last executing test programs: 9m22.364392005s ago: executing program 4 (id=5): socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000003c0)={0x7fffffff, 0x3}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000700)=0xdfffffff, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) listen(0xffffffffffffffff, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a62010001020301090224000100000000090400000203"], 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) (async) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0xc0c43, 0x21) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file_nfs\x00', 0x1ff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) 9m22.174412233s ago: executing program 4 (id=13): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x16) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f00000001c0)={@local, @broadcast}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xffffffffffffff1d) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100039123ce0e948b2690420005d3efbdb4f250400d47900", @ANYRES16=r6, @ANYBLOB="01980400c99f05002000128008000100736974001400028006000d00fbff000008000100", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) 9m21.205803149s ago: executing program 4 (id=21): r0 = socket(0x1d, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) uname(&(0x7f0000000100)=""/252) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 9m20.494934704s ago: executing program 4 (id=23): userfaultfd(0x80000) 9m20.268249692s ago: executing program 4 (id=24): r0 = fsmount(0xffffffffffffffff, 0x1, 0xe0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000bdfec38300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x39, 0x0, 0xfffffcd5, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001740), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="4f76554d824ee2e5f37073e97bca190e70441496ff8f9171b592fd7e42f499ccb402", @ANYRES32=r0, @ANYBLOB="000049063c52c6c07133eddf0000400001000000000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r3, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESHEX=r3], 0x0, 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[r2, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x7fffffff, 0x3, 0x4}, 0x0, &(0x7f0000000240)={0x0, 0x9}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x37, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0xc1, 0xd, 0x3, 0xbb, 0x80, 0x6, 0xfe, 0x8, 0x8, 0x6, 0x3a286c0f}, {0xb, 0xa6f2, 0x6, 0x48, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1fd, 0x7, 0xd, 0xfb, 0x25, 0xc, 0x1, 0x6, 0x3, 0x13, 0x0, 0x1, 0x8}], 0x2}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_tables_matches\x00') ptrace$setregset(0x4205, r9, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x7, 0x17, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="000081f21ad1666ba374000014000000b7155c0e386f00008500000083000000bf090000000000005509210000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 9m18.207136592s ago: executing program 4 (id=34): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc, 0x100000}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r3, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x7, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m4.546147097s ago: executing program 1 (id=79): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x20, 0x700, 0xfff, 0xd30, {{0x27, 0x4, 0x1, 0x6, 0x9c, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x9, "ac181e533f33ec"}, @timestamp={0x44, 0x24, 0xb, 0x0, 0x8, [0xd, 0x3, 0xfffffffd, 0xffffcd5f, 0x9, 0x92e, 0x2c5, 0x18000]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "f57ec0b88dc0c530"}]}, @lsrr={0x83, 0x7, 0x30, [@broadcast]}, @noop, @timestamp={0x44, 0x8, 0x7b, 0x0, 0x4, [0xb]}, @rr={0x7, 0x1f, 0xe5, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @local, @private=0xa010101, @multicast2, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x3, [{@broadcast, 0x8001}, {@remote, 0x7f}, {@multicast1, 0x2}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x20, 0x700, 0xfff, 0xd30, {{0x27, 0x4, 0x1, 0x6, 0x9c, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x9, "ac181e533f33ec"}, @timestamp={0x44, 0x24, 0xb, 0x0, 0x8, [0xd, 0x3, 0xfffffffd, 0xffffcd5f, 0x9, 0x92e, 0x2c5, 0x18000]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "f57ec0b88dc0c530"}]}, @lsrr={0x83, 0x7, 0x30, [@broadcast]}, @noop, @timestamp={0x44, 0x8, 0x7b, 0x0, 0x4, [0xb]}, @rr={0x7, 0x1f, 0xe5, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @local, @private=0xa010101, @multicast2, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x3, [{@broadcast, 0x8001}, {@remote, 0x7f}, {@multicast1, 0x2}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="189e5adc33fe000000ce2713d9bbd045ead08b2bf25c310000000000ff80e500020013000000c500fcff000004aa6b"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="189e5adc33fe000000ce2713d9bbd045ead08b2bf25c310000000000ff80e500020013000000c500fcff000004aa6b"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000080)="6cdabf7b", 0x4}], 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000200)) r7 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) (async) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) (async) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000280)={0x2e, 0x5, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000580)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000020603000000000000000000020000061400078008001740000007eb050007006c0000000500050003000001050004000200000005000400010000000e4abfa4670d9ccb6bcdd33867f7b0c4a6d45817f35a5c8412198ccdcb020d3a7ec27dcd96fccbeeb210c97ed47af5271b95c49348680b2e07d7f3f1693f465e3d04822c1a649af69535b528aa3135cde1bf909d837f7aa60c8d0dc648d603e7070d61c724289ae097011338497afe787b3b719f2f2dec"], 0x40}, 0x1, 0x0, 0x0, 0x95e11bfa58c6964c}, 0x40c0) 9m2.780331616s ago: executing program 32 (id=34): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc, 0x100000}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r3, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x7, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m2.294916839s ago: executing program 1 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) (async) userfaultfd(0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) poll(0x0, 0x0, 0x9) close(0xffffffffffffffff) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x242000, 0x8) (async) lseek(r3, 0xc, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r6, 0xb01, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x140) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f000000c000/0x1000)=nil, 0x7000) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x80) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f00000004c0)) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee00, 0x17, 0x1}, 0x4, 0x2, 0x7fffffff, 0x7, 0x0, 0x0, 0xd}) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 9m2.158839914s ago: executing program 1 (id=84): r0 = socket$can_raw(0x1d, 0x3, 0x1) fsopen(&(0x7f00000000c0)='pstore\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x20381, 0x10dd722b6e14c3dd) sendto$inet6(r1, &(0x7f00000001c0)="0a98abe96484c59ad854d0eb273dfc77e40f7537f6872c021d3990e0229bb3b6610b6ec9fdf8ae5f6d2b05da82162b09dde671fc916fcc88ce80459e33501866b18c8d7f660d13906c2674b3087984ac048cab2a31e9171aca4a6412c3ec8f30f31d96a851f18880bd843a6c36cbfe36d4163344e20c07c8e16c8fd53a2d112dc064be2741d0", 0x86, 0x10, &(0x7f0000000280)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c00, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000000)=0x1ff) 9m1.887794301s ago: executing program 1 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r1, &(0x7f00000016c0)={&(0x7f0000000140)={0xa, 0x4e24, 0xffffffff, @private0}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000f80)="dba3ab970de22649ebd3fab1586edf132e43718dc8d8f5f6f3fe598476c228a9117dfe96b00aa925e25d5e5dd02a2a44f360cf9cb03729420d944111f443223167e129144c078ab1842a38ac00cb5069d7b1d6", 0x53}, {&(0x7f0000001100)="bff645b6da45a9185a1a3a30495743ed54ca05c84e7c5696c13e326668db82988fb0741aa08eaa9228b5916be3003a84e0ec12f8df6c587609e0733039cc737be1fe6f22102a820811c1e7c1b2519c39e05c0bb354b22a30945cff6700a5541c190a82e99528bf3a6ab3e5efc3e9b6219a1b742f318e516c2adc11f4b948ccc6c4e16395073d6356c05b1e71fe49d160a6b6b96f866cd0b1c6f6672d1a197020aaaa7bf149890fbb01a9370ac24efb91a447d3fc0b28ff0b6b2a2c855d2a5e8ed184821b4fadd64b978c2ff5e67d67f6065fd54fe63766f90ceb03f2be9eb86916aa95a117b91580b8da906e191774db42f9b637ea0f12f571", 0xf9}, {&(0x7f0000001200)="a8f2bf14ea9fd23adc6548593fb5cf6ebc6f880957612e38f3e313a893c4af2d094f1a34d1dd28a7a007434f41", 0x2d}, {&(0x7f0000001240)="c46166c338e385546f1faec76df9cd7603e9fc7494c702e639977231710edc1435beb8dc5a2f41829d324ea7de8c98f4b0d7199aa32eaaf9487daec3efb6965a769438e1e4924f2be9621d8a39b8e316210ba05257142102abdf3b688e224a6dcc51b4fbb141f24ba3505ee09ccd4a56fbdaef50db1eab35abe4ae8ec44d083d7ef85ea9839fb314cbc79e2750f28dafeaf8f2a5e788d35d016d6b2e1040e4b0640efbfb6e66391ed5174c7704", 0xad}, {&(0x7f0000001300)="604c2518d4733e744287914577381c317909309864f980889ff476d315c43dc89369dafe0dac00e924fda29b494da2b8c4b6d5e55dd673ccec35d3276d6ef941fc84477eff4b6088bc6aa53c52a541adc4ba5ac459b43a870571326e9434dd064a749990064578c7656463d0f9d5dbf68b50f0862518f23b923a62c29b48bfb2f19bb778d39fe51bc8464aa9c218bde14cf3c56e64a8f6f8759f147001221dfe36f92cc79158acefb994f44640cb23c7175c8f803f690d016e035544490153843a3fcd96fa21640376255870a2838ffca8", 0xd1}, {&(0x7f0000001400)="ace6d2ffe8d51443eac3b508e3d21477b40689493c8b0209da36e25199a0198cc15cb704eb52da960a22349ef930d5bfddd2fc405b396d0dd323d5dc1a32accbce8ee2c5e01239583bdf66364bea2adb42dfeaca11afb0787d4dce00168efa7f45e0a80c1123080ec575d2ffe22244a66ae0f1c37ac3806bb39c64dfbe637a4eddd49a46bf2364b1285598004c7c24706eef5552401bf1ea4824a2f71ebe4fdb8abd7c62d6775ad5d0050284e84b64db26f753cea0da93a1776bb77b2279a50fd902d7d9fedbefde6e7246c6306728", 0xcf}, {&(0x7f0000001500)="509700b8ef55ed38cfe1609dbd64ab17ad1c0f675b623f0d4127b013d0234741504798e135c65226168842f21c27c63ba40136c5cd37fc3a773fd4c132b7fe56e01a7d979903fa811e2c9c1bb3f80a033172ab5a153cc1bd4d035c39f271a1e35f62e327ba68b8559000f0ad2c8701d01da091ba1909da1d7ad1b70a8288ea7ac38da98fa1fea5441de42fa993", 0x8d}], 0x7, &(0x7f0000001640)=[@dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0x20, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}}], 0x68}, 0x11) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r2 = socket(0xa, 0x802, 0x1000000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c) io_setup(0x6, &(0x7f0000000d80)=0x0) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0x1030, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @generic="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"]}, 0x1030}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = eventfd2(0x83, 0x80001) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r5, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r5}]) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r6, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000f8fdf993", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r8}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000003}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000590bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff0200001501feff033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x21}, 0x10}, 0x1c) 9m1.462141301s ago: executing program 1 (id=88): r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6, 0x1) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r2 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/117, 0x75) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x1, {0x2}, 0xfd}, 0x18) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) open(0x0, 0x109240, 0x145) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xe) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000180)) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000b80)={{r1}, "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"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686, @ANYRESHEX=r6], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m1.10656668s ago: executing program 1 (id=91): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800200000000000100000001000000005000000040000000000000e0400"/45], 0x0, 0x2d}, 0x28) r0 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x2, r0, 0x8}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket(0x22, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socketpair(0x9, 0x2, 0x3, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000840) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 9m0.965835071s ago: executing program 33 (id=91): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800200000000000100000001000000005000000040000000000000e0400"/45], 0x0, 0x2d}, 0x28) r0 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x2, r0, 0x8}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket(0x22, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socketpair(0x9, 0x2, 0x3, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000840) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 3m6.506348432s ago: executing program 3 (id=1607): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x407, 0x7ff}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xfff80000, 0x1, 0x3e8, 0x2, 0xfffffffd, 0x20, 0x0, 0x0, 0xffffffff, &(0x7f0000000100)=[0x5], 0x1, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="fcffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket(0x10, 0x3, 0x7) getpgrp(0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) shutdown(r4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2048851}, 0x4800) socket$netlink(0x10, 0x3, 0x7) file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x31, 0x1000) syz_emit_vhci(0x0, 0x11) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r5 = socket(0x11, 0x0, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000000)=0x401, 0x4) sendmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="d479013d5c98d1e38100e2f288a8d21f3e72fa6ef88252fbe9dc484ab0db65d595cf4617aef847bef30a30a9eb4499e844b83d99124174c3712eb36e", 0x3c}, {&(0x7f0000002c00)}], 0x2}}], 0x1, 0x24040805) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x18, 0x98, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xc, 0xf7, 0x80, {0x4}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x1029, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xee, 0x45, 0x45, 0x10, 0x19d2, 0xc, 0xa554, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1017, 0x4, 0x2, 0xbd, 0x30, 0x0, "", [{{0x9, 0x4, 0x62, 0x4, 0xc, 0xff, 0xff, 0xff, 0xa, [@uac_as, @generic={0x83, 0x22, "ccbe9e8b63760fe221b9cbd4a60ddfb88f84b122a4e264ef4b1f7cb808318d00929c0c7edd8da1350c6ef1a7125e82afba7de5c3d43fb207785bc202145113e1e169f9eea48c827a0147f23ddcbaaf6d9c45aa66927689e8c45ca2d37382dc38a88e2c9e695e79553bf8f8a901914cf7c56018cd76fdd198568addacc9ed5a4028"}], [{{0x9, 0x5, 0x4, 0x1e, 0x8, 0x81, 0x9, 0x10, [@generic={0xcf, 0xd, "7907b3ee48571ca8bef89e85fa3a5e63811a1272e89f2b937d6c7f34f08bc65307be88749ad786e64833d1a7beb8d37fa4b2c4848594af4904759f4d34fc33679e20dea0aa0fb96f78c8ddb7ed6e2f497eb84be27c65605c9d7a8152080ce16ea6c549367b909b50880527536bd87900ee499595618076c864098c487daa1e5cfb6522723e995ad5df11ae9f5ef1651caa836b2e38b5e95d4d80bbd553b4d4e908772ae79f2b1789be8efeeecfbeb357ec4743eb1f7485b48b246693b34f34daf322bac3fbe6d7fee8beb50b63"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0xdb, 0x6, 0x0, [@generic={0x82, 0x22, "1003d94d4849477281f0fc0772b36cc822f920db552bf97d15dddef0dc9c4f3b133c55018bc59012bda2c8f8d9869eb08b1bb722a846343a30a034a5109b41b43beb617355c3e7e5635fb30a235d5397fa27d1012462a9b2bf70a874008817e64e15bff442239b479a6590260740bcfd7cb2a78e605a3b33f25ceb72772d12d5"}, @generic={0x62, 0x10, "e3e8fd877537ac5e30608213ca86feed3f211eee5c9d9126da4318a0c9e0c9b4280d06dabcde1507c7783f3b82a8fcd8e331e535d58eb4dc1e38c758bb9c3ae132e052bf09d3d3a44f74781f0722c10902f435e95ba3cc9a341945aba154e4ab"}]}}, {{0x9, 0x5, 0x4, 0xe, 0x200, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xc, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x7ff}, @generic={0xe1, 0x6, "eb34845d85e0f96d416b72d88af837551ecb686c0199a8e2732e9e3bdca0acbb7a8fcbd5966ddc9d011b3acc959fef8a895bcf706451d321dec6bb67e3e7b2c57eeb9a49f70a27464c121fada1a1d00719ea70e2b6f5325ccefb9e3a731e5156fbbd6fc78552d11042a8a76c167b35243a9761ea43dea0981f237d2bec3ec7a47c53fe1399c863a843a162349eb9cbc0f71c693ab1f4efe86b2b4e52809e53455709ee0d72b39f808165934bf1e52387945c00b61672d6d37dbf1f57eb74e2f893d3b093018eaf4fbbf1554058bda62bcf96eeddc40865c680fadc798f2e9e"}]}}, {{0x9, 0x5, 0xe, 0x14, 0x200, 0x62, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xaa, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x9, 0x2, 0xf}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x5, 0x1, 0xc6}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x8, 0xff, 0x4, [@generic={0x90, 0x31, "52f47fcf56a3503c214a70ac70f1e85a5a494b8a9c24369218c679fe74e56356e40f87878afdd0ae798a42f8d1c1801e703c71fa3308ed90c26e05dd530fa3c20f7eab633e4e640451e51e17749c4df6c8d9caecfa0167694c8a54a090c2d86747c8feb89c90cdcd27d4d597d8b0a1a8a47ca617a2e4572b9013e4c206bca49ec0c1bb119ac2ab8993e92cb89ee3"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x39, 0x9, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xf3, 0x8, 0x9, [@generic={0xef, 0x1, "2c47eedd3803c0ef228d718593de8ec2c5f6ae45466984f723be29f1a2a51b86f1dc99fe85675796ea14a24d818f8f04c5c6c3ab838bb1bd028dededd0c3ef5ed8be9668ae975745cd7bb3d6dd7d6e02bee14be7de3433bef1bdd78d7ffad2b34a0262de09251699e3fc6b82953ad9e64978f1c8079edba61895bc413b5a250f775aea8f6e87e0cd0d49f9941620fc6b530a63feb0753bc5bb051b0f753cdb57d9de15a9dc56f30bc07e71b59105064b25b266a3fde5409aa4ecf562d91d28757fa500c812c77f8ee78e554404e091e283c4cae625aac2212f767e0721d5642dd8ad4f0d41e239eb0545aaeac3"}, @generic={0xa, 0xd, "d0fe5e7f4935b8e9"}]}}]}}, {{0x9, 0x4, 0xea, 0x3, 0xa, 0xd6, 0x3b, 0x8e, 0x6, [], [{{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x2, 0x7f, 0x80, [@generic={0x2d, 0x21, "fcd213ac1117399791bd67b82798ed44f87c1874dd37857dfff8d6723802e81e624414e3336b5c16bbb4d4"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0xfc, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x57, 0x100}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0x5, 0x9, [@generic={0x6a, 0x23, "f0f3ae196590e7f6ca4269b2ca2035c3a17a0e478d9f2ae611d10765b81b9d7a87cd4f3fc74619635f4c6577129bb40bb1e0a2fba616df6d954d7d50511b8f291ccfdf42db79acda3859e0899d9bb7f7b43eebec3e1d0f56ca0ceed695284a16b9a648566847cdca"}, @generic={0xbf, 0xe, "5cbd31fab0fdb69d46a98baaabce83bb23767c2cb4534c23b1e9621278d9cdb31c1a13c596530ecd992504146650214ce7f35a7fa32d3a68fcd510b260a0daa6989dfa6b6e672c970b4956b8504ee623edaf956220bb01d49d62d620ea1aa16c6e6220fbb2df9002a4672d4aaa1ede7c67490a396b086cb174d2c75868f934b95ab38dd7350e42b81fcfb8494cbf953b4b6338496d22a652faf37ca1655b052ea2cc9ac7ae22d22251ef51e00db4afa44a81471c90873341060d3c5b70"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0xe1, 0x7f}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0xcb, 0xf8, 0x7f, [@generic={0x6f, 0xc, "2971df169714ae7396a8363f5be77988adceed9bf1871f8b22d4fb76ea0b367a33a37a3edfe0a5fa30b7da33e21ea3236dd7339c5f249638a3cddfa7b159cedfc383ade6395aa5737bb6e63bb7d42a36ede8538b64fbf73a264626208874296d8ba7cf9c028f7fa3f3e020f489"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x6, 0x81, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x1, 0x4, [@generic={0xa5, 0x9, "4af1c3dbda56db85a168b6719cb2657e9806a093eaa84b41991dd63bcac07e0854939f8402f5894d9030c717a38636d8e607cb8902df29bbaf80bd75d01515c7a7c76113998064600544cd7b5b72a57a72e53ec1a78d38d9963d11bc90bee64aae3b04a0837acba3c68e16914e4d1fc97dc705fe1f092a1aa3ee6b64af7522c4448f5bbd4115f5d694e4e61cf6f74339e8af12436c5ce676de3d80fa3526757b1e12e6"}, @generic={0x10, 0x11, "7667e4f1551ad3c29793210e201f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x6, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x101}, @generic={0x39, 0xb, "eab70ed2343fc07fbadf9f94bc180d339ccf258e0dfe94cedcfa7601ee39bbad19b196a46cfae2a8b11e0d85f93558edeb73f0dca51f16"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x56, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x706e}, @generic={0x45, 0x9, "204d2f09ab868bea0ce2a6e68180229931c3a786c95acf1c02731574eae9e042f7abbe5c056b79790b6619903c1a5fa701d8c8b729ff59f0938052a7bca55ebbecde79"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x52, 0x7, 0x0, 0x66, 0xa6, 0x10, 0x1}}, {{0x9, 0x4, 0xd2, 0xa3, 0xc, 0x10, 0xe6, 0x7, 0x6, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x6, 0x3, 0xca, 0x3}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x5, 0x2, "096af76da2"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "104759e3f545"}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x8, 0x2, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x81, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0xb0, 0x4, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x4, 0x1, 0x95}]}], [{{0x9, 0x5, 0x9, 0x4, 0x3ff, 0xa5, 0xab, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xa, 0x5, 0xb8}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x66, 0x3, 0x6, [@generic={0xcc, 0x24, "612f6b096c13d8724da16bcf87b308833bde243dba0536543919d77dfdadde6eb2c1a73ad1f7a3727dba2b52165a70468e85aab2f0d6238e4d4ee64c83f54f2d07c2f15b266745e1ac34ce14794b81ac015ccd2e9faefd7633c73a15ce80f1c80cd9c483a99ff2473df849b49c8f1214e9e89de447eaf7edcf55c0bde552d4ccbc8853a9ba1910f11e819f8d4f4e0873dfb8a48d53733ea4c3459043f6de07e22dcb11da1c7492bf6c84f1f4536b9a1beee061908961da456a5aea058e4d4fefd123864c5d483509b99d"}, @generic={0x74, 0xa6f32f632a6bf7b0, "21530e8161e0b2fe6b0bfc09cde9bf4266c863928ac8998115c84c750839737a93666f903b02d6d9906be5a6508fd1e28602bef5127bfd047af83d8abc4f25bec54ab38d32573a3c4edfb8db6368cb4fa7bbecdf6a38bbfd66c519c0b076c3f455e700f11ad3a3fb8e6b07a2a747c9d93400"}]}}, {{0x9, 0x5, 0x3, 0x24, 0x40, 0xe3, 0x8, 0xe2, [@generic={0xe, 0xc, "f657eaae6e1a41d3accfd21b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xd, 0x7, 0x40, [@generic={0xe4, 0x1, "44eba6b0ed4dd9d47939cb7478cf5a076eea62fa5a9f1120093d027cfbd6183bcc4cfeb6eac0501010a7606a8ab20dfa410ef3fd419a863629dd7c639a61aa4df8d87f26cd2cfe43fed007f411f32df94dafc19e0ee1bb74038528887653155893ce28b37bcbd6aec2b0c23b2492a2060e41551f73fc8de366699b94726540ccde3396348c3e5798da9eb3a023965b4a83ddbfb2d8626cbd876716e97aa47918820200e930765b538b8ea0aac6392f761955fc27ee4133e608b6ec3f56aebe02e99ebebe9bd0e9d9a90e400726130f06c00c41d73379caf16eac15abe530b0f0486e"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x2, 