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.834917][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.912559][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.408708][ T5862] usb 4-1: GET_CAPABILITIES returned 0 [ 630.474656][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 630.863195][ T5918] usb 4-1: USB disconnect, device number 56 [ 631.146394][T13221] vxcan1 speed is unknown, defaulting to 1000 [ 631.235518][ T5862] net_ratelimit: 10 callbacks suppressed [ 631.235532][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.263462][T13226] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.1715'. [ 631.351479][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'. [ 631.388980][T13232] serio: Serial port ptm0 [ 632.232642][T13244] random: crng reseeded on system resumption [ 632.263384][ T9363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.436161][ T30] audit: type=1400 audit(1774843673.137:734): avc: denied { ioctl } for pid=13237 comm="syz.4.1712" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 632.530331][T13240] tipc: Started in network mode [ 632.535693][T13240] tipc: Node identity 2, cluster identity 4711 [ 632.541884][T13240] tipc: Node number set to 2 [ 632.548334][ T30] audit: type=1400 audit(1774843673.157:735): avc: denied { read } for pid=13237 comm="syz.4.1712" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 632.978206][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.026952][ T30] audit: type=1400 audit(1774843673.157:736): avc: denied { open } for pid=13237 comm="syz.4.1712" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 634.073626][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.691701][ T30] audit: type=1326 audit(1774843675.557:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.5.1726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f697d79c799 code=0x0 [ 635.153836][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.312926][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.344647][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1725'. [ 635.354121][T13266] openvswitch: netlink: Flow actions attr not present in new flow. [ 635.586013][ T9363] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 635.596584][ T9363] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 636.191723][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.506959][ T30] audit: type=1400 audit(1774843933.330:738): avc: denied { connect } for pid=13291 comm="syz.6.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 636.555768][ T30] audit: type=1326 audit(1774843933.340:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508979c799 code=0x7ffc0000 [ 636.717921][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 636.795883][ T30] audit: type=1326 audit(1774843933.340:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508979c799 code=0x7ffc0000 [ 636.853648][ T30] audit: type=1326 audit(1774843933.340:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f508979c799 code=0x7ffc0000 [ 636.968359][ T5819] Bluetooth: hci1: link tx timeout [ 636.976035][ T5819] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 637.056371][ T30] audit: type=1326 audit(1774843933.340:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508979c799 code=0x7ffc0000 [ 637.165872][ T30] audit: type=1326 audit(1774843933.350:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f508975cfce code=0x7ffc0000 [ 637.264068][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.347844][ T29] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 637.531359][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 637.545406][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.701969][ T977] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 638.049705][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 638.294443][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.294952][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.304241][ T29] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 638.321528][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.329672][ T977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.361824][ T9363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.362686][ T977] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 638.401828][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.402823][ T29] usb 4-1: config 0 descriptor?? [ 638.452247][ T977] usb 6-1: Product: syz [ 638.456394][ T977] usb 6-1: Manufacturer: syz [ 638.492056][ T977] usb 6-1: SerialNumber: syz [ 638.550394][ T977] usb 6-1: config 0 descriptor?? [ 638.572425][ T977] usb 6-1: bad CDC descriptors [ 638.607272][ T977] usb 6-1: unsupported MDLM descriptors [ 638.682548][T13318] vxcan1 speed is unknown, defaulting to 1000 [ 638.771147][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 638.771163][ T30] audit: type=1400 audit(1774843935.640:766): avc: denied { block_suspend } for pid=13312 comm="syz.5.1739" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 638.837964][ T29] ntrig 0003:1B96:0008.0014: item fetching failed at offset 5/7 [ 638.853381][ T24] usb 6-1: USB disconnect, device number 32 [ 638.861344][ T29] ntrig 0003:1B96:0008.0014: parse failed [ 638.871972][ T29] ntrig 0003:1B96:0008.0014: probe with driver ntrig failed with error -22 [ 639.071530][T11843] Bluetooth: hci1: command 0x0406 tx timeout [ 639.119486][ T977] usb 4-1: USB disconnect, device number 57 [ 639.155524][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.163891][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.194454][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1740'. [ 639.203669][T13327] openvswitch: netlink: Flow actions attr not present in new flow. [ 639.311950][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.399124][ T30] audit: type=1400 audit(1774843936.230:767): avc: denied { map } for pid=13326 comm="syz.5.1743" path="socket:[42694]" dev="sockfs" ino=42694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 640.347787][T13349] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 640.443287][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.015351][T13349] bond8: entered promiscuous mode [ 641.069067][ T30] audit: type=1400 audit(1774843937.940:768): avc: denied { getopt } for pid=13358 comm="syz.3.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 641.070073][T13361] [ 641.090962][T13361] ====================================================== [ 641.097963][T13361] WARNING: possible circular locking dependency detected [ 641.104948][T13361] syzkaller #0 Tainted: G L [ 641.110889][T13361] ------------------------------------------------------ [ 641.117871][T13361] syz.3.1751/13361 is trying to acquire lock: [ 641.123917][T13361] ffffffff8e9ab7e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 641.133711][T13361] [ 641.133711][T13361] but task is already holding lock: [ 641.141042][T13361] ffff888052ea4220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 641.150569][T13361] [ 641.150569][T13361] which lock already depends on the new lock. [ 641.150569][T13361] [ 641.160936][T13361] [ 641.160936][T13361] the existing dependency chain (in reverse order) is: [ 641.169922][T13361] [ 641.169922][T13361] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 641.177699][T13361] lock_sock_nested+0x41/0xf0 [ 641.182870][T13361] mptcp_connect+0x64f/0xad0 [ 641.187949][T13361] __inet_stream_connect+0x208/0xfa0 [ 641.193722][T13361] inet_stream_connect+0x57/0xa0 [ 641.199146][T13361] __sys_connect_file+0x141/0x1a0 [ 641.204663][T13361] __sys_connect+0x141/0x170 [ 641.209749][T13361] __x64_sys_connect+0x72/0xb0 [ 641.215005][T13361] do_syscall_64+0x106/0xf80 [ 641.220088][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.226479][T13361] [ 641.226479][T13361] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 641.234086][T13361] lock_sock_nested+0x41/0xf0 [ 641.239518][T13361] inet_shutdown+0x67/0x410 [ 641.244508][T13361] nbd_mark_nsock_dead+0xae/0x5c0 [ 641.250025][T13361] recv_work+0x5fb/0x8c0 [ 641.254756][T13361] process_one_work+0xa23/0x19a0 [ 641.260184][T13361] worker_thread+0x5ef/0xe50 [ 641.265276][T13361] kthread+0x370/0x450 [ 641.269833][T13361] ret_from_fork+0x754/0xd80 [ 641.274914][T13361] ret_from_fork_asm+0x1a/0x30 [ 641.280172][T13361] [ 641.280172][T13361] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 641.287777][T13361] __mutex_lock+0x1a2/0x1b90 [ 641.292866][T13361] nbd_queue_rq+0x428/0x1080 [ 641.297943][T13361] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 641.303979][T13361] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 641.310800][T13361] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 641.317270][T13361] blk_mq_run_hw_queue+0x23c/0x670 [ 641.322873][T13361] blk_mq_dispatch_list+0x51d/0x1360 [ 641.328650][T13361] blk_mq_flush_plug_list+0x130/0x600 [ 641.334519][T13361] __blk_flush_plug+0x2c4/0x4b0 [ 641.339867][T13361] __submit_bio+0x584/0x6c0 [ 641.344859][T13361] submit_bio_noacct_nocheck+0x562/0xc10 [ 641.350982][T13361] submit_bio_noacct+0xd17/0x2010 [ 641.356501][T13361] submit_bh_wbc+0x59c/0x770 [ 641.361589][T13361] block_read_full_folio+0x264/0x8e0 [ 641.367376][T13361] filemap_read_folio+0xfc/0x3b0 [ 641.372808][T13361] do_read_cache_folio+0x2d7/0x6b0 [ 641.378414][T13361] read_part_sector+0xd1/0x370 [ 641.383669][T13361] adfspart_check_ICS+0x93/0x910 [ 641.389096][T13361] bdev_disk_changed+0x7f8/0xc80 [ 641.394522][T13361] blkdev_get_whole+0x187/0x290 [ 641.399862][T13361] bdev_open+0x2c7/0xe40 [ 641.404596][T13361] blkdev_open+0x34e/0x4f0 [ 641.409507][T13361] do_dentry_open+0x6d8/0x1660 [ 641.414757][T13361] vfs_open+0x82/0x3f0 [ 641.419318][T13361] path_openat+0x208c/0x31a0 [ 641.424398][T13361] do_file_open+0x20e/0x430 [ 641.429393][T13361] do_sys_openat2+0x10d/0x1e0 [ 641.434561][T13361] __x64_sys_openat+0x12d/0x210 [ 641.439901][T13361] do_syscall_64+0x106/0xf80 [ 641.444982][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.451363][T13361] [ 641.451363][T13361] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 641.458536][T13361] __mutex_lock+0x1a2/0x1b90 [ 641.463621][T13361] nbd_queue_rq+0xba/0x1080 [ 641.468611][T13361] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 641.474651][T13361] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 641.481471][T13361] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 641.487939][T13361] blk_mq_run_hw_queue+0x23c/0x670 [ 641.493538][T13361] blk_mq_dispatch_list+0x51d/0x1360 [ 641.499315][T13361] blk_mq_flush_plug_list+0x130/0x600 [ 641.505175][T13361] __blk_flush_plug+0x2c4/0x4b0 [ 641.510515][T13361] __submit_bio+0x584/0x6c0 [ 641.515507][T13361] submit_bio_noacct_nocheck+0x562/0xc10 [ 641.521636][T13361] submit_bio_noacct+0xd17/0x2010 [ 641.527160][T13361] submit_bh_wbc+0x59c/0x770 [ 641.532242][T13361] block_read_full_folio+0x264/0x8e0 [ 641.538021][T13361] filemap_read_folio+0xfc/0x3b0 [ 641.543450][T13361] do_read_cache_folio+0x2d7/0x6b0 [ 641.549059][T13361] read_part_sector+0xd1/0x370 [ 641.554317][T13361] adfspart_check_ICS+0x93/0x910 [ 641.559751][T13361] bdev_disk_changed+0x7f8/0xc80 [ 641.565190][T13361] blkdev_get_whole+0x187/0x290 [ 641.570534][T13361] bdev_open+0x2c7/0xe40 [ 641.575271][T13361] blkdev_open+0x34e/0x4f0 [ 641.580177][T13361] do_dentry_open+0x6d8/0x1660 [ 641.585434][T13361] vfs_open+0x82/0x3f0 [ 641.590002][T13361] path_openat+0x208c/0x31a0 [ 641.595083][T13361] do_file_open+0x20e/0x430 [ 641.600075][T13361] do_sys_openat2+0x10d/0x1e0 [ 641.605241][T13361] __x64_sys_openat+0x12d/0x210 [ 641.610581][T13361] do_syscall_64+0x106/0xf80 [ 641.615665][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.622046][T13361] [ 641.622046][T13361] -> #3 (set->srcu){.+.