0x8, 0xd}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0x5, 0x7}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1, 0x3, 0x78, [@generic={0x54, 0x0, "a834ac88905dfb7020532ac47c50bb085da63a91eeb78609faf70f1d1a4499b37e771feda01b5bbafcc21c058ce602cee1ad005e221c77a34dee5cfa20f9f844de30106271a66e29401de0f1e7cb7c4671d1"}, @generic={0x93, 0x1c, "f8e5f92553f6d32c18a219c05334e4fe285290bb13fd5d1180a01ba8cbb428b3a3114b4dad077e9a96e8437a92fd9dbac4022789ea78a5c6897878c3247ad42081bdb79a27ceb1f15fc7e84ee0be1bf8eb168be78eddc781d8eebeac18691b4482c0475bc836fc6452a870b2b9c620d810d6bdcb297d54c952ea3ce9b304d07a4ad6339fc32d02bb60958cb381ac208e6a"}]}}, {{0x9, 0x5, 0xaa3835947ab46ba3, 0x0, 0x8, 0x9, 0x9, 0x0, [@generic={0xed, 0x2, "9e3173ccdeba8adeb4b399ea26379fa4d4e2ce7149e98fbc680e85e5094f9b75fbcc1dcb5a0709e2d9e61d794c5cd90638f45eff045a8b83aa52d9711f556ee709af7746bd6d4b65ddf1bec924470fcdacf312a2ef03613b6f679ef9d35897f4dbe1c7f95955a0196cd5acc8b327dcce5c91c1bf0ed4bcc5ae4ad1c26908c38548da906ee7362a5ba9bb5fdcd051f98e66e0835244792a9c0f1e6efdb1e034951a07e456180849418cc8f9411ef9d4460242e269562182b5f7db8e827041a9ae888faf3eb35092ff1f70bbb0bf97cf728db40327620a591150f9bac5ddbb2209ad6ab49cafd10c7bbc6372"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x7, 0x0, 0x2, [@generic={0xc4, 0x22, "42f083c4abb8827b221b820173ac04bf162bea2f5dad809817c9c6cbe72bdefe61017d51df085cda3bc30e2853c3842c50b8dcce18c7a4022fbd349c15b9e7868c9aefb352f19dfecc863f576efa1ad60aeacf9f7f1c4beebce007cc00a3de5b33331077ecc565bb8156b2b271cc7b0727c4d1d1ee5d0a0080bf6df56441bb4305f597d95ae910db116ebb210995c0acf76a7089905900a0f3eaf73d2b80ac044226828df65b8f0d49d59b940c921c0e7575c1be585d065ac9b0da821d35cacdda46"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x1, 0xf8, 0x9, [@generic={0xbe, 0x6, "d4c66fdccbfe3c862aae5acd1f5141ad69187a8da8dafe42623037c78dc60918fdbaf37ae367e422d68711411a57882859ebef107c28b9f64decdd075c6e52875880a2fb96154c194cf105243fcd90db3664ae1e0e6859d49022305517942267c4d6d7747a4af3166b8b77527c4f7b89a2f8809b3cab79eea11890638b442c6fd49e7ee16facf08321a965cbe0b4165d8d8cb53bb10a34660fd58edf4288601f463fe5211bc0afc8a6bceb76516e6e4be907d5d1ecfdf580fff73ec8"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x4100}]}}, {{0x9, 0x5, 0x15, 0x1, 0x10, 0x1, 0xf8, 0x4, [@generic={0x93, 0x9, "eac4a4e330962b7efc06f7245594a1e0ce917c6823d057dd73d99167ae0d92a56bbe3f15df14369755f7eef8f12aa02db4f6ead2a2b9711cc16a23031340c305f46168668d3aae236a8ed0710cfaa55b8b53a1476ce556701e9e7bbda96fc0976436d781bd14a0e11d319a3084dbd604ce35142dc00d972184580d9214b9e252b65651de51f8da8101dd76786e8717f5db"}, @generic={0x5e, 0xd, "22e49f6a242037624d526c4f0610df7d523a7d9074be7ecfa8b54d7330bec65c3010d7a0b795a660cad185a17ec2d5cc3b8c6d53a73271c3b9d019bdb0995dad2f3a61180d393eb84d7fa9be1794d4199ea02640f0d14e4e06cf4d26"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x110, 0x5d, 0x3, 0x3, 0x10}, 0xdf, &(0x7f0000001140)={0x5, 0xf, 0xdf, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x5, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x2, 0x218}, @ptm_cap={0x3}, @generic={0xbf, 0x10, 0x3, "87182e262c1a6fc50b9872e70c0dcb5cfc1d45bdc78b9b67c0f2b5ea40f393d1add906aae3ca917d052f6fbc73f5fc3883e1635589e0e8fc3830b8b616265ba11be347866abffd8bbb93522196efd3e73dd7b53706963ad77a03ee0b420df9dc194d0f4377437109e7065cf5c0c3d44ffefc89914e173e1cdc2ae43ab69f0a980296064ba34910caa8d48d4fc55f2d918f306c6d4ed3676022035a144e2d4c8cfc58ff7ed40d37920e476051ba31d8d800b2e1c74279bdbc5b0004af"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x4, 0x8000}]}, 0x2, [{0x6d, &(0x7f0000001240)=@string={0x6d, 0x3, "0889316c9b7c058d79bcf6da920b02fded18a6050f8cd7ef5abb48ce9998bd86d51e209fde514bc5d67989d9a499672c65bd81125ebefdc31314c003b52e9fd7b7da89f6bf6ad33278ef3554fb373b14b5ce4e5962ee122a1417ff489e80efc7b9c6a77f64b9e29f784e7a"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x438}}]}) 3m3.838922208s ago: executing program 3 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32=0x1, @ANYBLOB="66e70002000000000900000000000000000000007590c91904c951fb98dc7869982edca3d115b15d2192350f7630c4da3f37eff80dbe5b755760c1dcceab852bba17ac47256b3e5c5083a1b94cc946f8d94b050000eac4a958db3b6e7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000"/28], 0x50) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rxrpc(0x21, 0x2, 0x2) listen(r1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000500)="69a6cef1c74e12d5a31d516946fa2dd09311508e7448f3643349", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a120001010200010902200001010080320904000002000000000705810240000007050202"], 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000012c0)=@newchain={0x5c8, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0x6}, {0xb, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x594, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x1a}}, @TCA_BPF_POLICE={0x524, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0xe, 0x2, 0x0, {0x75, 0x0, 0x0, 0xf3d2, 0x800, 0x6}, {0x8, 0x0, 0x8, 0xa, 0x4, 0x3}, 0x3, 0xf2, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x1, 0xbd, 0xa, 0x1, {0x1, 0x0, 0x9, 0x8, 0x1, 0x1}, {0xc, 0x2, 0x6, 0x744, 0x7, 0x4}, 0x1, 0x8, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6, 0x7, 0x8, {0x1, 0x2, 0x100, 0x0, 0x7, 0x1}, {0x5, 0x0, 0xfe, 0xfff, 0xb78, 0x9}, 0x1, 0x7, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x516, 0x7, 0x8001, 0x3, 0x1, {0x10, 0x0, 0x5, 0x8, 0x4, 0x80000000}, {0x9, 0x1, 0x101, 0xa, 0x101, 0xd}, 0xe, 0x9, 0x8001}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x3ff, 0x6, 0x4, 0x4, 0x6, 0x5, 0x0, 0x1, 0x8, 0x8, 0x7, 0x9, 0xffffffff, 0x7, 0x7, 0xdd, 0xfffffffc, 0x5, 0xc1fe, 0x3, 0x8, 0x6, 0x200, 0x3, 0x6, 0x9, 0x1, 0x1, 0x8, 0x1, 0x6, 0xd4, 0x40, 0x2, 0xfff, 0x9, 0x10000, 0x1, 0x18, 0x8, 0x9, 0x7, 0x5, 0x6, 0xfceb, 0x7, 0x340, 0xd, 0x790, 0x10, 0x22c, 0x7fffffff, 0x4, 0x0, 0xd, 0x800000, 0x6, 0x7, 0xf9f, 0x5, 0x0, 0x0, 0x7, 0x2d, 0xfff, 0x10, 0x7, 0x5, 0x4, 0x7, 0x1ff, 0x2, 0x7, 0x5, 0x5, 0x0, 0x6, 0xa, 0x65e5f48e, 0x13b3, 0x3, 0x9, 0x460fd270, 0x3, 0x5, 0x3, 0x7, 0xfffffff7, 0x1, 0x0, 0x73, 0x7, 0xcba0, 0x3, 0x7, 0x9, 0xffffffff, 0x3f, 0x0, 0xffffff32, 0x855b, 0xffff, 0x7, 0xfffffff7, 0x2, 0x0, 0x40, 0xfffffffa, 0xfffffffa, 0x6, 0x4, 0xb8, 0x7, 0x3, 0xffff, 0xe, 0x6, 0x4, 0xc881, 0x1, 0x62e, 0x81, 0x80000000, 0x5, 0xb, 0x120, 0x4, 0x6, 0xfff, 0x4, 0x1, 0x900, 0x5, 0xe, 0x0, 0x8, 0x9, 0xb, 0xac02, 0x0, 0x8, 0xa, 0x80000001, 0x8, 0x81, 0x5, 0x7, 0x8, 0x4, 0x7, 0xfc34, 0x7, 0x0, 0x0, 0x7, 0x0, 0xfffffff7, 0x9, 0x0, 0x2, 0x6, 0x8001, 0x0, 0x401, 0xffffffff, 0x9a55, 0x4, 0x0, 0x7, 0x9, 0x7, 0x4, 0x0, 0xe0a6, 0x57, 0x7, 0x5, 0x9, 0x2, 0x5, 0x0, 0x7f, 0x3, 0x8, 0xfffffffb, 0x9, 0x1d63, 0xcbb4, 0x8c1e, 0x1, 0xd615, 0x3, 0x7, 0x400, 0x91, 0x379, 0x0, 0x8, 0x8, 0x7, 0xffffffff, 0x8, 0x7, 0xffff65c6, 0x3, 0x801, 0x79, 0xffff0c21, 0x1, 0x8, 0x200, 0x2, 0x1, 0x1000, 0x3, 0x4, 0x3, 0xa61, 0x0, 0x2, 0x9, 0x3, 0x4, 0x8, 0x9, 0x5, 0xb63, 0x6, 0x9, 0x8f, 0x4c, 0xd102, 0x7f, 0x9, 0x8, 0x10, 0x6410ccd3, 0x400, 0x523, 0x9, 0x80000001, 0x0, 0x1, 0x9, 0x809, 0xfffffff8, 0x1c000000, 0x4, 0x50, 0x1, 0x4, 0x4, 0x3, 0x1, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_BPF_NAME={0xa, 0x7, './dev\x00'}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x2c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x38, 0x1, 0xb, 0x6}, {0xd1db, 0x8b, 0x3, 0xa}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x81}, 0x90) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x4, 0x80, 0x6) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0xfffffffffffffffd, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) (async) recvmmsg(r6, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r6], 0x48}}, 0x2404c054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xd, 0x0, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffd17, &(0x7f0000000540)=0x2) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3m3.681706542s ago: executing program 3 (id=1615): syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0x400) mount$overlay(0x0, 0x0, 0x0, 0x1063010, &(0x7f00000001c0)={[], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}], 0x2f}) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c000180060006008035"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x3, @multicast2}, 0x22) r5 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x5, 0x200000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x7fff) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xac, 0x0, 0x1, 0xfffffffc}, {0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)='!', 0x1}], 0x1}}], 0x2, 0x20040055) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xfffc}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) syz_usb_connect$lan78xx(0x6, 0x6c, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2m59.536074185s ago: executing program 3 (id=1628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000ae1000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0x8, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m58.883325145s ago: executing program 3 (id=1631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8041, 0x0) linkat(r7, &(0x7f0000000280)='./file0\x00', r8, &(0x7f0000000380)='./file0\x00', 0x1000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x8000000005f, 0x3}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8044) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 2m57.846732884s ago: executing program 3 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) r3 = io_uring_setup(0x6617, &(0x7f00000000c0)={0x0, 0xc241, 0x80, 0x3, 0x3e2}) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001b95e0ff0000000095000022100000ef"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0xff, 0x5}]}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x71}, @alu={0x7, 0x0, 0x9, 0x1, 0xa, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x24}], &(0x7f0000000100)='GPL\x00', 0x5, 0x83, &(0x7f0000000380)=""/131, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r2, r0, r2, r2, r2, r0, r0, r2, r2], &(0x7f0000000480)=[{0x0, 0x3, 0xb, 0xb}, {0x0, 0x5, 0x3, 0x8}, {0x4, 0x1, 0xf, 0x2}, {0x3, 0x3, 0x2, 0x2}, {0x0, 0x1, 0x5}, {0x3, 0x4, 0x6, 0x9}, {0x2, 0x5, 0xd, 0x7}], 0x10, 0x2800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe29, 0x0, 0x0}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) ioctl$BLKRASET(r6, 0x1262, &(0x7f0000000100)=0x100) dup(r6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000880), 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xa8, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2d, 0x2, 0xfffffffc) 2m42.52916011s ago: executing program 34 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) r3 = io_uring_setup(0x6617, &(0x7f00000000c0)={0x0, 0xc241, 0x80, 0x3, 0x3e2}) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001b95e0ff0000000095000022100000ef"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0xff, 0x5}]}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x71}, @alu={0x7, 0x0, 0x9, 0x1, 0xa, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x24}], &(0x7f0000000100)='GPL\x00', 0x5, 0x83, &(0x7f0000000380)=""/131, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r2, r0, r2, r2, r2, r0, r0, r2, r2], &(0x7f0000000480)=[{0x0, 0x3, 0xb, 0xb}, {0x0, 0x5, 0x3, 0x8}, {0x4, 0x1, 0xf, 0x2}, {0x3, 0x3, 0x2, 0x2}, {0x0, 0x1, 0x5}, {0x3, 0x4, 0x6, 0x9}, {0x2, 0x5, 0xd, 0x7}], 0x10, 0x2800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe29, 0x0, 0x0}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) ioctl$BLKRASET(r6, 0x1262, &(0x7f0000000100)=0x100) dup(r6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000880), 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xa8, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2d, 0x2, 0xfffffffc) 2m38.334755983s ago: executing program 0 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, &(0x7f0000003740)) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x9}, 0xc) sendmmsg$inet_sctp(r6, &(0x7f0000003b40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x8040}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x0, 0x8, 0x8, r8}}], 0x40, 0x48041}, {&(0x7f0000003800)=@in6={0xa, 0x4e22, 0x1, @local, 0xb7}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000003840)="78c3ae84077b6f174a19a65d10e4197f51489013d3e297ff5604989ece20c9cc23ec2e0f04f66d6c7cd524588911a508e97f992a609b8445538ec6", 0x3b}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="54799cc5479231e2d6ee2000000000000000777c438400000000001d00"/42], 0x20}], 0x3, 0x20000004) (async) sendmmsg$inet_sctp(r6, &(0x7f0000003b40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x8040}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x0, 0x8, 0x8, r8}}], 0x40, 0x48041}, {&(0x7f0000003800)=@in6={0xa, 0x4e22, 0x1, @local, 0xb7}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000003840)="78c3ae84077b6f174a19a65d10e4197f51489013d3e297ff5604989ece20c9cc23ec2e0f04f66d6c7cd524588911a508e97f992a609b8445538ec6", 0x3b}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="54799cc5479231e2d6ee2000000000000000777c438400000000001d00"/42], 0x20}], 0x3, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x5, 0xe4, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) (async) syz_usb_connect(0x5, 0xe4, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 2m35.806923159s ago: executing program 0 (id=1705): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$video4linux(&(0x7f0000002300), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0205648, &(0x7f0000000500)={0xf010000, 0x0, {0x100, 0x0, 0x3005, 0x0, 0x0, 0x3}}) (async) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x200000c2) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x26, 0x20, 0x70bd2d, 0x25dfdbfc, {0x18}, [@generic="2e14b478652bcdf8fe1edee33634c96f8931eeba81256f2c1424bc36f6d0220e2abdf9b3bfd70a5e477346d6addcad5c2a8281dfabf10648577134ec47c1"]}, 0x54}, 0x1, 0x0, 0x0, 0x24000815}, 0x84) 2m34.659764788s ago: executing program 0 (id=1710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)=""/33, 0x21}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) times(0xfffffffffffffffc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$netlink(0x10, 0x3, 0x6) mmap(&(0x7f000031b000/0x3000)=nil, 0x3000, 0x2000007, 0x48013, r1, 0x72b98000) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, &(0x7f0000000040)=""/43, 0x2b, &(0x7f00000001c0)={&(0x7f0000000080)={'ghash-ce\x00'}, &(0x7f00000000c0)="c6111edb212f0c0bd96cb05e8773cade9ac2d2091dcc1870c8fd7558807b68b2cca134e1d06db296bf1e62d416fa2b4a2d383d23a4a9bccce2ba09044bc0", 0x3e}) 2m29.638573723s ago: executing program 0 (id=1716): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000080c20000000800100000000000000000119078000000dcffffffff44140901ffffffff000000000a0101020000000000004e20001090780200000000000000"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, r4, 0xf4}, 0xc) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socket(0x9, 0x80000, 0x40) (async, rerun: 32) r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x1c}, 0x28) (async, rerun: 64) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r14 = getpid() sched_setscheduler(r14, 0x2, &(0x7f0000000200)=0x6) 2m27.300449021s ago: executing program 0 (id=1723): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 2m26.792027323s ago: executing program 0 (id=1726): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") shmctl$IPC_RMID(0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$int_in(r3, 0x5452, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) syz_open_procfs(0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='dummy_hcd.0', 0xb) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r8, &(0x7f0000000300)=""/214, 0xd6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r10, 0x0, 0xea, 0x2) 2m11.705056042s ago: executing program 35 (id=1726): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") shmctl$IPC_RMID(0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$int_in(r3, 0x5452, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) syz_open_procfs(0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='dummy_hcd.0', 0xb) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r8, &(0x7f0000000300)=""/214, 0xd6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r10, 0x0, 0xea, 0x2) 1m16.352681444s ago: executing program 5 (id=1976): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c880}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f00000003c0)="c1ed0ba11f70ab046cef29c8f7842b5a2c8da7b8036ab931e3959a8d09c0771412ef0e0ee7a515f786199f81153a9ed3ba212868254cb5e45b40486ce8848bd90cc2a0427bf0ad44c6ca59bffca5438535b04dca517985ee6f71890df13c9afb0b6574ede767b267d244b87a8c99ca0c114056bb4ce05e59af808384c83f3ce8", &(0x7f0000000480)=""/85}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m16.214759616s ago: executing program 5 (id=1978): syz_usb_connect$uac2(0x6, 0xa3, &(0x7f0000000b40)=ANY=[@ANYBLOB="12011001000000101e044030400001020312989901090291000301fcd007080b0002010620060904000000010120000924010a00052100fc0c240303020406010c0d00090c24030204048b0408020000090401000001022000090401010101022000102401040703000000000904000000ca09050109000207022e0825018000ab060009040200000102200009040201010102200009058209ff03b07ef70825010100010010"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000040000100fcff070004000000010000000800cb80040008801400018004001080093494c3d097266f1467c4a6ed0fcd001e002af87b5c0000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) r3 = socket(0x27, 0x800, 0x8) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x104) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x100000dd, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) getsockname$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) 1m14.095204439s ago: executing program 5 (id=1995): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xf8, 0xd1, 0x81, 0x8, 0x2c42, 0x16f8, 0x5d24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x75, 0xfc, 0x0, 0x5, "", [{{0x9, 0x4, 0xa3, 0xa2, 0x0, 0x6, 0xcc, 0xf6, 0xc}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc33}}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x45, @string={0x45, 0x3, "ab3964274bc44683f8ef54ee32cb73b70877c1ebec831928a40766c25d0016791499773e139077cf0c3749b4f1bcb1800373c4d3cbad9870ec29b36fc866c6e099f2d1"}}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r1, &(0x7f000000e2c0)=[{0x0, 0x1e}, {&(0x7f000000bf80)=""/147, 0x93}], 0x2, 0x2, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m11.910082844s ago: executing program 5 (id=2005): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, &(0x7f0000000380)}) close_range(r0, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x88ea, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x32b}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r11, &(0x7f0000000100)=ANY=[], 0x408100) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) getpid() ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) 1m10.966403971s ago: executing program 5 (id=2009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0), 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="0d5a7f1108000000000020000000", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.474937736s ago: executing program 5 (id=2014): get_mempolicy(0x0, &(0x7f0000000100), 0x7811, &(0x7f00001df000/0x4000)=nil, 0x2) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050b020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003240307058402000200032404", @ANYRES8=0x0], 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xffff, 0x5, 0x4, 0x4, "518f0b", 0xffffffff, [0x4, 0x5, 0x3ff, 0x1, 0xadd1]}}) 53.375201435s ago: executing program 36 (id=2014): get_mempolicy(0x0, &(0x7f0000000100), 0x7811, &(0x7f00001df000/0x4000)=nil, 0x2) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050b020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003240307058402000200032404", @ANYRES8=0x0], 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xffff, 0x5, 0x4, 0x4, "518f0b", 0xffffffff, [0x4, 0x5, 0x3ff, 0x1, 0xadd1]}}) 31.054740112s ago: executing program 9 (id=2069): syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$loop(0x0, 0x5, 0x88102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x2, 0x79, 0xfffffff8, 0x5, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffd, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 26.508254947s ago: executing program 9 (id=2069): syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$loop(0x0, 0x5, 0x88102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x2, 0x79, 0xfffffff8, 0x5, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffd, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 21.020667649s ago: executing program 9 (id=2069): syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$loop(0x0, 0x5, 0x88102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x2, 0x79, 0xfffffff8, 0x5, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffd, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 14.289943822s ago: executing program 9 (id=2069): syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$loop(0x0, 0x5, 0x88102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x2, 0x79, 0xfffffff8, 0x5, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffd, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 7.733754864s ago: executing program 7 (id=2246): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = accept$inet6(r0, 0x0, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/dev\x00') dup2(r2, r0) 7.726277946s ago: executing program 9 (id=2069): syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$loop(0x0, 0x5, 0x88102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x2, 0x79, 0xfffffff8, 0x5, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffd, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 6.727494222s ago: executing program 7 (id=2248): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0,', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/198, 0xc6}], 0x1000000000000239, 0x8, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x2a6, "fdf6b55855c8989504fe6c39a27697e9ca12cdbe4fa1044aec7cfec89ad0374dce240ba0246ed6389c679339a444e4075b1e95131b73d4364862d915b85416adfe43cb0620d9edeef9cfd330a2569a748c7c1a8162a21c31a639258d64edfc81d2243208e79aaf9de57f9b39872ba159069a0af0916fa628fac1ecca86cb1f8f0f404010508058075c06005ad2d6c26ad4c6d511197859b7d9f6340d81d2000000000200000000000000bd8d23dde47f1ec9e4a35678407ebc93bcaa081abc614554f5043c39bafc6729917e57669d8367a260c4d988282034ccba30b3d54e701e99be1787e8dacd08aef1a769aaf47dd243dd3c54a89e138c2041db320fa2cfbf09c11e2f401106671e8facefc1cbae60b7957f01edf8cb0500f9f4bd6a944a968a34f703ffe3216de200925fe956f72e56f7bfa176dbfdf6e2c21c4cba00c80fe72f48df000000000000efd55f185473f917b407818ca44b36f39094c7ea1f602f72c7269a90c41a86860083d01c487db991a9ad7b6b3ab7fcfb8349ceff0c23dd166cc2f0621aa2dbda25efb33a96c568564bd2ad0dae96074379752c9e1fff5f5df775786022de49fffd9b65512521f320d36fb4129123b602d4ccf0a44df16cd2c981901ff853e723328f880f2fd53afc528e7668b6e6793aabdee0ad2efd20ec0040f5ad2ba5b7fccad377b0717d9e54a8552641904546f55c59437d3efc60936ef74671ecb880adccf037f599d7c2de85e94996c1b581c69453cfc73b4cb24579822500363522b2912f8609211be36486f4ee8a6674c12fe86e117ce258118264682f52e59f75b9433841a671803504c0b5b9aea8b79206b186e48a7a1462c40651f8cb3b64a5660b4085bd1d31eece852951c0e26d4f9552b0e514fb1f13e05d898e091102ccd83ad111cfd245b3a3c5e134f78ec57aca594eaf5dacf0b1e37302c8"}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x40, 0x2000, 0x41018}, 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xbf925000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f00000002c0)={0xa, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]}) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r9, 0xfffffffffffffff4, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r11, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@init={0x18, 0x84, 0x0, {0x1, 0x4a, 0x5, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x4855}, 0x24004016) tee(r10, r5, 0xffffffffffffff42, 0x5) syz_usb_connect$uac1(0x0, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x2, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 6.549757126s ago: executing program 6 (id=2249): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$sysctl(r0, &(0x7f00000004c0)='6\x00', 0x2) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setpriority(0x2, 0xffffffffffffffff, 0x7fff) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYBLOB="cda087bfdce897146632bc5cd6050ca4338e6e4d63c9d08aa666b72057020bad4cf83a86439db6fcb99de5301682589c92babcc31ff0c71d328e59c192e9b63ecb659cb1d1122d67c49e82e9e35d9d", @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYRES64=r0], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010010000000ffd7df25037c00000900018031546afc70000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa, 0xfffffdff, &(0x7f0000000100)="c1dfb061cdee7a1f3fc8", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x700, 0x0, 0x24040844}, 0xc010) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x169901, 0x0) (async) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/108, 0x6c) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000000c0)=0x839352b8218490eb) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYBLOB="d046cbbd3df53da0b1aa999e98d0c9b6640d01d197f07d4eec7e6bad"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @tracing=0x18}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 5.961662993s ago: executing program 6 (id=2250): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = signalfd4(r0, &(0x7f0000000400)={[0x3]}, 0x8, 0x800) ppoll(&(0x7f0000000200)=[{r1, 0x80cb}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002480), 0x20503, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x7b9, 0x0) r3 = signalfd(r0, &(0x7f0000000080)={[0x403]}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x8001, 0x4) r4 = accept4$tipc(r1, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240)=0x1, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000480}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x487d}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24028800}, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close_range(r6, r6, 0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$RTC_PIE_ON(r6, 0x80004509) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x4, 0x4) 5.173528917s ago: executing program 2 (id=2254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x28202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x1, 0xfff, "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", 0x3, 0x4, 0x9, 0x75, 0x9, 0x7, 0x7, 0x1}, r3}}, 0x128) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0x400, 0x70bd2b, 0x1, {0x2, 0x0, 0x0, 0x0, {0x8, 0xb}, {0x9, 0xc}, {0xb, 0xa}}}, 0x24}}, 0x28008080) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x7ffb, 0xffe, 0xfff, 0x1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x5}, &(0x7f0000000140)=0x8) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={r7, 0x10, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x4, @remote, 0x20000005}]}, &(0x7f0000000180)=0xe) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={r9, 0x80000001}, &(0x7f0000001380)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8}, 0x94) r10 = socket(0x2, 0x80809, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x8970, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) close(r1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="34000000000801020000000000000000000000070900010073797a31000000000500030006000000040004800600000000080000ac45db6f3a25fcc3ce287e9e0e877805704d7e3222db8fbb7b9ee9dda00950d9b64bfac73b660290fbae061e2879387a4fbb8151f0d9b71b8d4c9cac730ec94ef7f4a0a4e941d9e6b724dad0c9a6024323c8d2670201c32d571c2830108ee9fbe01582ca317433866149aaab2927a5f451a0b749351880ece255fb04d447bc3eaa6659289c18799ab1cc39"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r2, 0x6405, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @multicast2}}}, 0x118) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) r12 = syz_ublk_setup_io_uring(0x4dd, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r13 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x8, 0x5cbfc0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r13, 0x40044160, 0x3) io_uring_enter(r12, 0x6a2d, 0x391c, 0x0, &(0x7f0000000140)={[0x3]}, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000040)=0x2a14, 0x4) 5.010738168s ago: executing program 6 (id=2255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) (async) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) rseq(0x0, 0x0, 0x10000, 0x0) (async) rseq(0x0, 0x0, 0x10000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200ffffff8d"}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001800)={&(0x7f0000000800)=""/4096, 0x1000, 0xe7, 0x7ff}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.965081466s ago: executing program 6 (id=2256): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x28, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.110786999s ago: executing program 2 (id=2257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) madvise(&(0x7f00007fd000/0x4000)=nil, 0x4000, 0x11) 4.013586061s ago: executing program 8 (id=2258): syz_usb_connect(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000001000010000000000000000000100000a38000000080a03000000000000000000020008070900010073797a31000000000c00034000000000000000050900010073799d301e0000001400000002000000000000000000000005000f0a"], 0x60}}, 0x4800) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_getoverrun(0x0) (async) syz_open_dev$vim2m(0x0, 0x3, 0x2) (async) close(0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) (async) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x0, 0xffffffff, [0x43a, 0xce0, 0x340, 0x6ea]}) 3.711857674s ago: executing program 6 (id=2259): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002940), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000002980)={0x80000000, 0x283, "3d48e60fbf606145aff599bc87eebe6319fb60f42503f7080f160de1d898faaf", 0x2, 0x5a29, 0x9, 0xc0000, 0x3, 0x4, 0x9, 0x0, [0xe, 0x9, 0x8, 0x8]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000340)={'lo\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0xeb4, @local, 0x4a00000}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.559241512s ago: executing program 7 (id=2260): getpid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="352a8e", 0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x10, 0x700, 0x7, 0x401, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x65, 0x0, 0x9, 0x2d, 0x0, @remote, @loopback, {[@rr={0x7, 0x13, 0x76, [@broadcast, @private=0xa010100, @remote, @remote]}, @cipso={0x86, 0x13, 0x0, [{0x2, 0xd, "c7e46990b146ba109046bb"}]}, @rr={0x7, 0x3, 0x6e}, @generic={0x83, 0xc, "9f760fb519b87cd7f129"}, @ssrr={0x89, 0xb, 0x98, [@multicast1, @multicast1]}, @end]}}}}}) sendto$packet(r1, &(0x7f0000000000)="59320007a5522ce4671e0ff5c0694fd5cf7ee3c0b15e18bb07baeaa1dde68994e12b7b44", 0x24, 0x4000015, &(0x7f00000002c0)={0x11, 0x11, r2, 0x1, 0x17, 0x6, @broadcast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x300}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0xa8, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x2}]}}}, @IFLA_VF_PORTS={0x64, 0x18, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "12de9c4dd28afa0c35124e46a6c5c139"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x8, 0x2, ':#.\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e2f7e7dbbabefa150cd94b2ad500a5eb"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40800}}], 0x2, 0xc1) write(r6, &(0x7f0000000200)='127.0.0.1', 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x20200, 0x0) close(r6) 3.474009484s ago: executing program 2 (id=2261): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x15, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}}) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="e2d3", @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250100000008000100706369001100026c5a3a88bf8fe52441ea9a41c49f00303030e93a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d303d12fe145627d650b116972aff1e69e400000e0001e46e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d30"], 0xac}}, 0x4) 2.238686918s ago: executing program 2 (id=2262): syz_open_procfs(0x0, &(0x7f00000190c0)='net/route\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x4a202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x10000100000000, 0xc89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(0xffffffffffffffff, &(0x7f0000000840), 0x11) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000000000000000000001c00018006000100ac1414aa08000600"/39], 0x30}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.226534699s ago: executing program 8 (id=2263): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000b00000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1, 0x4}, 0x28) 2.146242644s ago: executing program 8 (id=2264): socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) (async) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 1.874312236s ago: executing program 8 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3100000058001f000307f5f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b440", 0x32) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r9, &(0x7f0000000cc0)=[{&(0x7f00000006c0)='7', 0x1}], 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.709276331s ago: executing program 7 (id=2266): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x50) io_uring_enter(r0, 0x202219, 0x7721, 0x19, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1.625062415s ago: executing program 7 (id=2267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, {0x0, 0x0, 0x400000000, 0xcd6}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_emit_ethernet(0x0, 0x0, &(0x7f00000004c0)={0x1, 0x3, [0xa72, 0x49d, 0xbb9, 0x4fe]}) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.566934382s ago: executing program 8 (id=2268): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(0xffffffffffffffff, r2, 0x0) unlink(&(0x7f0000000e80)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r5, 0xc76ed000) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "97f1dbb0754d3212", "6035e6a80e75ea966a878a24b3d4171a779dfe38ba1b0844f32c5f9d5bec8960", "d79a6843", "5b8673c85d4bc0e8"}, 0x38) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, 0x0}) 970.965295ms ago: executing program 6 (id=2269): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002940), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000002980)={0x80000000, 0x283, "3d48e60fbf606145aff599bc87eebe6319fb60f42503f7080f160de1d898faaf", 0x2, 0x5a29, 0x9, 0xc0000, 0x3, 0x4, 0x9, 0x0, [0xe, 0x9, 0x8, 0x8]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000340)={'lo\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0xeb4, @local, 0x4a00000}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 454.908611ms ago: executing program 2 (id=2270): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x2d, 0x3, 0x2040844, 0x2, 0x1005, 0x80, 0x200, 0x0, 0x0, 0x80, 0x6b}}, 0xffffff4a) (async) syz_emit_vhci(0x0, 0x14) (async) r4 = socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) (async) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) (async) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4c21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000000}, 0x1c) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002880)={0x6, 0x10, &(0x7f0000002640)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f00000026c0)='syzkaller\x00', 0x9b0, 0x0, &(0x7f0000002700), 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002780)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000027c0)={0x3, 0xd, 0x59cd, 0xc7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002800)=[r8, r8], &(0x7f0000002840)=[{0x1, 0x2, 0x3, 0x3}, {0x5, 0x4, 0x0, 0x7}, {0x1, 0x1, 0xe, 0x4}, {0x5, 0x5, 0x10, 0x8}], 0x10, 0xe}, 0x94) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000180)={{r1}, 0x100000001, 0xfc6, 0xbe1}) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(r3, 0xc, &(0x7f0000000380)={0x3}, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffc}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) 341.411998ms ago: executing program 8 (id=2271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00007fd000/0x4000)=nil, 0x4000, 0x11) 176.293181ms ago: executing program 2 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x85}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {0x0, 0x10}, @result={0x0, 0xfffffffe}}, {0x10, 0x0, 0x0, 0x0, @time={0xffffffff, 0x7}, {}, {0x6, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x2, 0x0, 0x1, @tick=0x5, {}, {}, @queue={0x9, {0x8, 0xd}}}], 0x68) unshare(0x2a020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='- 1 0 1', 0x7) 118.989206ms ago: executing program 9 (id=2069): syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$loop(0x0, 0x5, 0x88102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x2, 0x79, 0xfffffff8, 0x5, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffd, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 0s ago: executing program 7 (id=2273): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x0, 0x7, 0x9, 0x80, 0x14, @mcast2, @private1, 0x80, 0x20, 0x6, 0x4}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10800}, 0x20000000) mkdir(&(0x7f0000000300)='./file0\x00', 0x103) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) lseek(r0, 0x2000000000, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x61a9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x705c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x51}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7e39945f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240248d5}, 0x40000) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000780), 0x7, 0x7942475c3a523687) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000ac0)={0x0, 0x1, 0x0, &(0x7f00000007c0)=[{}], 0x2, 0x0, &(0x7f0000000840)=[{}, {}], 0x4, 0x0, &(0x7f0000000940)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}]}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xcc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'xfrm0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8dae}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'syztnl2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'wg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x101}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x408c040}, 0xa9ee0d4431c7fdb0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)=@newqdisc={0xf8, 0x24, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffe0}, {0xd, 0xfff2}, {0xe, 0xfff1}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x5, 0x6, 0xf, 0x2, 0x5bd, 0x7, 0x3}}, {0xa, 0x2, [0xad71, 0x5, 0x6e7]}}, {{0x1c, 0x1, {0x62, 0x37, 0xeb, 0x768, 0x2, 0x5b5d, 0x7, 0x7}}, {0x12, 0x2, [0xd, 0x3, 0x505, 0x6, 0x2, 0x3ff, 0x8]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0xfffffff9, 0x0, 0xb5, 0x8, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x84, 0x4, 0x17c, 0x0, 0x0, 0xf, 0xbbe5, 0x7}}, {0x12, 0x2, [0x7, 0x6, 0x3, 0x6, 0x5, 0x873e, 0x9]}}, {{0x1c, 0x1, {0xd2, 0x1, 0x26, 0x9, 0x2, 0x401, 0x6, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000ec0)=[0x8, 0xe]) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x48011) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1bf, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8008100) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x802, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmsg$can_j1939(r9, &(0x7f00000024c0)={&(0x7f0000001200), 0x80, &(0x7f0000002380)=[{&(0x7f0000001280)=""/255, 0xff}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f00000023c0)=""/252, 0xfc}, 0x40000001) kernel console output (not intermixed with test programs): 4:2245): avc: denied { create } for pid=14224 comm="syz.5.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 547.133877][ T29] audit: type=1400 audit(3933185122.514:2246): avc: denied { write } for pid=14224 comm="syz.5.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 547.219096][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.248717][ T7443] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 547.396248][T14233] xt_NFQUEUE: number of total queues is 0 [ 547.421240][ T7443] usb 9-1: config 219 has too many interfaces: 243, using maximum allowed: 32 [ 547.438564][ T7443] usb 9-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 547.460652][ T7443] usb 9-1: config 219 has 1 interface, different from the descriptor's value: 243 [ 547.470741][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.485613][ T7443] usb 9-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 547.495331][ T7443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.505296][ T7443] usb 9-1: Product: syz [ 547.520708][ T7443] usb 9-1: Manufacturer: syz [ 547.685329][ T7443] usb 9-1: SerialNumber: syz [ 547.785924][ T29] audit: type=1400 audit(3933185123.194:2247): avc: denied { ioctl } for pid=14241 comm="syz.2.1924" path="net:[4026533036]" dev="nsfs" ino=4026533036 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 547.897135][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.916912][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.935466][ T7443] usbsevseg 9-1:219.0: USB 7 Segment device now attached [ 547.949090][ T7443] usb 9-1: USB disconnect, device number 7 [ 547.961727][ T7443] usbsevseg 9-1:219.0: USB 7 Segment now disconnected [ 548.004649][T14244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.013060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.258356][ T7439] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 548.374208][T14248] lo: Caught tx_queue_len zero misconfig [ 548.408943][ T7439] usb 7-1: Using ep0 maxpacket: 32 [ 548.415748][ T7439] usb 7-1: unable to get BOS descriptor or descriptor too short [ 548.425043][ T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.434197][ T7439] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 548.445903][ T7439] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.457731][ T7439] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 548.467034][ T7439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.475090][ T7439] usb 7-1: Product: syz [ 548.479383][ T7439] usb 7-1: Manufacturer: syz [ 548.484036][ T7439] usb 7-1: SerialNumber: syz [ 548.500787][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.628549][ T5792] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 548.711794][ T7439] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 548.777930][ T7439] usb 7-1: USB disconnect, device number 78 [ 548.799551][ T5792] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 548.816863][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.843640][ T5792] usb 6-1: config 0 descriptor?? [ 549.073144][ T5792] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 549.087337][ T5792] [drm:udl_init] *ERROR* Selecting channel failed [ 549.273877][ T5792] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 549.321545][ T5792] [drm] Initialized udl on minor 2 [ 549.405932][ T5792] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.471136][ T29] audit: type=1326 audit(3933185124.884:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14265 comm="syz.6.1932" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a8b59e019 code=0x0 [ 549.502518][ T5792] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 549.593072][ T5792] usb 6-1: USB disconnect, device number 85 [ 549.602357][T13413] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.645553][T13413] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 549.841433][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 549.907060][T14275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.937685][ T7432] dummy0: entered promiscuous mode [ 550.015209][ T7432] IPVS: starting estimator thread 0... [ 550.047173][T14277] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004 [ 550.071297][T14277] syz_tun: entered allmulticast mode [ 550.114837][T14276] syz_tun: left allmulticast mode [ 550.127087][ T7432] dummy0: left promiscuous mode [ 550.128318][T14281] IPVS: using max 60 ests per chain, 144000 per kthread [ 550.278365][ T5792] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 550.439979][ T5792] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 550.465597][ T5792] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 550.475584][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.483749][ T5792] usb 6-1: Product: syz [ 550.487985][ T5792] usb 6-1: Manufacturer: syz [ 550.492730][ T5792] usb 6-1: SerialNumber: syz [ 550.499196][T14294] ip6erspan0: entered allmulticast mode [ 550.579203][ T5734] net_ratelimit: 5 callbacks suppressed [ 550.579220][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.652759][T11252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.762425][ T5792] scsi host1: uas [ 550.805541][ T8303] scsi 1:0:0:0: tag#12 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 550.816184][ T8303] scsi 1:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 550.889051][ T1439] scsi 1:0:0:0: tag#12 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 550.899316][ T1439] scsi 1:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 550.934621][T13413] usb 6-1: USB disconnect, device number 86 [ 550.988169][T14306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.996860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.260482][ T5792] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 551.385322][T14313] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 551.416023][T14313] CIFS: Attempting to mount //127.0.0.1/share [ 551.427952][T14313] CIFS: VFS: Error connecting to socket. Aborting operation. [ 551.436359][T14313] CIFS: VFS: cifs_mount failed w/return code = -111 [ 551.443101][ T5792] usb 7-1: Using ep0 maxpacket: 32 [ 551.452663][ T5792] usb 7-1: unable to get BOS descriptor or descriptor too short [ 551.461243][ T5792] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 551.482914][ T5792] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.495010][ T5792] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 551.504653][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.512879][ T5792] usb 7-1: Product: syz [ 551.517910][ T5792] usb 7-1: Manufacturer: syz [ 551.523470][ T5792] usb 7-1: SerialNumber: syz [ 551.618802][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.634920][T14320] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1946'. [ 551.783502][T14330] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.819727][T11254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.822242][ T5792] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 551.878859][T14330] syzkaller0: entered promiscuous mode [ 551.884361][T14330] syzkaller0: entered allmulticast mode [ 551.914366][T14330] tipc: Started in network mode [ 551.919817][T14330] tipc: Node identity c6ce4de6f95b, cluster identity 4711 [ 551.933196][T14330] tipc: Enabled bearer , priority 0 [ 552.098458][ T7432] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 552.324555][ T29] audit: type=1400 audit(3933185127.364:2249): avc: denied { read } for pid=14327 comm="syz.2.1948" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 552.348682][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.369210][T14329] tipc: Resetting bearer [ 552.383297][ T5792] usb 7-1: USB disconnect, device number 79 [ 552.402513][T14329] tipc: Disabling bearer [ 552.490099][ T7432] usb 6-1: device descriptor read/64, error -71 [ 552.659389][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.728334][ T7432] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 553.375370][ T7432] usb 6-1: device descriptor read/64, error -71 [ 553.656273][ T7432] usb usb6-port1: attempt power cycle [ 553.703336][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.899607][T11252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.022240][ T7432] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 554.070927][ T7432] usb 6-1: device descriptor read/8, error -71 [ 554.321140][ T7432] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 554.361191][ T7432] usb 6-1: device descriptor read/8, error -71 [ 554.380419][ T29] audit: type=1400 audit(3933185129.794:2250): avc: denied { mounton } for pid=14379 comm="syz.2.1961" path="/proc/1477/task" dev="proc" ino=52554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 554.409682][ T5735] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 554.469514][ T29] audit: type=1400 audit(3933185129.864:2251): avc: denied { write } for pid=14367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.499835][ T7432] usb usb6-port1: unable to enumerate USB device [ 554.578800][ T5735] usb 9-1: Using ep0 maxpacket: 8 [ 554.585894][ T5735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 554.603340][ T5735] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 152 [ 554.617423][ T29] audit: type=1400 audit(3933185130.024:2252): avc: denied { write } for pid=14391 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.649106][ T5735] usb 9-1: can't read configurations, error -22 [ 554.789303][ T5735] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 554.949318][ T5735] usb 9-1: Using ep0 maxpacket: 8 [ 554.974441][ T5735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 555.468753][ T29] audit: type=1400 audit(3933185130.874:2253): avc: denied { write } for pid=14395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.487512][ T5735] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 152 [ 555.505608][ T5735] usb 9-1: can't read configurations, error -22 [ 555.521807][ T5735] usb usb9-port1: attempt power cycle [ 555.585192][ T29] audit: type=1400 audit(3933185130.994:2254): avc: denied { write } for pid=14418 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.608316][ T5734] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 555.756064][T14421] netlink: 'syz.5.1968': attribute type 8 has an invalid length. [ 555.768484][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 555.770739][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1968'. [ 555.776532][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 555.793187][ T7432] net_ratelimit: 4 callbacks suppressed [ 555.793214][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.803797][ T7439] kernel write not supported for file net/rpc/auth.unix.ip/channel (pid: 7439 comm: kworker/0:9) [ 555.810462][ T5734] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 555.818690][ T29] audit: type=1400 audit(3933185131.204:2255): avc: denied { mounton } for pid=14420 comm="syz.5.1968" path="/379/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 555.830299][ T5734] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.864573][ T5734] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 555.873904][ T5735] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 555.897191][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.906224][ T5734] usb 3-1: Product: syz [ 555.906431][ T5735] usb 9-1: Using ep0 maxpacket: 8 [ 555.916547][ T5734] usb 3-1: Manufacturer: syz [ 555.924719][ T5734] usb 3-1: SerialNumber: syz [ 555.931568][ T5735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 555.940674][ T5735] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 152 [ 555.949774][ T5735] usb 9-1: can't read configurations, error -22 [ 556.054873][ T29] audit: type=1400 audit(3933185131.464:2256): avc: denied { setopt } for pid=14432 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 556.088373][ T5735] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 556.110162][ T5735] usb 9-1: Using ep0 maxpacket: 8 [ 556.117478][ T5735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 556.129463][ T5735] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 152 [ 556.139702][ T5735] usb 9-1: can't read configurations, error -22 [ 556.150192][ T5735] usb usb9-port1: unable to enumerate USB device [ 556.222290][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.268533][ T7439] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 556.398322][ T7439] usb 7-1: device descriptor read/64, error -71 [ 556.638377][ T7439] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 556.768552][ T7439] usb 7-1: device descriptor read/64, error -71 [ 556.819330][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.878504][ T7439] usb usb7-port1: attempt power cycle [ 557.166685][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1976'. [ 557.179193][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1976'. [ 557.228373][ T7439] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 557.260427][ T7439] usb 7-1: device descriptor read/8, error -71 [ 557.339571][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.365412][ T29] audit: type=1400 audit(3933185132.774:2257): avc: denied { setattr } for pid=14454 comm="syz.8.1980" name="vbi4" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 557.436703][T14458] netlink: 'syz.8.1981': attribute type 19 has an invalid length. [ 557.529338][ T7439] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 557.550828][ T7439] usb 7-1: device descriptor read/8, error -71 [ 557.558945][ T5735] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 557.621336][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.659691][ T7439] usb usb7-port1: unable to enumerate USB device [ 557.713120][ T5735] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 557.723303][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.733961][ T5735] usb 6-1: Product: syz [ 557.738220][ T5735] usb 6-1: Manufacturer: syz [ 557.745384][ T5735] usb 6-1: SerialNumber: syz [ 557.753271][ T5735] usb 6-1: config 0 descriptor?? [ 557.779506][ T5735] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 091 [ 557.802721][ T5734] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 557.858779][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.899246][ T29] audit: type=1400 audit(3933185133.304:2258): avc: denied { write } for pid=14467 comm="syz.8.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 557.938137][ T29] audit: type=1400 audit(3933185133.344:2259): avc: denied { ioctl } for pid=14467 comm="syz.8.1983" path="socket:[52826]" dev="sockfs" ino=52826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 557.968345][ T5734] usb 3-1: USB disconnect, device number 98 [ 558.002629][T14452] netlink: 'syz.5.1978': attribute type 8 has an invalid length. [ 558.200797][T14478] syzkaller0: entered promiscuous mode [ 558.206401][T14478] syzkaller0: entered allmulticast mode [ 558.222576][T14478] tipc: Enabled bearer , priority 0 [ 558.236802][T14478] tipc: Resetting bearer [ 558.243140][ T5735] (null): failure reading functionality [ 558.257898][T14477] tipc: Resetting bearer [ 558.266012][ T5735] i2c i2c-2: connected i2c-tiny-usb device [ 558.291903][T14477] tipc: Disabling bearer [ 558.368515][ T5734] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 558.428492][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.468441][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.496420][ T5735] usb 6-1: USB disconnect, device number 91 [ 558.568353][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 558.623590][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1989'. [ 558.724749][T14483] lo speed is unknown, defaulting to 1000 [ 558.944978][T14484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.954263][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.975301][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.984462][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 558.995275][ T5734] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 559.005686][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.014223][ T5734] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 559.032166][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.041278][ T5734] usb 3-1: Product: syz [ 559.046143][ T5734] usb 3-1: Manufacturer: syz [ 559.051158][ T5734] usb 3-1: SerialNumber: syz [ 559.060722][ T5734] usb 3-1: config 0 descriptor?? [ 559.133225][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1991'. [ 559.144827][T14490] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1991'. [ 559.195479][T14492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1992'. [ 559.197111][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1992'. [ 559.380115][T14497] netlink: 'syz.8.1993': attribute type 1 has an invalid length. [ 559.488880][T14497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.503700][T14501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.528854][T14504] bond1: (slave geneve2): making interface the new active one [ 559.536358][ T29] audit: type=1400 audit(3933185134.934:2260): avc: denied { map } for pid=14469 comm="syz.2.1984" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 559.561162][ T5734] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 559.573579][T14504] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 559.657246][T14507] lo speed is unknown, defaulting to 1000 [ 559.698953][ T7439] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 559.768461][ T5792] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 559.878340][ T7439] usb 6-1: Using ep0 maxpacket: 8 [ 559.885062][ T7439] usb 6-1: unable to get BOS descriptor or descriptor too short [ 559.909402][ T7439] usb 6-1: config 117 has an invalid interface number: 163 but max is 0 [ 559.919839][ T7439] usb 6-1: config 117 has no interface number 0 [ 559.926234][ T7439] usb 6-1: config 117 interface 163 has no altsetting 0 [ 559.935849][ T7439] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 559.945904][ T5792] usb 7-1: Using ep0 maxpacket: 32 [ 559.953876][ T7439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.964384][ T7439] usb 6-1: Product: syz [ 559.969397][ T7439] usb 6-1: Manufacturer: syz [ 559.974034][ T7439] usb 6-1: SerialNumber: syz [ 559.980281][ T5792] usb 7-1: unable to get BOS descriptor or descriptor too short [ 559.997766][ T5792] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 560.008507][ T5792] usb 7-1: can't read configurations, error -71 [ 560.281892][T14517] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 560.703031][ T7439] f81534a_ctrl 6-1:117.163: probe with driver f81534a_ctrl failed with error -121 [ 561.010173][ T7439] usb 6-1: USB disconnect, device number 92 [ 561.058931][ T5734] net_ratelimit: 3 callbacks suppressed [ 561.058948][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.072634][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.212905][ T7454] usb 3-1: USB disconnect, device number 99 [ 561.301061][T14521] syzkaller0: entered promiscuous mode [ 561.306662][T14521] syzkaller0: entered allmulticast mode [ 561.315619][T14521] tipc: Started in network mode [ 561.320640][T14521] tipc: Node identity c6bdd5e26bcc, cluster identity 4711 [ 561.330375][T14521] tipc: Enabled bearer , priority 0 [ 561.342952][T14521] tipc: Resetting bearer [ 561.461047][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.469967][T14520] tipc: Resetting bearer [ 561.519690][T14520] tipc: Disabling bearer [ 561.652177][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2005'. [ 561.662436][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2005'. [ 561.762970][ T5613] Bluetooth: hci2: connection err: -111 [ 561.853289][T14542] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2007'. [ 561.897438][T14542] veth0_macvtap: left promiscuous mode [ 562.106428][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.432040][T14536] kvm: apic: phys broadcast and lowest prio [ 562.473431][T14542] veth0_macvtap: entered promiscuous mode [ 562.679928][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.277937][T14559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41742 sclass=netlink_route_socket pid=14559 comm=syz.6.2010 [ 563.459596][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.665460][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.684266][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.693209][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.711941][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.950201][T14569] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 565.205290][T14575] lo speed is unknown, defaulting to 1000 [ 565.271473][ T29] audit: type=1400 audit(3933185140.684:2261): avc: denied { write } for pid=14560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.388377][ T7454] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 565.436512][ T29] audit: type=1400 audit(3933185140.844:2262): avc: denied { write } for pid=14590 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.574494][ T7454] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 565.596491][ T7454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.617709][ T7454] usb 6-1: Product: syz [ 565.622506][ T7454] usb 6-1: Manufacturer: syz [ 565.627378][ T7454] usb 6-1: SerialNumber: syz [ 565.646426][ T7454] usb 6-1: UAS is ignored for this device, using usb-storage instead [ 565.661414][ T7454] usb 6-1: UAS is ignored for this device, using usb-storage instead [ 565.669966][ T7454] usb-storage 6-1:1.0: USB Mass Storage device detected [ 565.688745][ T7454] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 565.773272][ T7454] scsi host1: usb-storage 6-1:1.0 [ 565.939126][ C1] tipc: RX(1000001): key[1] is activated [ 566.148428][ T7454] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 566.178334][ T7439] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 566.286669][ T29] audit: type=1400 audit(3933185141.694:2263): avc: denied { write } for pid=14597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.290936][T14613] netlink: 'syz.7.2018': attribute type 1 has an invalid length. [ 566.320628][ T5735] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 566.329513][ T8303] net_ratelimit: 7 callbacks suppressed [ 566.329528][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.348079][ T7454] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 566.357333][ T7439] usb 3-1: unable to get BOS descriptor or descriptor too short [ 566.365977][ T7454] usb 7-1: config 0 has no interface number 0 [ 566.372640][ T7454] usb 7-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 31 [ 566.383192][ T7439] usb 3-1: not running at top speed; connect to a high speed hub [ 566.392012][ T7454] usb 7-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid maxpacket 12336, setting to 1024 [ 566.404730][ T7454] usb 7-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 1024 [ 566.404836][ T7439] usb 3-1: config 8 has an invalid interface number: 43 but max is 0 [ 566.423926][ T7454] usb 7-1: config 0 interface 238 has no altsetting 0 [ 566.432126][ T7439] usb 3-1: config 8 has no interface number 0 [ 566.440814][ T7439] usb 3-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 566.456180][ T7439] usb 3-1: config 8 interface 43 has no altsetting 0 [ 566.463063][ T7454] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 566.476368][ T29] audit: type=1400 audit(3933185141.874:2264): avc: denied { write } for pid=14616 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.499624][ T7454] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 566.508720][ T7454] usb 7-1: Product: syz [ 566.510141][ T5735] usb 9-1: Using ep0 maxpacket: 32 [ 566.513018][ T7454] usb 7-1: Manufacturer: syz [ 566.523427][ T7454] usb 7-1: SerialNumber: syz [ 566.526765][ T5735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 566.536421][ T7439] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 566.544267][ T5735] usb 9-1: config index 0 descriptor too short (expected 6034, got 105) [ 566.545638][ T7439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.561789][ T5735] usb 9-1: config 247 has too many interfaces: 50, using maximum allowed: 32 [ 566.571718][ T7454] usb 7-1: config 0 descriptor?? [ 566.574505][ T5735] usb 9-1: config 247 contains an unexpected descriptor of type 0x1, skipping [ 566.585880][T14598] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 566.585982][T14598] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 566.608198][ T5735] usb 9-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config [ 566.619338][ T7439] usb 3-1: Product: syz [ 566.619358][ T7439] usb 3-1: Manufacturer: syz [ 566.619373][ T7439] usb 3-1: SerialNumber: syz [ 566.634834][ T5735] usb 9-1: config 247 has 0 interfaces, different from the descriptor's value: 50 [ 566.647492][ T5735] usb 9-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 566.649865][ T7454] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 566.664995][ T5735] usb 9-1: New USB device strings: Mfr=1, Product=13, SerialNumber=3 [ 566.676324][ T5735] usb 9-1: Product: syz [ 566.681529][ T5735] usb 9-1: Manufacturer: syz [ 566.686473][ T5735] usb 9-1: SerialNumber: syz [ 566.806010][ T7454] usb 7-1: USB disconnect, device number 86 [ 566.832820][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.854700][ T7439] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 566.878115][ T7439] scsi host2: usb-storage 3-1:8.43 [ 566.891521][ T7439] usb 3-1: USB disconnect, device number 100 [ 566.953901][ T5735] usb 9-1: USB disconnect, device number 12 [ 567.466209][T14629] FAT-fs (nbd2): unable to read boot sector [ 567.500130][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.583187][T14639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.650331][ T29] audit: type=1400 audit(3933185143.064:2265): avc: denied { write } for pid=14640 comm="syz.8.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 567.710208][ T29] audit: type=1400 audit(3933185143.124:2266): avc: denied { write } for pid=14642 comm="syz.6.2025" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 567.755514][T14645] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 567.779083][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.810520][ T29] audit: type=1400 audit(3933185143.164:2267): avc: denied { read write } for pid=14640 comm="syz.8.2024" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 567.855525][T14651] [U] [ 567.858245][T14651] [U] [ 567.860922][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 567.907803][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 567.910865][ T29] audit: type=1400 audit(3933185143.164:2268): avc: denied { ioctl open } for pid=14640 comm="syz.8.2024" path="/49/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 567.955317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.987596][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.018269][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.038011][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 568.084950][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 568.131845][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 568.178740][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 568.266946][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 568.313846][T14651] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 568.318725][ T5735] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 568.319384][T14651] [U] [ 568.329659][T14651] [U] [ 568.368514][T14651] [U] [ 568.371240][T14651] [U] [ 568.373926][T14651] [U] [ 568.376604][T14651] [U] [ 568.380275][T14651] [U] [ 568.382968][T14651] [U] [ 568.385657][T14651] [U] [ 568.388341][T14651] [U] [ 568.391693][T14651] [U] [ 568.394387][T14651] [U] [ 568.397067][T14651] [U] [ 568.399750][T14651] [U] [ 568.403463][T14651] [U] [ 568.406158][T14651] [U] [ 568.408838][T14651] [U] [ 568.411523][T14651] [U] [ 568.416162][T14651] [U] [ 568.418857][T14651] [U] [ 568.421540][T14651] [U] [ 568.424221][T14651] [U] [ 568.427556][T14651] [U] [ 568.430242][T14651] [U] [ 568.432924][T14651] [U] [ 568.435605][T14651] [U] [ 568.439296][T14651] [U] [ 568.441991][T14651] [U] [ 568.444681][T14651] [U] [ 568.447360][T14651] [U] [ 568.453470][T14651] [U] [ 568.456166][T14651] [U] [ 568.458850][T14651] [U] [ 568.461538][T14651] [U] [ 568.464352][ T5735] usb 3-1: device descriptor read/64, error -71 [ 568.471693][T14651] [U] [ 568.474387][T14651] [U] [ 568.477072][T14651] [U] [ 568.479759][T14651] [U] [ 568.483288][T14651] [U] [ 568.485981][T14651] [U] [ 568.488669][T14651] [U] [ 568.491352][T14651] [U] [ 568.494632][T14651] [U] [ 568.497325][T14651] [U] [ 568.500005][T14651] [U] [ 568.500651][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.502681][T14651] [U] [ 568.515438][T11254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.526458][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.543725][T14651] [U] [ 568.546437][T14651] [U] [ 568.549119][T14651] [U] [ 568.551804][T14651] [U] [ 568.554919][T14651] [U] [ 568.557615][T14651] [U] [ 568.560299][T14651] [U] [ 568.562976][T14651] [U] [ 568.572920][T14651] [U] [ 568.575629][T14651] [U] [ 568.578318][T14651] [U] [ 568.581001][T14651] [U] [ 568.587684][T14651] [U] [ 568.590985][T14656] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2027'. [ 568.708329][ T5735] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 568.718034][T14658] gadgetfs: bound to dummy_udc driver [ 568.809262][T14663] loop5: detected capacity change from 0 to 4095 [ 568.837083][ T29] audit: type=1400 audit(3933185144.244:2269): avc: denied { map } for pid=14662 comm="syz.6.2029" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.868661][ T5735] usb 3-1: device descriptor read/64, error -71 [ 568.875911][ T5633] buffer_io_error: 6 callbacks suppressed [ 568.875925][ T5633] Buffer I/O error on dev loop5, logical block 511, async page read [ 568.936042][T14667] netlink: 'syz.6.2030': attribute type 4 has an invalid length. [ 568.970665][T14667] 9p: Bad value for 'wfdno' [ 568.979240][ T5735] usb usb3-port1: attempt power cycle [ 569.179465][T14664] bond2: Removing last arp target with arp_interval on [ 569.186886][T14664] bond2: entered promiscuous mode [ 569.192976][T14664] bond2: entered allmulticast mode [ 569.198398][T14664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.399733][T14676] overlayfs: unescaped trailing colons in lowerdir mount option. [ 569.438903][ T5735] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 569.489211][ T5735] usb 3-1: device descriptor read/8, error -71 [ 569.898601][ T5735] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 569.929243][ T5735] usb 3-1: device descriptor read/8, error -71 [ 570.458516][ T7439] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 570.642504][ T7439] usb 9-1: Using ep0 maxpacket: 8 [ 570.664107][ T7439] usb 9-1: unable to get BOS descriptor or descriptor too short [ 570.705217][ T7439] usb 9-1: config 127 has an invalid interface number: 1 but max is 0 [ 570.780521][ T7439] usb 9-1: config 127 has no interface number 0 [ 570.836825][ T7439] usb 9-1: config 127 interface 1 has no altsetting 0 [ 570.917445][ T7439] usb 9-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 570.944746][ T5735] usb usb3-port1: unable to enumerate USB device [ 571.020750][ T7439] usb 9-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 571.056951][ T7439] usb 9-1: Product: syz [ 571.080536][ T7439] usb 9-1: Manufacturer: syz [ 571.115796][ T7439] usb 9-1: SerialNumber: syz [ 571.455134][ T29] audit: type=1400 audit(3933185146.814:2270): avc: denied { setattr } for pid=14679 comm="syz.8.2033" name="fdinfo" dev="proc" ino=54709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 571.932714][T13413] net_ratelimit: 8 callbacks suppressed [ 571.932732][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.023839][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.149501][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.251032][T14710] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2039'. [ 572.318076][ T29] audit: type=1400 audit(3933185147.724:2271): avc: denied { write } for pid=14681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.530612][ T29] audit: type=1400 audit(3933185147.944:2272): avc: denied { write } for pid=14718 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.685481][T14724] 9p: Bad value for 'rfdno' [ 572.823234][T14731] binder: BC_ACQUIRE_RESULT not supported [ 572.831217][T14730] binder: BC_ACQUIRE_RESULT not supported [ 572.837078][T14730] binder: 14729:14730 ioctl c0306201 2000000004c0 returned -22 [ 572.854877][T14731] binder: 14729:14731 ioctl c0306201 2000000004c0 returned -22 [ 573.112291][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.165183][ T7443] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 573.184707][ T7439] redrat3 9-1:127.1: Couldn't find all endpoints [ 573.236635][ T7439] usb 9-1: USB disconnect, device number 13 [ 573.313812][T11252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.340186][ T7443] usb 7-1: Using ep0 maxpacket: 32 [ 573.363838][ T7443] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 573.879011][T14754] netlink: 'syz.2.2045': attribute type 1 has an invalid length. [ 574.117552][ T29] audit: type=1400 audit(3933185149.494:2273): avc: denied { write } for pid=14728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.267154][ T7443] usb 7-1: config 0 has no interface number 0 [ 574.288311][ T7443] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.301078][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.312653][ T7443] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 574.440956][ T7443] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 574.460833][T14755] bond7: (slave macvlan1): Enslaving as an active interface with a down link [ 574.497099][ T7443] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 574.529656][ T7443] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.567014][ T7443] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 574.582549][T14758] bond7 (unregistering): (slave macvlan1): Releasing active interface [ 574.586629][ T7443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.600907][ T29] audit: type=1400 audit(3933185150.014:2274): avc: denied { write } for pid=14761 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.618263][ T7443] usb 7-1: Product: syz [ 574.658094][ T7443] usb 7-1: Manufacturer: syz [ 574.672509][ T7443] usb 7-1: SerialNumber: syz [ 574.700166][ T7443] usb 7-1: config 0 descriptor?? [ 574.708615][T14730] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 574.726742][T14758] bond7 (unregistering): Released all slaves [ 575.494241][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.505322][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.620546][T14767] orangefs_mount: mount request failed with -4 [ 575.630123][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.649774][ T7443] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input42 [ 576.366119][ T7443] usb 7-1: USB disconnect, device number 87 [ 576.463998][T14766] Failed to initialize the IGMP autojoin socket (err -2) [ 576.507271][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.625997][T14778] program syz.8.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.643817][T14778] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 577.183521][ T29] audit: type=1400 audit(3933185152.594:2275): avc: denied { setattr } for pid=14779 comm="syz.2.2053" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 577.208710][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.468584][ T5608] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 577.540854][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.641420][ T5608] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.660179][ T5608] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 577.685772][ T5608] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.704888][ T5608] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 577.729651][ T5608] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 577.751419][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.770704][ T5608] usb 3-1: Product: syz [ 577.780611][ T5608] usb 3-1: Manufacturer: syz [ 577.790432][ T5608] usb 3-1: SerialNumber: syz [ 577.797807][T14795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.807872][ T5608] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 577.824089][T14795] Invalid source name [ 577.837222][ T5608] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 577.860684][ T5608] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 577.955785][T14799] can0: slcan on ptm1. [ 578.037014][ T5608] usb 3-1: USB disconnect, device number 105 [ 578.063478][T14798] can0 (unregistered): slcan off ptm1. [ 578.068847][ T5608] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 578.100474][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.108588][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.132414][ T5608] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 578.176857][ T5608] ti_usb_3410_5052 3-1:2.0: device disconnected [ 578.507972][ T29] audit: type=1400 audit(3933185153.624:2276): avc: denied { mount } for pid=14808 comm="syz.6.2059" name="/" dev="pstore" ino=4216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 578.546916][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.557629][ T29] audit: type=1400 audit(3933185153.624:2277): avc: denied { mounton } for pid=14808 comm="syz.6.2059" path="/393/file0" dev="pstore" ino=4216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 578.590638][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.593985][ T7439] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 578.768375][ T7439] usb 7-1: Using ep0 maxpacket: 8 [ 578.780036][ T29] audit: type=1400 audit(3933185154.184:2278): avc: denied { write } for pid=14806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.823951][ T7439] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.838684][ T7439] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 578.852051][ T7439] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 578.862761][ T7439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.874099][ T7439] usb 7-1: config 0 descriptor?? [ 578.887354][ T29] audit: type=1400 audit(3933185154.294:2279): avc: denied { write } for pid=14830 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.933591][ T7439] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 578.988390][ T5608] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 579.140196][ T5608] usb 3-1: unable to get BOS descriptor or descriptor too short [ 579.150933][ T5608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.194738][ T5608] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.210398][ T7439] usb 7-1: USB disconnect, device number 88 [ 579.226289][ T5608] usb 3-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 579.240539][ T29] audit: type=1400 audit(3933185154.654:2280): avc: denied { unmount } for pid=6188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 579.260801][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.278324][ T5608] usb 3-1: Product: syz [ 579.293012][ T5608] usb 3-1: Manufacturer: syz [ 579.313697][ T5608] usb 3-1: SerialNumber: syz [ 579.334683][ T29] audit: type=1400 audit(3933185154.744:2281): avc: denied { write } for pid=14837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.492322][ T29] audit: type=1400 audit(3933185154.904:2282): avc: denied { write } for pid=14862 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.618883][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.668504][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.680468][T14872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2068'. [ 579.965787][ T29] audit: type=1400 audit(3933185155.374:2283): avc: denied { write } for pid=14870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.077501][ T29] audit: type=1400 audit(3933185155.484:2284): avc: denied { write } for pid=14894 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.534294][T13934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.550457][T13934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.566136][T13934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.570836][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2070'. [ 580.606628][T13934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.617929][T13934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.673451][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.780728][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.342875][ T5734] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 581.362015][T14910] Failed to initialize the IGMP autojoin socket (err -2) [ 581.525050][ T5734] usb 9-1: unable to get BOS descriptor or descriptor too short [ 581.553183][ T5734] usb 9-1: not running at top speed; connect to a high speed hub [ 581.582312][ T5734] usb 9-1: config 17 has an invalid interface number: 8 but max is 1 [ 581.613159][ T5734] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 581.673379][ T5734] usb 9-1: config 17 has no interface number 0 [ 581.727619][ T5734] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 581.801327][ T5608] usb 3-1: unit 3 not found! [ 581.834630][ T5734] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 581.886082][ T5734] usb 9-1: config 17 interface 8 has no altsetting 0 [ 581.923711][ T5734] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 581.965938][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.003995][ T5734] usb 9-1: Product: syz [ 582.024231][ T5608] usb 3-1: USB disconnect, device number 106 [ 582.028148][ T5734] usb 9-1: Manufacturer: syz [ 582.062181][ T5734] usb 9-1: SerialNumber: syz [ 582.231192][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 582.231207][ T29] audit: type=1400 audit(3933185157.634:2288): avc: denied { ioctl } for pid=14983 comm="syz.7.2082" path="socket:[55146]" dev="sockfs" ino=55146 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 582.284423][T14942] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 582.547766][ T5734] usb 9-1: selecting invalid altsetting 0 [ 582.631845][ T5734] usb 9-1: USB disconnect, device number 14 [ 582.653721][T14910] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.687041][T14910] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.706020][T14910] bridge_slave_0: entered allmulticast mode [ 582.721344][T14910] bridge_slave_0: entered promiscuous mode [ 582.738216][T14910] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.750229][T13934] Bluetooth: hci6: command tx timeout [ 582.758786][T13655] net_ratelimit: 3 callbacks suppressed [ 582.758799][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.761634][T14910] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.808516][T14910] bridge_slave_1: entered allmulticast mode [ 582.823456][T14910] bridge_slave_1: entered promiscuous mode [ 583.124921][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 583.207141][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.222770][ T29] audit: type=1400 audit(3933185158.624:2289): avc: denied { write } for pid=14979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.289270][ T29] audit: type=1400 audit(3933185158.694:2290): avc: denied { ioctl } for pid=15006 comm="syz.6.2084" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 583.409164][ T29] audit: type=1400 audit(3933185158.754:2291): avc: denied { setattr } for pid=15011 comm="syz.8.2085" path="socket:[55621]" dev="sockfs" ino=55621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 583.477304][T14910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.507902][ T29] audit: type=1400 audit(3933185158.764:2292): avc: denied { ioctl } for pid=15011 comm="syz.8.2085" path="socket:[55621]" dev="sockfs" ino=55621 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 583.581499][T14910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.623222][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2086'. [ 583.779735][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.023943][T14910] team0: Port device team_slave_0 added [ 584.034349][ T29] audit: type=1400 audit(3933185159.444:2293): avc: denied { write } for pid=15022 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.055208][T15021] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 584.091421][T15021] bond5 (unregistering): Released all slaves [ 584.139696][T14910] team0: Port device team_slave_1 added [ 584.178448][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.219254][T14910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.226283][T13655] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 584.239196][T14910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.288274][T14910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.311363][T14910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.318377][T14910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.329323][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.345481][T14910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.443501][T13655] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 584.457626][T13655] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 584.494142][T13655] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 584.511150][T13655] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 584.512639][T14910] hsr_slave_0: entered promiscuous mode [ 584.557344][T13655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.567955][T14910] hsr_slave_1: entered promiscuous mode [ 584.577899][T15025] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 584.590093][T14910] debugfs: 'hsr0' already exists in 'hsr' [ 584.597575][T14910] Cannot create hsr debugfs directory [ 584.650593][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 584.746387][ T29] audit: type=1400 audit(3933185160.154:2294): avc: denied { create } for pid=15030 comm="syz.2.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 584.817799][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.820108][ T5608] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 584.827044][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.834275][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.854061][T13934] Bluetooth: hci6: command tx timeout [ 584.882478][T13655] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 584.915583][T13655] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input43 [ 584.981179][T13655] usb 9-1: USB disconnect, device number 15 [ 584.987157][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 585.009471][ T5608] usb 7-1: Using ep0 maxpacket: 16 [ 585.026166][ T5608] usb 7-1: unable to get BOS descriptor or descriptor too short [ 585.051414][ T5608] usb 7-1: config 4 has an invalid interface number: 127 but max is 0 [ 585.074541][ T5608] usb 7-1: config 4 has no interface number 0 [ 585.094547][ T5608] usb 7-1: config 4 interface 127 has no altsetting 0 [ 585.117689][ T5608] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 585.138808][ T5608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.163094][ T5608] usb 7-1: Product: syz [ 585.178686][ T5608] usb 7-1: Manufacturer: syz [ 585.183356][ T5608] usb 7-1: SerialNumber: syz [ 585.445004][ T5608] usbhid 7-1:4.127: couldn't find an input interrupt endpoint [ 585.484288][ T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.489047][ T5608] usb 7-1: USB disconnect, device number 89 [ 585.582947][T15046] Failed to initialize the IGMP autojoin socket (err -2) [ 585.597826][T14910] netdevsim netdevsim9 netdevsim0: renamed from eth13 [ 585.622421][T13655] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 585.667772][T14910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.691872][ T29] audit: type=1400 audit(3933185161.094:2295): avc: denied { write } for pid=15039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.718961][T14910] netdevsim netdevsim9 netdevsim1: renamed from eth14 [ 585.747391][T14910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.766288][T14910] netdevsim netdevsim9 netdevsim2: renamed from eth15 [ 585.792876][T14910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.805673][T14910] netdevsim netdevsim9 netdevsim3: renamed from eth16 [ 585.818760][T13655] usb 3-1: Using ep0 maxpacket: 16 [ 585.828353][T13655] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.840803][T14910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.858984][T13655] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.868382][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.877405][ T29] audit: type=1400 audit(3933185161.274:2296): avc: denied { write } for pid=15059 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.921068][T13655] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.932416][T13655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.948873][T13655] usb 3-1: Product: syz [ 585.968350][T13655] usb 3-1: Manufacturer: syz [ 585.973330][T13655] usb 3-1: SerialNumber: syz [ 586.007791][T13655] usb 3-1: 0:2 : does not exist [ 586.234786][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2098'. [ 586.305723][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 586.397731][T15042] hsr_slave_1 (unregistering): left promiscuous mode [ 586.491379][T14910] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.497927][T13655] usb 3-1: USB disconnect, device number 107 [ 586.571450][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.578623][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.611562][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.623352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.630511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.898552][T13934] Bluetooth: hci6: command tx timeout [ 586.904772][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.076351][ T29] audit: type=1400 audit(3933185162.484:2297): avc: denied { append } for pid=15095 comm="syz.6.2102" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.112937][T13655] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 587.265362][T15102] input: syz1 as /devices/virtual/input/input44 [ 587.308716][T13655] usb 9-1: Using ep0 maxpacket: 16 [ 587.321860][T13655] usb 9-1: unable to get BOS descriptor or descriptor too short [ 587.342489][T13655] usb 9-1: config 7 has an invalid interface number: 161 but max is 0 [ 587.357075][T13655] usb 9-1: config 7 has no interface number 0 [ 587.376590][T13655] usb 9-1: config 7 interface 161 has no altsetting 0 [ 587.397959][T13655] usb 9-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice=8f.93 [ 587.431850][T13655] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.465614][T13655] usb 9-1: Product: syz [ 587.477914][T13655] usb 9-1: Manufacturer: syz [ 587.490378][T13655] usb 9-1: SerialNumber: syz [ 587.610331][T14910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.715199][T13655] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0610 [ 587.753865][T13655] gspca_sn9c20x: Write register 1000 failed -71 [ 587.776682][T13655] gspca_sn9c20x: Device initialization failed [ 587.804300][T13655] gspca_sn9c20x 9-1:7.161: probe with driver gspca_sn9c20x failed with error -71 [ 587.848730][T13655] usb 9-1: USB disconnect, device number 16 [ 587.969198][ T7432] net_ratelimit: 3 callbacks suppressed [ 587.969224][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.393950][T14910] veth0_vlan: entered promiscuous mode [ 588.439091][T14910] veth1_vlan: entered promiscuous mode [ 588.451392][T15136] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 588.556621][T14910] veth1_macvtap: entered promiscuous mode [ 588.692753][T14910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.744858][T14910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.789708][T14910] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 588.822306][T14910] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 588.857179][T14910] wireguard: wg0: Could not create IPv4 socket [ 588.875050][ T29] audit: type=1400 audit(3933185164.284:2298): avc: denied { accept } for pid=15139 comm="syz.8.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 588.876115][T15146] futex_wake_op: syz.8.2111 tries to shift op by 144; fix this program [ 588.897562][T14910] wireguard: wg1: Could not create IPv4 socket [ 588.914931][T11254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.978670][T13934] Bluetooth: hci6: command tx timeout [ 588.986165][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.038545][ T188] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 589.208730][ T188] usb 7-1: Using ep0 maxpacket: 32 [ 589.215899][ T188] usb 7-1: unable to get BOS descriptor or descriptor too short [ 589.227057][ T188] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 589.239814][ T188] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 589.253128][ T188] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 589.263563][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.272260][ T188] usb 7-1: Product: syz [ 589.276776][ T188] usb 7-1: Manufacturer: syz [ 589.282947][ T188] usb 7-1: SerialNumber: syz [ 589.459400][T15154] gadgetfs: bound to dummy_udc driver [ 589.524607][ T188] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 589.536588][ T188] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 589.547846][ T188] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 589.570120][ T188] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 589.700046][ T5734] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 589.719218][ C1] gadgetfs: connected [ 589.727874][T15153] gadgetfs: suspended from state 3 [ 589.748189][T15153] gadgetfs: disconnected [ 589.811959][T15168] binder: 15166:15168 ioctl c0306201 0 returned -14 [ 589.875777][ T188] usb 7-1: USB disconnect, device number 90 [ 589.981683][T15173] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 590.021840][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.030128][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.185608][ T29] audit: type=1400 audit(3933185165.594:2299): avc: denied { write } for pid=15165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.259944][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.333862][ T29] audit: type=1400 audit(3933185165.744:2300): avc: denied { write } for pid=15184 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.443480][T15183] kvm: pic: single mode not supported [ 590.443684][T15183] kvm: pic: level sensitive irq not supported [ 590.468157][T15183] kvm: pic: single mode not supported [ 590.485581][T15183] kvm: pic: single mode not supported [ 590.504873][T15183] kvm: pic: single mode not supported [ 590.522551][T15183] kvm: pic: single mode not supported [ 590.536972][T15183] kvm: pic: single mode not supported [ 590.542710][T15183] kvm: pic: level sensitive irq not supported [ 590.568960][T15183] kvm: pic: single mode not supported [ 590.577005][T15183] kvm: pic: level sensitive irq not supported [ 590.622246][T15183] kvm: pic: single mode not supported [ 590.670383][T15183] kvm: pic: single mode not supported [ 590.675798][T15183] kvm: pic: level sensitive irq not supported [ 590.698592][T15183] kvm: pic: single mode not supported [ 591.058680][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.127507][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 591.151537][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 591.160090][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 591.171297][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 591.179585][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 591.198423][ T7443] usb 7-1: new full-speed USB device number 91 using dummy_hcd [ 591.324011][T15214] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 591.481500][ T29] audit: type=1400 audit(3933185166.894:2301): avc: denied { write } for pid=15188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.496109][T15214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.592536][ T7443] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 591.604505][ T7443] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 591.615407][T15208] Failed to initialize the IGMP autojoin socket (err -2) [ 591.648193][ T7443] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 591.658119][ T7443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.771973][T15214] bond7: (slave geneve3): making interface the new active one [ 591.789736][T15214] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 591.839703][ T7443] usb 7-1: Product: syz [ 591.848524][ T7443] usb 7-1: Manufacturer: syz [ 591.857126][ T7443] usb 7-1: SerialNumber: syz [ 591.945836][ T29] audit: type=1400 audit(3933185167.354:2302): avc: denied { write } for pid=15222 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.131512][ T7443] usb 7-1: Unsupported UAC3 BADD profile [ 592.223020][ T7443] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 592.260906][ T7454] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 592.262525][ T7443] usb 7-1: USB disconnect, device number 91 [ 592.422358][ T7454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.439882][ T7432] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 592.453696][ T7454] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 592.463272][ T7454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.485912][ T7454] usb 3-1: config 0 descriptor?? [ 592.519348][ T29] audit: type=1400 audit(3933185167.934:2303): avc: denied { write } for pid=15229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.589346][ T7432] usb 9-1: Using ep0 maxpacket: 32 [ 592.600106][ T7432] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.611736][ T7432] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 592.621602][ T7432] usb 9-1: config 0 interface 0 has no altsetting 0 [ 592.630192][ T7432] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 592.641801][ T7432] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.650652][ T29] audit: type=1400 audit(3933185168.054:2304): avc: denied { write } for pid=15242 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.673648][ T7432] usb 9-1: Product: syz [ 592.679896][ T7432] usb 9-1: Manufacturer: syz [ 592.693324][ T7432] usb 9-1: SerialNumber: syz [ 592.710938][ T7432] usb 9-1: config 0 descriptor?? [ 592.721359][ T7454] usbhid 3-1:0.0: can't add hid device: -71 [ 592.743168][ T7454] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 592.778979][ T7454] usb 3-1: USB disconnect, device number 108 [ 593.001313][T15251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.034472][T15251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.148959][ T5734] net_ratelimit: 3 callbacks suppressed [ 593.148975][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.189550][ T7432] gs_usb 9-1:0.0: Couldn't send data format (err=-71) [ 593.209638][ T7432] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 593.242219][ T7432] usb 9-1: USB disconnect, device number 17 [ 593.260484][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2130'. [ 593.271463][ T7454] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 593.370797][ T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.379889][ T5613] Bluetooth: hci6: command tx timeout [ 593.428750][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.459408][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.545334][ T29] audit: type=1400 audit(3933185168.954:2305): avc: denied { write } for pid=15248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.615395][ T7454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.667021][ T7454] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 593.677440][T13413] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 593.713119][ T7454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.750583][ T7454] usb 3-1: config 0 descriptor?? [ 593.782048][T15289] kvm: pic: level sensitive irq not supported [ 593.783361][T15289] kvm: pic: level sensitive irq not supported [ 593.803973][T15289] kvm: pic: level sensitive irq not supported [ 593.820026][ T29] audit: type=1400 audit(3933185169.224:2306): avc: denied { write } for pid=15287 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.857955][T15289] kvm: pic: level sensitive irq not supported [ 593.859400][T13413] usb 7-1: device descriptor read/64, error -71 [ 593.954067][T15288] /dev/sg0: Can't lookup blockdev [ 594.118334][T13413] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 594.176547][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.189305][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.207914][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.235958][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.359011][T13413] usb 7-1: device descriptor read/64, error -71 [ 594.806424][T15302] Failed to initialize the IGMP autojoin socket (err -2) [ 595.452410][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.468606][ T5613] Bluetooth: hci6: command tx timeout [ 595.490724][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.583857][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 595.590697][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.602614][T13413] usb usb7-port1: attempt power cycle [ 595.635964][T15301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.655231][T15301] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 595.747369][T15301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.765628][T15301] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 595.863959][ T29] audit: type=1400 audit(3933185171.264:2307): avc: denied { write } for pid=15294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.948515][T13413] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 595.999116][T13413] usb 7-1: device descriptor read/8, error -71 [ 596.023012][ T7454] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 596.043184][ T7454] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 596.077199][ T29] audit: type=1400 audit(3933185171.484:2308): avc: denied { ioctl } for pid=15317 comm="syz.8.2140" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 596.166968][ T29] audit: type=1400 audit(3933185171.504:2309): avc: denied { write } for pid=15316 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.238561][T13413] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 596.390292][ T7454] usb 3-1: USB disconnect, device number 109 [ 596.396361][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 596.499101][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.507247][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.543374][T13413] usb 7-1: device not accepting address 95, error -71 [ 596.564855][T13413] usb usb7-port1: unable to enumerate USB device [ 597.004970][T15327] netlink: 'syz.6.2141': attribute type 10 has an invalid length. [ 597.446128][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.629349][T15338] overlay: Bad value for 'nfs_export' [ 597.669660][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 597.684599][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 597.694783][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 597.707814][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 597.716187][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 597.723216][T13413] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 597.762126][T13934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 597.775067][T13934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 597.786498][T13934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 597.803474][T13934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 597.812176][T13934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 597.893245][T15336] Failed to initialize the IGMP autojoin socket (err -2) [ 597.899700][T13413] usb 7-1: Using ep0 maxpacket: 16 [ 597.925367][T13413] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 597.949627][T13413] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 597.968828][ T29] audit: type=1400 audit(3933185173.374:2310): avc: denied { write } for pid=15323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.008949][T13413] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 598.039260][T13413] usb 7-1: config 0 interface 0 has no altsetting 0 [ 598.081834][T13413] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 598.124250][T13413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.163245][T13413] usb 7-1: Product: syz [ 598.209612][T13413] usb 7-1: Manufacturer: syz [ 598.232969][ T29] audit: type=1400 audit(3933185173.644:2311): avc: denied { write } for pid=15352 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.258731][T13413] usb 7-1: SerialNumber: syz [ 598.274814][T13413] usb 7-1: config 0 descriptor?? [ 598.491555][T13413] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input46 [ 598.512345][ T4963] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 598.536269][ T4963] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 598.578469][ T4963] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 598.579711][T11255] net_ratelimit: 1 callbacks suppressed [ 598.579724][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.620228][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.649024][ T4963] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 598.723556][ T7432] usb 7-1: USB disconnect, device number 96 [ 598.923944][T14594] usb 6-1: reset high-speed USB device number 93 using dummy_hcd [ 599.087354][ T29] audit: type=1400 audit(3933185174.494:2312): avc: denied { write } for pid=15356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.151729][T14594] usb 6-1: device descriptor read/64, error -32 [ 599.299204][ T29] audit: type=1400 audit(3933185174.704:2313): avc: denied { write } for pid=15374 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.438389][T14594] usb 6-1: reset high-speed USB device number 93 using dummy_hcd [ 599.512436][T15379] pic_ioport_write: 10 callbacks suppressed [ 599.512453][T15379] kvm: pic: single mode not supported [ 599.519007][T15379] kvm: pic: level sensitive irq not supported [ 599.555082][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.556433][T15379] kvm: pic: single mode not supported [ 599.590641][T14594] usb 6-1: device descriptor read/64, error -32 [ 599.605951][T15379] kvm: pic: single mode not supported [ 599.606108][T15379] kvm: pic: single mode not supported [ 599.635414][T15379] kvm: pic: single mode not supported [ 599.655289][T15379] kvm: pic: single mode not supported [ 599.661301][T15379] kvm: pic: level sensitive irq not supported [ 599.679874][T15379] kvm: pic: single mode not supported [ 599.685992][T15379] kvm: pic: level sensitive irq not supported [ 599.692062][T15379] kvm: pic: single mode not supported [ 599.706915][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.735530][T15379] kvm: pic: single mode not supported [ 599.735547][T15379] kvm: pic: level sensitive irq not supported [ 599.843404][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.877574][T13934] Bluetooth: hci6: command tx timeout [ 599.900916][T15379] kvm: pic: single mode not supported [ 599.930275][T14594] usb 6-1: reset high-speed USB device number 93 using dummy_hcd [ 600.089326][T14594] usb 6-1: device descriptor read/8, error -32 [ 600.283566][T15384] Mass Storage Function, version: 2009/09/11 [ 600.290622][T15384] LUN: removable file: (no medium) [ 600.297363][ T29] audit: type=1400 audit(3933185175.694:2314): avc: denied { write } for pid=15383 comm="syz.2.2148" name="functions" dev="configfs" ino=16101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 600.329162][T14594] usb 6-1: reset high-speed USB device number 93 using dummy_hcd [ 600.368959][ T29] audit: type=1400 audit(3933185175.754:2315): avc: denied { write } for pid=15383 comm="syz.2.2148" name="mass_storage.0" dev="configfs" ino=59169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 600.450067][T14594] usb 6-1: device descriptor read/8, error -32 [ 600.466799][ T29] audit: type=1400 audit(3933185175.754:2316): avc: denied { remove_name } for pid=15383 comm="syz.2.2148" name="lun.0" dev="configfs" ino=59170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 600.605155][T14594] raw-gadget.1 gadget.5: failed to queue suspend event [ 600.715671][ T5734] usb 6-1: USB disconnect, device number 93 [ 600.847941][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.063133][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.584278][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 601.584293][ T29] audit: type=1400 audit(3933185176.994:2318): avc: denied { write } for pid=15381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.733470][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 601.826627][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 601.861608][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.899359][ T29] audit: type=1400 audit(3933185177.304:2319): avc: denied { write } for pid=15414 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.930247][ T5734] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 601.940707][T13934] Bluetooth: hci6: command tx timeout [ 601.952029][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 601.959430][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 602.009382][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2153'. [ 602.025405][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2153'. [ 602.039761][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 602.052087][T15416] openvswitch: netlink: IP tunnel dst address not specified [ 602.061733][T15416] netlink: 19 bytes leftover after parsing attributes in process `syz.8.2153'. [ 602.072736][T15416] netlink: 19 bytes leftover after parsing attributes in process `syz.8.2153'. [ 602.108685][ T5734] usb 6-1: device descriptor read/64, error -32 [ 602.248633][ T5734] raw-gadget.1 gadget.5: failed to queue suspend event [ 602.262451][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 602.372940][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 602.407591][T15433] binder: 15432:15433 ioctl c0306201 200000000080 returned -14 [ 602.448933][ T5734] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 602.483556][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 602.499509][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 602.508326][ T7432] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 602.652252][ T29] audit: type=1400 audit(3933185178.054:2320): avc: denied { listen } for pid=15437 comm="syz.2.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 602.681762][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 602.688705][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.758665][ T5734] usb 6-1: device descriptor read/64, error -32 [ 602.886080][ T29] audit: type=1400 audit(3933185178.264:2321): avc: denied { write } for pid=15420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.919866][ T5734] raw-gadget.1 gadget.5: failed to queue suspend event [ 602.928954][ T7432] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.948409][ T5734] usb usb6-port1: attempt power cycle [ 602.953844][ T7432] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 602.970506][ T5734] raw-gadget.1 gadget.5: failed to queue disconnect event [ 602.977258][ T29] audit: type=1400 audit(3933185178.384:2322): avc: denied { write } for pid=15448 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.988810][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 603.006831][ T7432] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 603.048488][ T7432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.129459][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 603.159951][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 603.279261][ T7432] cxacru 7-1:1.0: receive of cm 0x90 failed (-71) [ 603.308295][ T7432] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 603.325097][ T7432] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 603.362121][ T7432] usb 7-1: USB disconnect, device number 97 [ 603.384756][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.398654][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.399306][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 603.422755][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.432840][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.446627][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.479916][ T5734] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 603.481598][T15462] Failed to initialize the IGMP autojoin socket (err -2) [ 603.506198][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 603.513510][ T5734] usb 6-1: device descriptor read/8, error -32 [ 603.602683][ T29] audit: type=1400 audit(3933185179.014:2323): avc: denied { write } for pid=15451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.632883][ T5734] raw-gadget.1 gadget.5: failed to queue suspend event [ 603.651208][ T5734] raw-gadget.1 gadget.5: failed to queue reset event [ 603.701240][ T7454] net_ratelimit: 3 callbacks suppressed [ 603.701253][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.716984][ T29] audit: type=1400 audit(3933185179.114:2324): avc: denied { write } for pid=15474 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.762151][ T5734] raw-gadget.1 gadget.5: failed to queue resume event [ 603.848666][ T5734] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 603.879504][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 603.889345][ T5734] usb 6-1: device descriptor read/8, error -32 [ 603.940080][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.950172][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.009810][ T5734] raw-gadget.1 gadget.5: failed to queue suspend event [ 604.033338][ T5734] usb usb6-port1: unable to enumerate USB device [ 604.358370][ T7454] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 604.483657][ T29] audit: type=1400 audit(3933185179.894:2325): avc: denied { write } for pid=15477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 604.547906][ T29] audit: type=1400 audit(3933185179.954:2326): avc: denied { write } for pid=15502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 604.591492][ T7454] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 604.600831][ T7454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.611410][T15500] Failed to initialize the IGMP autojoin socket (err -2) [ 604.620835][ T7454] usb 3-1: Product: syz [ 604.626268][ T7454] usb 3-1: Manufacturer: syz [ 604.651398][ T7454] usb 3-1: SerialNumber: syz [ 604.673591][ T7454] usb 3-1: config 0 descriptor?? [ 604.983984][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.990351][ T7454] usb 3-1: ignoring: probably an ADSL modem [ 605.108400][ T5792] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 605.149436][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.242564][T15528] tmpfs: Bad value for 'nr_inodes' [ 605.280576][ T5792] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 605.300852][T15531] dlm: no locking on control device [ 605.304805][ T5792] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.330088][ T5792] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 605.342933][ T5792] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 605.367834][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.389295][ T5792] usb 7-1: Product: syz [ 605.396006][ T5792] usb 7-1: Manufacturer: syz [ 605.403569][T15534] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2169'. [ 605.406943][ T5792] usb 7-1: SerialNumber: syz [ 605.446078][ T5792] usb 7-1: config 0 descriptor?? [ 605.462063][T15511] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 605.538905][T13934] Bluetooth: hci6: command tx timeout [ 605.700650][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.808720][ T188] usb 7-1: USB disconnect, device number 98 [ 606.019660][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.278886][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.595059][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 606.595075][ T29] audit: type=1400 audit(3933185182.004:2331): avc: denied { write } for pid=15560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.608178][T15577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2174'. [ 606.782900][ T29] audit: type=1400 audit(3933185182.194:2332): avc: denied { write } for pid=15581 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.069282][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.244903][ T5734] libceph: ceph_tcp_connect failed: -2 [ 607.258260][ T5734] libceph: mon0 (2)0.0.0.0:6789 connect error [ 607.269732][ T5734] libceph: ceph_tcp_connect failed: -2 [ 607.283396][ T5734] libceph: mon0 (2)0.0.0.0:6789 connect error [ 607.305954][ T7454] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 607.327796][ T7454] usb 3-1: USB disconnect, device number 110 [ 607.440084][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.474227][ T29] audit: type=1400 audit(3933185182.884:2333): avc: denied { write } for pid=15590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.558718][ T5734] libceph: ceph_tcp_connect failed: -2 [ 607.564290][ T5734] libceph: mon0 (2)0.0.0.0:6789 connect error [ 607.584202][ T29] audit: type=1400 audit(3933185182.994:2334): avc: denied { write } for pid=15602 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.703868][T15610] netlink: 'syz.8.2177': attribute type 3 has an invalid length. [ 607.727892][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2177'. [ 607.830140][ T29] audit: type=1400 audit(3933185183.234:2335): avc: denied { setopt } for pid=15616 comm="syz.2.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 608.078577][ T7443] libceph: ceph_tcp_connect failed: -2 [ 608.113942][ T7443] libceph: mon0 (2)0.0.0.0:6789 connect error [ 608.348906][T15585] ceph: No mds server is up or the cluster is laggy [ 608.597566][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 608.611684][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 608.635144][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 608.647125][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 608.665749][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 608.738668][ T188] net_ratelimit: 2 callbacks suppressed [ 608.738686][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.883944][T15623] Failed to initialize the IGMP autojoin socket (err -2) [ 609.338266][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.470512][ T29] audit: type=1400 audit(3933185184.874:2336): avc: denied { write } for pid=15615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.649507][ T29] audit: type=1400 audit(3933185184.994:2337): avc: denied { map } for pid=15635 comm="syz.2.2182" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 609.721635][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.279118][T15653] netlink: 284 bytes leftover after parsing attributes in process `syz.8.2184'. [ 610.341031][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.352885][T15661] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 610.361891][T15661] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 610.375653][ T29] audit: type=1400 audit(3933185185.744:2338): avc: denied { write } for pid=15659 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.470514][T15662] hsr0: entered promiscuous mode [ 610.524305][T15662] hsr0: left promiscuous mode [ 610.595709][T15670] VFS: file-max limit 0 reached [ 610.881828][T15682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.891391][ T7454] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 610.899174][T13934] Bluetooth: hci6: command tx timeout [ 610.920000][T15682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.929324][T11252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.989378][ T29] audit: type=1400 audit(3933185186.404:2339): avc: denied { write } for pid=15667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.038345][ T7454] usb 3-1: device descriptor read/64, error -71 [ 611.108728][ T5608] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 611.153378][ T29] audit: type=1400 audit(3933185186.564:2340): avc: denied { write } for pid=15691 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.222762][T15693] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2192'. [ 611.367999][ T7454] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 611.437974][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.464046][ T5608] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 611.491918][ T5608] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 611.532872][ T5608] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 611.552588][ T5608] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.578425][ T5608] usb 9-1: Product: syz [ 611.590365][ T7454] usb 3-1: device descriptor read/64, error -71 [ 611.596854][ T5608] usb 9-1: Manufacturer: syz [ 611.610897][ T5608] usb 9-1: SerialNumber: syz [ 611.640652][ T5608] usb 9-1: config 0 descriptor?? [ 611.654007][T15683] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22 [ 611.669740][T15683] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22 [ 611.709961][ T7454] usb usb3-port1: attempt power cycle [ 611.778975][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.892466][T15682] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22 [ 611.911488][T15682] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22 [ 612.059582][ T7454] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 612.100680][ T7454] usb 3-1: device descriptor read/8, error -71 [ 612.129122][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.162704][ T29] audit: type=1400 audit(3933185187.574:2341): avc: denied { write } for pid=15697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.346939][ T29] audit: type=1400 audit(3933185187.754:2342): avc: denied { write } for pid=15717 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.377388][ T7454] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 612.387837][ T5608] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 612.410703][ T7454] usb 3-1: device descriptor read/8, error -71 [ 612.518573][ T7454] usb usb3-port1: unable to enumerate USB device [ 612.822779][ T29] audit: type=1400 audit(3933185188.234:2343): avc: denied { write } for pid=15728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.903328][ T29] audit: type=1400 audit(3933185188.314:2344): avc: denied { write } for pid=15739 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.978460][ T7454] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 612.993668][ T5608] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 613.018026][ T5608] dm9601 9-1:0.0 eth17: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, 02:16:df:a3:95:c1 [ 613.034429][ T5608] usb 9-1: USB disconnect, device number 18 [ 613.044853][ T5608] dm9601 9-1:0.0 eth17: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 613.139344][ T7454] usb 7-1: Using ep0 maxpacket: 32 [ 613.146471][ T7454] usb 7-1: unable to get BOS descriptor or descriptor too short [ 613.157580][ T7454] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 613.174595][ T7454] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 613.183175][ T7454] usb 7-1: config 14 has no interface number 0 [ 613.190141][ T7454] usb 7-1: config 14 has no interface number 1 [ 613.196454][ T7454] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 613.207759][ T7454] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 613.221766][ T29] audit: type=1400 audit(3933185188.634:2345): avc: denied { write } for pid=15742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.247240][ T7454] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 613.261680][ T7454] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 613.287709][ T7454] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 613.314003][ T7454] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.327731][ T7454] usb 7-1: config 14 interface 57 has no altsetting 0 [ 613.337613][ T7454] usb 7-1: config 14 interface 228 has no altsetting 0 [ 613.354521][ T7454] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 613.372649][ T7454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.380030][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2198'. [ 613.388492][ T7454] usb 7-1: Product: syz [ 613.396907][ T7454] usb 7-1: Manufacturer: syz [ 613.407301][ T7454] usb 7-1: SerialNumber: syz [ 613.415114][ T29] audit: type=1400 audit(3933185188.824:2346): avc: denied { write } for pid=15754 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.456814][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 613.484122][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 613.492347][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 613.500449][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 613.509587][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 613.546849][T15759] Failed to initialize the IGMP autojoin socket (err -2) [ 613.554322][ T29] audit: type=1400 audit(3933185188.894:2347): avc: denied { append } for pid=15762 comm="syz.7.2199" name="dvr0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 613.604992][ T29] audit: type=1804 audit(3933185189.014:2348): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2199" name="/newroot/93/file0" dev="tmpfs" ino=507 res=1 errno=0 [ 613.940445][ C1] net_ratelimit: 4 callbacks suppressed [ 613.940462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.980262][ T7454] legousbtower 7-1:14.57: interrupt endpoints not found [ 614.088166][ T7443] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 614.336640][ T7454] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 614.369731][ T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.777339][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.783254][ T7454] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 614.819366][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.842271][T15778] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2202'. [ 614.880139][T15778] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2202'. [ 614.956828][ T7443] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 615.011849][ T7443] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 615.033847][ T7443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.049285][ T7443] usb 9-1: Product: syz [ 615.053552][ T7443] usb 9-1: Manufacturer: syz [ 615.063528][ T7443] usb 9-1: SerialNumber: syz [ 615.078094][ T7443] usb 9-1: config 0 descriptor?? [ 615.196194][ T29] audit: type=1400 audit(3933185190.594:2349): avc: denied { write } for pid=15779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.291277][ T7443] usb 9-1: USB disconnect, device number 19 [ 615.298535][ T29] audit: type=1400 audit(3933185190.704:2350): avc: denied { write } for pid=15798 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.540900][ T5613] Bluetooth: hci6: command tx timeout [ 615.578440][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.780108][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.354040][ T7432] usb 7-1: USB disconnect, device number 99 [ 616.397021][ T7432] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 616.818574][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.828806][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.998679][ T7454] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 617.174763][ T7454] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 617.212872][ T7454] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.246904][ T7454] usb 9-1: config 0 descriptor?? [ 617.771583][T15868] Failed to initialize the IGMP autojoin socket (err -2) [ 618.170433][ T5613] Bluetooth: hci6: command tx timeout [ 618.171008][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.183935][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.188891][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2215'. [ 618.420902][ T7454] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 618.636942][ T7454] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 618.658585][ T7454] [drm] Initialized udl on minor 2 [ 618.701477][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 618.701492][ T29] audit: type=1400 audit(3933185194.114:2356): avc: denied { write } for pid=15859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.823950][ T7454] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 618.849397][ T7454] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 618.930329][ T29] audit: type=1400 audit(3933185194.344:2357): avc: denied { write } for pid=15884 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.029128][ T7454] usb 9-1: USB disconnect, device number 20 [ 619.035223][ T5608] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 619.064467][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.065752][ C1] net_ratelimit: 1 callbacks suppressed [ 619.065765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.080085][ T5608] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 619.232969][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.272325][ T29] audit: type=1400 audit(3933185194.684:2358): avc: denied { read } for pid=15890 comm="syz.6.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 619.326346][T15895] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2220'. [ 619.363034][T15897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15897 comm=syz.2.2217 [ 619.516920][ T29] audit: type=1400 audit(3933185194.924:2359): avc: denied { write } for pid=15889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.617578][ T29] audit: type=1400 audit(3933185195.024:2360): avc: denied { write } for pid=15906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.845396][ T29] audit: type=1400 audit(3933185195.254:2361): avc: denied { write } for pid=15909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.904819][ T29] audit: type=1400 audit(3933185195.314:2362): avc: denied { write } for pid=15920 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.989823][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.146313][ T29] audit: type=1400 audit(3933185195.554:2363): avc: denied { write } for pid=15923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.236055][ T29] audit: type=1400 audit(3933185195.644:2364): avc: denied { ioctl } for pid=15936 comm="syz.2.2223" path="socket:[65131]" dev="sockfs" ino=65131 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 620.268196][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.279392][T15937] netlink: 'syz.2.2223': attribute type 83 has an invalid length. [ 620.347312][ T29] audit: type=1400 audit(3933185195.684:2365): avc: denied { write } for pid=15935 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.613543][T13934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 620.633347][T13934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 620.643411][T13934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 620.651560][T13934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 620.671509][T13934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 620.773339][T15960] Failed to initialize the IGMP autojoin socket (err -2) [ 621.119653][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.218402][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.299017][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.349628][ T5735] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 621.528372][ T5735] usb 9-1: Using ep0 maxpacket: 16 [ 621.549796][ T5735] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.586664][ T5735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 621.595326][ T5735] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 621.617599][ T5735] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.651735][ T5735] usb 9-1: config 0 descriptor?? [ 622.291483][ T8305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.322151][ T5735] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 622.420217][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.657223][ T5734] hid_parser_main: 1 callbacks suppressed [ 622.657242][ T5734] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 622.818845][ T5613] Bluetooth: hci6: command tx timeout [ 622.903424][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.191072][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2239'. [ 623.349759][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2240'. [ 623.384582][T16040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16040 comm=syz.2.2240 [ 623.548433][T13655] usb 7-1: new full-speed USB device number 100 using dummy_hcd [ 623.747233][T13655] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 623.757251][T13655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.766106][T13655] usb 7-1: Product: syz [ 623.771695][T13655] usb 7-1: Manufacturer: syz [ 623.776421][T13655] usb 7-1: SerialNumber: syz [ 623.797331][T13655] usb 7-1: config 0 descriptor?? [ 623.856072][T13655] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 623.888186][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 623.905339][ T29] audit: type=1400 audit(3933185199.294:2375): avc: denied { write } for pid=16051 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.077366][T16035] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16035 comm=syz.6.2239 [ 624.233110][T13655] gspca_m5602: Failed to find a sensor [ 624.246949][T13655] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 624.263683][ T188] net_ratelimit: 2 callbacks suppressed [ 624.263696][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.267588][T13655] usb 7-1: USB disconnect, device number 100 [ 624.498942][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.561663][ T29] audit: type=1400 audit(3933185199.974:2376): avc: denied { write } for pid=16054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.598762][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.916484][ T5613] Bluetooth: hci6: command tx timeout [ 624.921112][ T29] audit: type=1400 audit(3933185200.334:2377): avc: denied { write } for pid=16066 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.205377][T16073] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 625.316877][T16073] 8021q: adding VLAN 0 to HW filter on device bond5 [ 625.342231][ T29] audit: type=1400 audit(3933185200.744:2378): avc: denied { map } for pid=16079 comm="syz.7.2244" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 625.431092][ T29] audit: type=1400 audit(3933185200.744:2379): avc: denied { execute } for pid=16079 comm="syz.7.2244" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 625.538473][T13655] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 625.567310][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.595577][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2244'. [ 625.708835][T13655] usb 3-1: device descriptor read/64, error -71 [ 625.959656][T13655] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 625.968701][ T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.066203][ T29] audit: type=1400 audit(3933185201.474:2380): avc: denied { write } for pid=16085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.118763][T13655] usb 3-1: device descriptor read/64, error -71 [ 626.139645][ T29] audit: type=1400 audit(3933185201.554:2381): avc: denied { write } for pid=16103 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.249034][T13655] usb usb3-port1: attempt power cycle [ 626.399995][ T29] audit: type=1400 audit(3933185201.814:2382): avc: denied { write } for pid=16106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.456696][ T29] audit: type=1400 audit(3933185201.864:2383): avc: denied { write } for pid=16117 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.579083][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.598529][T13655] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 626.623652][T13655] usb 3-1: device descriptor read/8, error -71 [ 626.726403][ T29] audit: type=1400 audit(3933185202.134:2384): avc: denied { write } for pid=16120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.888294][T13655] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 626.934702][T13655] usb 3-1: device descriptor read/8, error -71 [ 626.992076][T13934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 627.004177][T13934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 627.017064][T13934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 627.030386][T13934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 627.038147][T13934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 627.070747][T13655] usb usb3-port1: unable to enumerate USB device [ 627.086001][ T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.092925][T16145] Failed to initialize the IGMP autojoin socket (err -2) [ 627.299588][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.628769][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.710276][ T5734] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 627.824802][T16172] fido_id[16172]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 627.833675][ T5734] usb 9-1: USB disconnect, device number 21 [ 627.988153][T16179] bridge1: entered promiscuous mode [ 627.996306][T16179] bridge1: entered allmulticast mode [ 628.005763][T16179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=16179 comm=syz.8.2251 [ 628.019995][T16179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16179 comm=syz.8.2251 [ 628.238803][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.631895][T16214] netlink: 'syz.6.2256': attribute type 1 has an invalid length. [ 628.735856][T16214] 8021q: adding VLAN 0 to HW filter on device bond6 [ 628.814919][T16216] bond1: (slave veth0_to_bond): Releasing backup interface [ 629.058565][T13934] Bluetooth: hci6: command tx timeout [ 629.116225][T16216] bond6: (slave veth0_to_bond): making interface the new active one [ 629.134935][T16216] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 629.348675][ T8304] net_ratelimit: 1 callbacks suppressed [ 629.348711][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.566885][T16217] bond6: entered promiscuous mode [ 629.584933][T16217] veth0_to_bond: entered promiscuous mode [ 629.605296][T16217] bond6: entered allmulticast mode [ 629.626719][T16217] veth0_to_bond: entered allmulticast mode [ 629.785707][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.338781][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.580241][T11252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.725108][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 630.725129][ T29] audit: type=1400 audit(3933185206.034:2504): avc: denied { write } for pid=16237 comm="syz.7.2260" name="cluster" dev="configfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 630.838276][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.989369][ T29] audit: type=1400 audit(3933185206.384:2505): avc: denied { write } for pid=16222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.226951][T13934] Bluetooth: hci6: command tx timeout [ 631.331065][T16246] bond1: option lacp_rate: invalid value (2) [ 631.381161][T16246] bond1 (unregistering): Released all slaves [ 631.401245][ T29] audit: type=1400 audit(3933185206.814:2506): avc: denied { write } for pid=16252 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.727844][T16265] netlink: 21 bytes leftover after parsing attributes in process `syz.8.2265'. [ 631.783474][T11252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.868952][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.010041][T16277] tap0: tun_chr_ioctl cmd 1074025677 [ 632.042115][T16277] tap0: linktype set to 768 [ 632.214084][T16283] tap0: tun_chr_ioctl cmd 1074025672 [ 632.221899][T16283] tap0: ignored: set checksum disabled [ 632.499086][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.566743][T16283] Failed to initialize the IGMP autojoin socket (err -2) [ 632.911905][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.943214][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.405999][ T29] audit: type=1400 audit(3933185208.804:2507): avc: denied { write } for pid=16263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.466568][T16317] dlm: Unknown command passed to DLM device : 133 [ 633.466568][T16317] [ 633.749483][ T29] audit: type=1400 audit(3933185209.164:2508): avc: denied { write } for pid=16320 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.778942][ T30] INFO: task kworker/1:15:8259 blocked for more than 143 seconds. [ 633.801612][ T30] Tainted: G L syzkaller #0 [ 633.815788][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.826508][ T30] task:kworker/1:15 state:D stack:21112 pid:8259 tgid:8259 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 633.838873][ T30] Workqueue: usb_hub_wq hub_event [ 633.844058][ T30] Call Trace: [ 633.848140][ T30] [ 633.851738][ T30] __schedule+0x125c/0x6730 [ 633.856416][ T30] ? __pfx___schedule+0x10/0x10 [ 633.861967][ T30] ? find_held_lock+0x2b/0x80 [ 633.866723][ T30] ? schedule+0x225/0x2c0 [ 633.871841][ T30] schedule+0xdd/0x2c0 [ 633.875987][ T30] schedule_timeout+0x1b2/0x280 [ 633.882898][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 633.889617][ T30] ? mark_held_locks+0x40/0x70 [ 633.894498][ T30] __wait_for_common+0x2e7/0x4c0 [ 633.900429][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 633.905900][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 633.912080][ T30] ? __pfx_device_del+0x10/0x10 [ 633.965367][ T30] ? kobject_put+0xb9/0x640 [ 633.974811][ T30] i2c_del_adapter+0x1d4/0x2d0 [ 633.980241][ T30] dvb_usbv2_exit.isra.0+0x4aa/0xb70 [ 633.985654][ T30] dvb_usbv2_probe+0x669/0x970 [ 633.990837][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 633.996206][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 634.002309][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 634.007585][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 634.014019][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 634.021059][ T30] usb_probe_interface+0x303/0x8f0 [ 634.026299][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 634.033999][ T30] really_probe+0x241/0xa60 [ 634.039137][ T30] __driver_probe_device+0x20e/0x450 [ 634.044504][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.050798][ T30] driver_probe_device+0x4a/0x140 [ 634.057054][ T30] __device_attach_driver+0x1df/0x320 [ 634.063624][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 634.070089][ T30] bus_for_each_drv+0x159/0x1e0 [ 634.075028][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 634.084938][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 634.090467][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 634.096371][ T30] __device_attach+0x1e4/0x4d0 [ 634.101884][ T30] ? __pfx___device_attach+0x10/0x10 [ 634.107252][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 634.113564][ T30] device_initial_probe+0xaf/0xd0 [ 634.118948][ T30] bus_probe_device+0x64/0x160 [ 634.123799][ T30] device_add+0x121d/0x1970 [ 634.128990][ T30] ? __pfx_device_add+0x10/0x10 [ 634.133982][ T30] usb_set_configuration+0xd97/0x1c60 [ 634.140828][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 634.146975][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 634.152844][ T30] usb_probe_device+0xef/0x400 [ 634.158996][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 634.164467][ T30] really_probe+0x241/0xa60 [ 634.169522][ T30] __driver_probe_device+0x20e/0x450 [ 634.174888][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.181220][ T30] driver_probe_device+0x4a/0x140 [ 634.186325][ T30] __device_attach_driver+0x1df/0x320 [ 634.192782][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 634.199223][ T30] bus_for_each_drv+0x159/0x1e0 [ 634.204173][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 634.210307][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 634.215583][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 634.222180][ T30] __device_attach+0x1e4/0x4d0 [ 634.227016][ T30] ? __pfx___device_attach+0x10/0x10 [ 634.227417][ T29] audit: type=1400 audit(3933185209.634:2509): avc: denied { write } for pid=16324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.232709][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 634.262171][ T30] device_initial_probe+0xaf/0xd0 [ 634.267286][ T30] bus_probe_device+0x64/0x160 [ 634.273322][ T30] device_add+0x121d/0x1970 [ 634.278040][ T30] ? __pfx_device_add+0x10/0x10 [ 634.284000][ T30] ? add_device_randomness+0xc9/0x110 [ 634.290018][ T30] usb_new_device.cold+0x685/0x115c [ 634.295328][ T30] ? _mutex_trylock_nest_lock+0x241/0x310 [ 634.301853][ T30] ? do_raw_spin_lock+0x128/0x260 [ 634.307907][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 634.313576][ T30] ? mark_held_locks+0x40/0x70 [ 634.319641][ T30] hub_event+0x30a3/0x4a60 [ 634.324264][ T30] ? __pfx_hub_event+0x10/0x10 [ 634.330139][ T30] ? lock_acquire+0x5e/0x370 [ 634.333833][ T29] audit: type=1400 audit(3933185209.744:2510): avc: denied { write } for pid=16335 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.334809][ T30] ? rcu_is_watching+0x12/0xc0 [ 634.364289][ T30] process_one_work+0xa23/0x1940 [ 634.369643][ T30] ? __pfx_process_one_work+0x10/0x10 [ 634.375223][ T30] ? __pfx_hub_event+0x10/0x10 [ 634.380694][ T30] worker_thread+0x5ef/0xe50 [ 634.385483][ T30] ? __pfx_worker_thread+0x10/0x10 [ 634.391895][ T30] ? kthread+0x13a/0x450 [ 634.396300][ T30] ? __pfx_worker_thread+0x10/0x10 [ 634.401818][ T30] kthread+0x370/0x450 [ 634.405963][ T30] ? __pfx_kthread+0x10/0x10 [ 634.411477][ T30] ret_from_fork+0x72b/0xd50 [ 634.416169][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 634.471922][ T30] ? rcu_is_watching+0x12/0xc0 [ 634.486625][ T30] ? __switch_to+0x800/0x10f0 [ 634.501875][ T30] ? __pfx_kthread+0x10/0x10 [ 634.516809][ T30] ret_from_fork_asm+0x1a/0x30 [ 634.529583][ T30] [ 634.540957][ T30] INFO: task syz.0.1726:13294 blocked for more than 144 seconds. [ 634.563733][ T30] Tainted: G L syzkaller #0 [ 634.579218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.601379][ T30] task:syz.0.1726 state:D stack:27656 pid:13294 tgid:13292 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 634.617451][ T30] Call Trace: [ 634.620879][ T30] [ 634.624680][ T30] __schedule+0x125c/0x6730 [ 634.630216][ T30] ? __pfx___schedule+0x10/0x10 [ 634.635110][ T30] ? find_held_lock+0x2b/0x80 [ 634.639937][ T30] ? schedule+0x225/0x2c0 [ 634.646272][ T30] schedule+0xdd/0x2c0 [ 634.651136][ T30] schedule_preempt_disabled+0x13/0x30 [ 634.658034][ T30] __mutex_lock+0xccc/0x1bd0 [ 634.664248][ T30] ? usb_disconnect+0x10a/0x9a0 [ 634.670276][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 634.676014][ T30] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 634.683590][ T30] ? do_raw_spin_lock+0x128/0x260 [ 634.699184][ T30] ? mark_held_locks+0x40/0x70 [ 634.705434][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.714700][ T30] ? usb_disconnect+0x10a/0x9a0 [ 634.721831][ T30] usb_disconnect+0x10a/0x9a0 [ 634.726596][ T30] usb_remove_hcd.cold+0x1ae/0x401 [ 634.732156][ T30] ? __pfx_usb_remove_hcd+0x10/0x10 [ 634.737414][ T30] dummy_hcd_remove+0x109/0x1e0 [ 634.743863][ T30] ? __pfx_dummy_hcd_remove+0x10/0x10 [ 634.752323][ T30] platform_remove+0x5f/0x80 [ 634.756975][ T30] ? __pfx_platform_remove+0x10/0x10 [ 634.763957][ T30] device_remove+0xcb/0x180 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.776174][ T30] device_release_driver_internal+0x44e/0x620 [ 634.793498][ T29] audit: type=1400 audit(3933185210.204:2511): avc: denied { write } for pid=5593 comm="syz-executor" path="pipe:[4043]" dev="pipefs" ino=4043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 634.829194][ T30] unbind_store+0xf8/0x110 [ 634.833669][ T30] ? __pfx_unbind_store+0x10/0x10 [ 634.842236][ T30] drv_attr_store+0x74/0xb0 [ 634.854368][ T30] ? __pfx_drv_attr_store+0x10/0x10 [ 634.866424][ T30] sysfs_kf_write+0xf2/0x150 [ 634.879292][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 634.926940][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 634.965937][ T30] vfs_write+0x6ac/0x1050 [ 634.994234][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 635.021859][ T30] ? __pfx_vfs_write+0x10/0x10 [ 635.042524][ T5735] net_ratelimit: 3 callbacks suppressed [ 635.042539][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.088353][ T30] ksys_write+0x12a/0x250 [ 635.107706][ T30] ? __pfx_ksys_write+0x10/0x10 [ 635.124231][ T30] ? trace_syscall_enter+0xd9/0x110 [ 635.142756][ T30] do_syscall_64+0x115/0x870 [ 635.157195][ T30] ? clear_bhb_loop+0x40/0x90 [ 635.176228][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.183000][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.189803][ T30] RIP: 0033:0x7f784dd9e019 [ 635.204454][ T30] RSP: 002b:00007f784ec47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.228809][ T30] RAX: ffffffffffffffda RBX: 00007f784e025fa0 RCX: 00007f784dd9e019 [ 635.257610][ T30] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000006 [ 635.273978][ T29] audit: type=1400 audit(3933185210.684:2512): avc: denied { write } for pid=16338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.308308][ T30] RBP: 00007f784de3500c R08: 0000000000000000 R09: 0000000000000000 [ 635.317116][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.338543][ T30] R13: 00007f784e026038 R14: 00007f784e025fa0 R15: 00007fffc730c468 [ 635.349562][ T30] [ 635.358521][ T30] [ 635.358521][ T30] Showing all locks held in the system: [ 635.408445][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 635.416237][ T30] 1 lock held by khungtaskd/30: [ 635.487712][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 635.508326][ T30] 2 locks held by getty/5376: [ 635.518522][ T30] #0: ffff8880349ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 635.534448][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 635.544972][ T30] 4 locks held by udevd/5626: [ 635.549875][ T30] #0: ffff88807664d1b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 635.559113][ T30] #1: ffff888054b3dc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 635.569385][ T30] #2: ffff888080789e18 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 635.579214][ T30] #3: ffff88802dc991d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 635.594464][ T30] 5 locks held by kworker/1:15/8259: [ 635.600042][ T30] #0: ffff888020ec1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 635.611569][ T30] #1: ffffc9000d90fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 635.638317][ T30] #2: ffff88802b0ec1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 635.655842][ T30] #3: ffff88802dc991d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 635.675693][ T30] #4: ffff888034f7e1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 635.686183][ T30] 1 lock held by syz.2.774/9317: [ 635.692222][ T30] #0: ffff8880361a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 635.705451][ T29] audit: type=1400 audit(3933185211.104:2513): avc: denied { write } for pid=16350 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.729898][ T30] 6 locks held by syz.0.1726/13294: [ 635.735113][ T30] #0: ffff88807fb2eb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 635.744308][ T30] #1: ffff888079be6450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.753741][ T30] #2: ffff88805b0e4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.764307][ T30] #3: ffff88802b61d138 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 635.776279][ T30] #4: ffffffff9005bf80 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_remove_hcd.cold+0x190/0x401 [ 635.793303][ T30] #5: ffff88802b0ec1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 635.803349][ T30] 1 lock held by syz-executor/13545: [ 635.809293][ T30] #0: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 635.821058][ T30] 1 lock held by syz.5.2014/14581: [ 635.826206][ T30] #0: ffff88802b0ec1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 635.837407][ T30] 2 locks held by dhcpcd-run-hook/16352: [ 635.878372][ T30] [ 635.895639][ T30] ============================================= [ 635.895639][ T30] [ 635.924788][ T30] NMI backtrace for cpu 0 [ 635.924806][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 635.924830][ T30] Tainted: [L]=SOFTLOCKUP [ 635.924836][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 635.924846][ T30] Call Trace: [ 635.924852][ T30] [ 635.924859][ T30] dump_stack_lvl+0x100/0x190 [ 635.924887][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 635.924907][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.924929][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 635.924956][ T30] sys_info+0x141/0x190 [ 635.924977][ T30] watchdog+0xcb1/0x1030 [ 635.925001][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 635.925019][ T30] ? __pfx_watchdog+0x10/0x10 [ 635.925038][ T30] ? __kthread_parkme+0x18c/0x230 [ 635.925061][ T30] ? kthread+0x13a/0x450 [ 635.925076][ T30] ? __pfx_watchdog+0x10/0x10 [ 635.925092][ T30] kthread+0x370/0x450 [ 635.925106][ T30] ? __pfx_kthread+0x10/0x10 [ 635.925121][ T30] ret_from_fork+0x72b/0xd50 [ 635.925143][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 635.925165][ T30] ? __switch_to+0x800/0x10f0 [ 635.925181][ T30] ? __pfx_kthread+0x10/0x10 [ 635.925196][ T30] ret_from_fork_asm+0x1a/0x30 [ 635.925229][ T30] [ 635.925249][ T30] Sending NMI from CPU 0 to CPUs 1: [ 636.058407][ C1] NMI backtrace for cpu 1 [ 636.058424][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.058443][ C1] Tainted: [L]=SOFTLOCKUP [ 636.058448][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 636.058457][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 636.058478][ C1] Code: 46 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 cf 0f 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 636.058492][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 636.058504][ C1] RAX: 0000000001b55611 RBX: ffff88801eaca540 RCX: ffffffff8bbbd2d5 [ 636.058514][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a810c RDI: ffffffff8c402680 [ 636.058523][ C1] RBP: ffffed1003d594a8 R08: 0000000000000001 R09: ffffed10170a678d [ 636.058532][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 636.058540][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 636.058550][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 636.058564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.058573][ C1] CR2: 00007f0f95b53ff8 CR3: 000000007f946000 CR4: 00000000003526f0 [ 636.058582][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.058590][ C1] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 636.058600][ C1] Call Trace: [ 636.058605][ C1] [ 636.058610][ C1] default_idle+0x9/0x10 [ 636.058628][ C1] default_idle_call+0x6c/0xb0 [ 636.058645][ C1] do_idle+0x3a7/0x5b0 [ 636.058666][ C1] ? __pfx_do_idle+0x10/0x10 [ 636.058686][ C1] cpu_startup_entry+0x4f/0x60 [ 636.058705][ C1] start_secondary+0x21d/0x2d0 [ 636.058723][ C1] ? __pfx_start_secondary+0x10/0x10 [ 636.058742][ C1] common_startup_64+0x13e/0x158 [ 636.058767][ C1] [ 636.391057][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 636.397941][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 636.408616][ T30] Tainted: [L]=SOFTLOCKUP [ 636.412914][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 636.422942][ T30] Call Trace: [ 636.426206][ T30] [ 636.429121][ T30] dump_stack_lvl+0x100/0x190 [ 636.433779][ T30] vpanic+0x552/0x970 [ 636.437733][ T30] ? __pfx_vpanic+0x10/0x10 [ 636.442210][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 636.448365][ T30] panic+0xd1/0xe0 [ 636.452072][ T30] ? __pfx_panic+0x10/0x10 [ 636.456467][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 636.462609][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 636.468756][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 636.474890][ T30] ? watchdog.cold+0x1ec/0x234 [ 636.479625][ T30] ? watchdog+0xcc1/0x1030 [ 636.484015][ T30] watchdog.cold+0x1fd/0x234 [ 636.488579][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 636.494357][ T30] ? __pfx_watchdog+0x10/0x10 [ 636.499016][ T30] ? __kthread_parkme+0x18c/0x230 [ 636.504051][ T30] ? kthread+0x13a/0x450 [ 636.508270][ T30] ? __pfx_watchdog+0x10/0x10 [ 636.512921][ T30] kthread+0x370/0x450 [ 636.516970][ T30] ? __pfx_kthread+0x10/0x10 [ 636.521543][ T30] ret_from_fork+0x72b/0xd50 [ 636.526108][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 636.531196][ T30] ? __switch_to+0x800/0x10f0 [ 636.535845][ T30] ? __pfx_kthread+0x10/0x10 [ 636.540408][ T30] ret_from_fork_asm+0x1a/0x30 [ 636.545154][ T30] [ 636.548446][ T30] Kernel Offset: disabled [ 636.552747][ T30] Rebooting in 86400 seconds..