+}-{0:0}: [ 641.629132][T13361] __synchronize_srcu+0xa2/0x300 [ 641.634559][T13361] blk_mq_quiesce_queue+0x149/0x1c0 [ 641.640245][T13361] elevator_switch+0x17b/0x7e0 [ 641.645498][T13361] elevator_change+0x352/0x530 [ 641.650751][T13361] elevator_set_default+0x29e/0x360 [ 641.656440][T13361] blk_register_queue+0x412/0x590 [ 641.661952][T13361] __add_disk+0x73f/0xe40 [ 641.666775][T13361] add_disk_fwnode+0x118/0x5c0 [ 641.672030][T13361] nbd_dev_add+0x77a/0xb10 [ 641.676935][T13361] nbd_init+0x291/0x2b0 [ 641.681584][T13361] do_one_initcall+0x11d/0x760 [ 641.686840][T13361] kernel_init_freeable+0x6e5/0x7a0 [ 641.692529][T13361] kernel_init+0x1f/0x1e0 [ 641.697347][T13361] ret_from_fork+0x754/0xd80 [ 641.702424][T13361] ret_from_fork_asm+0x1a/0x30 [ 641.707678][T13361] [ 641.707678][T13361] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 641.715464][T13361] __mutex_lock+0x1a2/0x1b90 [ 641.720563][T13361] elevator_change+0x1bc/0x530 [ 641.725829][T13361] elevator_set_none+0x92/0xf0 [ 641.731088][T13361] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 641.737393][T13361] nbd_start_device+0x1a6/0xbd0 [ 641.742735][T13361] nbd_genl_connect+0xff2/0x1a40 [ 641.748159][T13361] genl_family_rcv_msg_doit+0x214/0x300 [ 641.754193][T13361] genl_rcv_msg+0x560/0x800 [ 641.759185][T13361] netlink_rcv_skb+0x159/0x420 [ 641.764439][T13361] genl_rcv+0x28/0x40 [ 641.768906][T13361] netlink_unicast+0x5aa/0x870 [ 641.774163][T13361] netlink_sendmsg+0x8b0/0xda0 [ 641.779427][T13361] ____sys_sendmsg+0x9e1/0xb70 [ 641.784677][T13361] ___sys_sendmsg+0x190/0x1e0 [ 641.789843][T13361] __sys_sendmsg+0x170/0x220 [ 641.794923][T13361] do_syscall_64+0x106/0xf80 [ 641.800006][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.806388][T13361] [ 641.806388][T13361] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 641.814953][T13361] blk_alloc_queue+0x610/0x790 [ 641.820213][T13361] blk_mq_alloc_queue+0x174/0x290 [ 641.825728][T13361] __blk_mq_alloc_disk+0x29/0x120 [ 641.831245][T13361] nbd_dev_add+0x492/0xb10 [ 641.836150][T13361] nbd_init+0x291/0x2b0 [ 641.840794][T13361] do_one_initcall+0x11d/0x760 [ 641.846049][T13361] kernel_init_freeable+0x6e5/0x7a0 [ 641.851737][T13361] kernel_init+0x1f/0x1e0 [ 641.856557][T13361] ret_from_fork+0x754/0xd80 [ 641.861637][T13361] ret_from_fork_asm+0x1a/0x30 [ 641.866890][T13361] [ 641.866890][T13361] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 641.874065][T13361] __lock_acquire+0x14b8/0x2630 [ 641.879407][T13361] lock_acquire+0x1cf/0x380 [ 641.884398][T13361] fs_reclaim_acquire+0xc4/0x100 [ 641.889822][T13361] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 641.896121][T13361] __alloc_skb+0x140/0x710 [ 641.901027][T13361] tcp_stream_alloc_skb+0x34/0x660 [ 641.906627][T13361] tcp_connect+0xe8c/0x5630 [ 641.911623][T13361] tcp_v4_connect+0x1603/0x1b40 [ 641.916961][T13361] __inet_stream_connect+0x208/0xfa0 [ 641.922733][T13361] inet_stream_connect+0x57/0xa0 [ 641.928160][T13361] kernel_connect+0x107/0x160 [ 641.933331][T13361] smc_connect+0x394/0x750 [ 641.938238][T13361] __sys_connect_file+0x141/0x1a0 [ 641.943753][T13361] __sys_connect+0x141/0x170 [ 641.948831][T13361] __x64_sys_connect+0x72/0xb0 [ 641.954083][T13361] do_syscall_64+0x106/0xf80 [ 641.959166][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.965546][T13361] [ 641.965546][T13361] other info that might help us debug this: [ 641.965546][T13361] [ 641.975738][T13361] Chain exists of: [ 641.975738][T13361] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 641.975738][T13361] [ 641.988469][T13361] Possible unsafe locking scenario: [ 641.988469][T13361] [ 641.995894][T13361] CPU0 CPU1 [ 642.001224][T13361] ---- ---- [ 642.006555][T13361] lock(k-sk_lock-AF_INET); [ 642.011110][T13361] lock(sk_lock-AF_INET); [ 642.018010][T13361] lock(k-sk_lock-AF_INET); [ 642.025085][T13361] lock(fs_reclaim); [ 642.029034][T13361] [ 642.029034][T13361] *** DEADLOCK *** [ 642.029034][T13361] [ 642.037141][T13361] 2 locks held by syz.3.1751/13361: [ 642.042306][T13361] #0: ffff888026289b60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xd5/0x750 [ 642.051415][T13361] #1: ffff888052ea4220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 642.061380][T13361] [ 642.061380][T13361] stack backtrace: [ 642.067237][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.3.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.067253][T13361] Tainted: [L]=SOFTLOCKUP [ 642.067257][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.067264][T13361] Call Trace: [ 642.067269][T13361] [ 642.067274][T13361] dump_stack_lvl+0x100/0x190 [ 642.067292][T13361] print_circular_bug.cold+0x178/0x1c7 [ 642.067309][T13361] check_noncircular+0x146/0x160 [ 642.067328][T13361] __lock_acquire+0x14b8/0x2630 [ 642.067339][T13361] ? ipv4_dst_check+0x1a8/0x3b0 [ 642.067350][T13361] lock_acquire+0x1cf/0x380 [ 642.067360][T13361] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 642.067377][T13361] ? __lock_acquire+0x4a5/0x2630 [ 642.067387][T13361] fs_reclaim_acquire+0xc4/0x100 [ 642.067398][T13361] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 642.067414][T13361] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 642.067431][T13361] ? __alloc_skb+0x140/0x710 [ 642.067446][T13361] __alloc_skb+0x140/0x710 [ 642.067459][T13361] ? __pfx___alloc_skb+0x10/0x10 [ 642.067474][T13361] tcp_stream_alloc_skb+0x34/0x660 [ 642.067486][T13361] tcp_connect+0xe8c/0x5630 [ 642.067502][T13361] ? __pfx_tcp_connect+0x10/0x10 [ 642.067515][T13361] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 642.067535][T13361] tcp_v4_connect+0x1603/0x1b40 [ 642.067548][T13361] ? __pfx_tcp_v4_connect+0x10/0x10 [ 642.067559][T13361] ? __lock_acquire+0x4a5/0x2630 [ 642.067570][T13361] __inet_stream_connect+0x208/0xfa0 [ 642.067582][T13361] ? __pfx___inet_stream_connect+0x10/0x10 [ 642.067594][T13361] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 642.067608][T13361] ? __local_bh_enable_ip+0x9e/0x120 [ 642.067623][T13361] inet_stream_connect+0x57/0xa0 [ 642.067634][T13361] kernel_connect+0x107/0x160 [ 642.067654][T13361] ? __pfx_kernel_connect+0x10/0x10 [ 642.067673][T13361] ? __local_bh_enable_ip+0x9e/0x120 [ 642.067687][T13361] smc_connect+0x394/0x750 [ 642.067702][T13361] ? __pfx_smc_connect+0x10/0x10 [ 642.067714][T13361] __sys_connect_file+0x141/0x1a0 [ 642.067728][T13361] __sys_connect+0x141/0x170 [ 642.067740][T13361] ? __pfx___sys_connect+0x10/0x10 [ 642.067756][T13361] __x64_sys_connect+0x72/0xb0 [ 642.067769][T13361] ? lockdep_hardirqs_on+0x78/0x100 [ 642.067784][T13361] do_syscall_64+0x106/0xf80 [ 642.067800][T13361] ? clear_bhb_loop+0x40/0x90 [ 642.067812][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.067823][T13361] RIP: 0033:0x7fcf4079c799 [ 642.067832][T13361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.067843][T13361] RSP: 002b:00007fcf416c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 642.067853][T13361] RAX: ffffffffffffffda RBX: 00007fcf40a16090 RCX: 00007fcf4079c799 [ 642.067860][T13361] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000007 [ 642.067866][T13361] RBP: 00007fcf40832c99 R08: 0000000000000000 R09: 0000000000000000 [ 642.067872][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.067878][T13361] R13: 00007fcf40a16128 R14: 00007fcf40a16090 R15: 00007fffd2c34c28 [ 642.067888][T13361] [ 642.484027][T13349] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.499037][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.580961][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.673430][T13351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.688877][T13351] bond8: (slave wireguard6): The slave device specified does not support setting the MAC address [ 642.700889][T13351] bond8: (slave wireguard6): Setting fail_over_mac to active for active-backup mode [ 642.729905][T13351] bond8: (slave wireguard6): making interface the new active one [ 642.738337][T13351] wireguard6: entered promiscuous mode [ 642.748158][T13351] bond8: (slave wireguard6): Enslaving as an active interface with an up link [ 643.632460][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.672541][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.552296][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.712657][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.752281][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.471631][ T6774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.793214][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.591334][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.751333][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.832598][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.872782][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.912604][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog