last executing test programs: 7m33.87250892s ago: executing program 4 (id=355): socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r0, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000060010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 7m33.650070376s ago: executing program 4 (id=358): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7, 0x0, 0x0, 0xffffffa6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 7m32.662873424s ago: executing program 4 (id=363): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x4001) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000069000000000000010000009400f0000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 7m30.343216264s ago: executing program 4 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x39}) (async) r3 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000005c0)={0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x6000]}}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) write(r4, &(0x7f00000002c0)="cb48a537", 0x4) (async) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m29.651710763s ago: executing program 4 (id=371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m28.291768098s ago: executing program 4 (id=382): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0100, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x101, 0x0, 0xc394, 0xfffffffc, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x6, 0x6}, 0x90) (async) r2 = socket(0xa, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @empty}], 0x10) (async) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x20008000}, 0x20004000) 7m27.542069093s ago: executing program 32 (id=382): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0100, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x101, 0x0, 0xc394, 0xfffffffc, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x6, 0x6}, 0x90) (async) r2 = socket(0xa, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @empty}], 0x10) (async) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x20008000}, 0x20004000) 2m31.352662223s ago: executing program 0 (id=1556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x25a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x7) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r3) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x514f, 0xbd44, 0x20, &(0x7f0000000100)={[0x3]}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) write(r4, 0x0, 0x11) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) socket$inet6(0xa, 0x4, 0x40004) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0)={0x77359400}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x23ffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) 2m28.471842869s ago: executing program 0 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m28.39171491s ago: executing program 0 (id=1573): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) close_range(r1, r1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x214, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0x5, 0xfffd}, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008014) accept4(r5, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r6, 0xc058565d, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905780b7f00"], 0x0) 2m26.291433212s ago: executing program 0 (id=1581): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f00000008c0)=ANY=[@ANYBLOB="f515b63c3d7800000000000086dd60000000009c110020010000000000000000000000000102fe8000000000000000000000000000aa00000e22"], 0x0) 2m25.907978796s ago: executing program 0 (id=1583): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x4002, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m25.869788702s ago: executing program 0 (id=1585): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000022500)=[{{&(0x7f00000190c0)=@qipcrtr, 0x80, &(0x7f000001c4c0)=[{&(0x7f0000019140)=""/4096, 0x1000}, {&(0x7f000001a140)=""/244, 0xf4}, {&(0x7f000001a240)=""/152, 0x98}, {&(0x7f0000022740)=""/4096, 0x1000}, {&(0x7f000001b300)=""/40, 0x28}, {&(0x7f000001b340)=""/68, 0x44}, {&(0x7f000001b3c0)=""/4096, 0x1000}, {&(0x7f000001c3c0)=""/245, 0xf5}], 0x8, &(0x7f000001c540)=""/4096, 0x1000}, 0x9d4}, {{&(0x7f000001d540)=@isdn, 0x80, &(0x7f000001d8c0)=[{&(0x7f000001d5c0)=""/159, 0x9f}, {&(0x7f000001d680)=""/192, 0xc0}, {&(0x7f000001d740)=""/8, 0x8}, {&(0x7f000001d780)=""/237, 0xed}, {&(0x7f000001d880)}], 0x5, &(0x7f000001d940)=""/172, 0xac}, 0x10}, {{&(0x7f000001da00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f000001de40)=[{&(0x7f000001da80)=""/33, 0x21}, {&(0x7f000001dac0)=""/22, 0x16}, {&(0x7f000001a440)=""/181, 0xb5}, {&(0x7f000001dd40)=""/108, 0x6c}, {&(0x7f000001dc40)=""/57, 0x39}, {&(0x7f000001dc80)=""/172, 0xac}, {&(0x7f000001dbc0)=""/90, 0x5a}, {&(0x7f000001ddc0)=""/121, 0x79}], 0x8, &(0x7f000001dec0)=""/159, 0x9f}}, {{&(0x7f000001df80)=@ieee802154={0x24, @long}, 0x80, &(0x7f000001e280)=[{&(0x7f000001e000)=""/139, 0x8b}, {&(0x7f000001e0c0)=""/144, 0x90}, {&(0x7f000001e180)=""/5, 0x5}, {&(0x7f000001e1c0)=""/191, 0xbf}], 0x4}, 0x6}, {{&(0x7f000001e2c0)=@hci, 0x80, &(0x7f000001e440), 0x0, &(0x7f000001e480)=""/54, 0x36}}, {{&(0x7f000001e4c0)=@phonet, 0x80, &(0x7f000001fb00)=[{&(0x7f000001e540)=""/211, 0xd3}, {&(0x7f000001e640)=""/4096, 0x1000}, {&(0x7f000001f640)=""/138, 0x8a}, {&(0x7f000001f700)=""/37, 0x25}, {&(0x7f000001f740)=""/126, 0x7e}, {&(0x7f000001f7c0)=""/229, 0xe5}, {&(0x7f000001f8c0)=""/155, 0x9b}, {&(0x7f000001f980)=""/72, 0x48}, {&(0x7f000001a380)=""/38, 0x26}, {&(0x7f000001fa40)=""/192, 0xc0}], 0xa, &(0x7f000001fbc0)=""/39, 0x27}, 0x7}, {{&(0x7f000001fc00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f000001fc80), 0x0, &(0x7f000001fcc0)=""/250, 0xfa}, 0x3}, {{0x0, 0x0, &(0x7f0000020fc0)=[{&(0x7f000001fdc0)=""/201, 0xc9}, {&(0x7f000001fec0)=""/32, 0x20}, {&(0x7f000001ff00)=""/105, 0x69}, {&(0x7f000001ff80)=""/4096, 0x1000}, {&(0x7f0000020f80)=""/22, 0x16}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000022480)=[{&(0x7f00000210c0)=""/4096, 0x1000}, {&(0x7f00000220c0)=""/130, 0x82}, {&(0x7f0000022180)=""/90, 0x5a}, {&(0x7f0000022200)=""/35, 0x23}, {&(0x7f0000022240)=""/231, 0xe7}, {&(0x7f0000022340)=""/148, 0x94}, {&(0x7f000001a300)=""/110, 0x6e}], 0x7}, 0x3}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 2m9.847136508s ago: executing program 33 (id=1585): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000022500)=[{{&(0x7f00000190c0)=@qipcrtr, 0x80, &(0x7f000001c4c0)=[{&(0x7f0000019140)=""/4096, 0x1000}, {&(0x7f000001a140)=""/244, 0xf4}, {&(0x7f000001a240)=""/152, 0x98}, {&(0x7f0000022740)=""/4096, 0x1000}, {&(0x7f000001b300)=""/40, 0x28}, {&(0x7f000001b340)=""/68, 0x44}, {&(0x7f000001b3c0)=""/4096, 0x1000}, {&(0x7f000001c3c0)=""/245, 0xf5}], 0x8, &(0x7f000001c540)=""/4096, 0x1000}, 0x9d4}, {{&(0x7f000001d540)=@isdn, 0x80, &(0x7f000001d8c0)=[{&(0x7f000001d5c0)=""/159, 0x9f}, {&(0x7f000001d680)=""/192, 0xc0}, {&(0x7f000001d740)=""/8, 0x8}, {&(0x7f000001d780)=""/237, 0xed}, {&(0x7f000001d880)}], 0x5, &(0x7f000001d940)=""/172, 0xac}, 0x10}, {{&(0x7f000001da00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f000001de40)=[{&(0x7f000001da80)=""/33, 0x21}, {&(0x7f000001dac0)=""/22, 0x16}, {&(0x7f000001a440)=""/181, 0xb5}, {&(0x7f000001dd40)=""/108, 0x6c}, {&(0x7f000001dc40)=""/57, 0x39}, {&(0x7f000001dc80)=""/172, 0xac}, {&(0x7f000001dbc0)=""/90, 0x5a}, {&(0x7f000001ddc0)=""/121, 0x79}], 0x8, &(0x7f000001dec0)=""/159, 0x9f}}, {{&(0x7f000001df80)=@ieee802154={0x24, @long}, 0x80, &(0x7f000001e280)=[{&(0x7f000001e000)=""/139, 0x8b}, {&(0x7f000001e0c0)=""/144, 0x90}, {&(0x7f000001e180)=""/5, 0x5}, {&(0x7f000001e1c0)=""/191, 0xbf}], 0x4}, 0x6}, {{&(0x7f000001e2c0)=@hci, 0x80, &(0x7f000001e440), 0x0, &(0x7f000001e480)=""/54, 0x36}}, {{&(0x7f000001e4c0)=@phonet, 0x80, &(0x7f000001fb00)=[{&(0x7f000001e540)=""/211, 0xd3}, {&(0x7f000001e640)=""/4096, 0x1000}, {&(0x7f000001f640)=""/138, 0x8a}, {&(0x7f000001f700)=""/37, 0x25}, {&(0x7f000001f740)=""/126, 0x7e}, {&(0x7f000001f7c0)=""/229, 0xe5}, {&(0x7f000001f8c0)=""/155, 0x9b}, {&(0x7f000001f980)=""/72, 0x48}, {&(0x7f000001a380)=""/38, 0x26}, {&(0x7f000001fa40)=""/192, 0xc0}], 0xa, &(0x7f000001fbc0)=""/39, 0x27}, 0x7}, {{&(0x7f000001fc00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f000001fc80), 0x0, &(0x7f000001fcc0)=""/250, 0xfa}, 0x3}, {{0x0, 0x0, &(0x7f0000020fc0)=[{&(0x7f000001fdc0)=""/201, 0xc9}, {&(0x7f000001fec0)=""/32, 0x20}, {&(0x7f000001ff00)=""/105, 0x69}, {&(0x7f000001ff80)=""/4096, 0x1000}, {&(0x7f0000020f80)=""/22, 0x16}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000022480)=[{&(0x7f00000210c0)=""/4096, 0x1000}, {&(0x7f00000220c0)=""/130, 0x82}, {&(0x7f0000022180)=""/90, 0x5a}, {&(0x7f0000022200)=""/35, 0x23}, {&(0x7f0000022240)=""/231, 0xe7}, {&(0x7f0000022340)=""/148, 0x94}, {&(0x7f000001a300)=""/110, 0x6e}], 0x7}, 0x3}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 1m32.320515704s ago: executing program 1 (id=1638): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x20010010, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x34, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ebff25bd70000800000000000008000300d104d05900", @ANYRES32=r8, @ANYBLOB="05001d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4420) shutdown(r2, 0x1) r9 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x18000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='initcall_level\x00'}, 0x18) ioctl$BLKROGET(r9, 0x125e, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m26.440323894s ago: executing program 1 (id=1644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r4, 0xb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 1m23.943675952s ago: executing program 3 (id=1649): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x2, "afd086db"}, @local=@item_012={0x0, 0x2, 0x4}]}}, 0x0}, 0x0) 1m23.694152212s ago: executing program 1 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r4, 0xb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 1m20.50599637s ago: executing program 3 (id=1652): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = io_uring_setup(0x25d8, &(0x7f0000000080)={0x0, 0x4ec4, 0x8000, 0x3, 0x2, 0x0, r0}) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f0000000140)) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 1m19.42283833s ago: executing program 3 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="3c000e0080000000ffffffffffff0802110000007d5d697d41d500000000000000000000640001000301b9040605010300ff7f7107ff000000000361080026006c09000008000c006400000008000d0000"], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x46) 1m19.051902364s ago: executing program 3 (id=1656): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) getsockopt(0xffffffffffffffff, 0x2af, 0x9, &(0x7f0000001100)=""/216, &(0x7f0000001200)=0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000180000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r6, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x82, 0x3) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 1m18.382430726s ago: executing program 1 (id=1658): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000911010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 1m17.801833911s ago: executing program 1 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000010100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 1m17.581954115s ago: executing program 3 (id=1660): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1f}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1m16.593543399s ago: executing program 1 (id=1662): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getpid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x9}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) close(r1) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7f7c}]}) exit(0x6) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x12, 0x7, {0x7, 0x1, "95f48d4e4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m16.500352945s ago: executing program 3 (id=1663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000002a40)={0x1000, r0, 0x180003}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000002b80)={&(0x7f0000002a80), 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="0d052abd7000ffdbdf25160000000c00991100000000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021101000000000a00060008021100000000000a000600080211e9ff0000000a00060008021100000000000a002200ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write(r3, &(0x7f0000000340), 0x11000) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f0426d10a1f863ced625e85d7f9f4af20682"}}, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x21c) 1m1.236648933s ago: executing program 34 (id=1662): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getpid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x9}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) close(r1) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7f7c}]}) exit(0x6) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x12, 0x7, {0x7, 0x1, "95f48d4e4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m1.128730533s ago: executing program 35 (id=1663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000002a40)={0x1000, r0, 0x180003}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000002b80)={&(0x7f0000002a80), 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="0d052abd7000ffdbdf25160000000c00991100000000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021101000000000a00060008021100000000000a000600080211e9ff0000000a00060008021100000000000a002200ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write(r3, &(0x7f0000000340), 0x11000) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f0426d10a1f863ced625e85d7f9f4af20682"}}, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x21c) 8.382437147s ago: executing program 8 (id=1732): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x4001) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000008a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0xfffffffffffffe7c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 8.349148064s ago: executing program 7 (id=1733): socketpair(0x21, 0x1, 0xb, &(0x7f0000000000)) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb0e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r3, &(0x7f0000033240)=""/102386, 0x18ff2, 0x100008) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) 7.267746561s ago: executing program 8 (id=1735): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="9b1d4ee288cf32843178871aff27bf2a3df4ddeab3671ab058b0f9901298e1b55f4eb8b7a7cbce49c098fb446961864d3a456b2dfe023d0fec6d58c08fbe9e8857c6d9378f2d2fe09d24a3f6314ab52dfc2a11c5378005da3071c560806435931d8fd319d6b8dedb9ead091d1aee898d1891bb3302f3783254b0c5572d1e610b78be788811a0a31f3959036fc007e696e1e97e625cb00e8d1cceca5ea87f89a8e06cdd4758e5f8a26d865ca3fe5d8e58f5cadc046fd348fbc464edf2dacbce4379c2f77b"], 0x44}}, 0x0) 6.686715947s ago: executing program 8 (id=1737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bind$inet6(r4, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x2, 0x8, 0x6, 0x7f, 0xb2c, 0x80000000, 0x3ff, 0x710}) mkdir(0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$RTC_VL_CLR(r5, 0x7014) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="9b6c0803ec2e515cc4731772b1a7dd5060e61196dc0e2fbe3a5514fc572f9d30cefeddc0edd7fbbad0c90dd130c853d070aacdca0f9b964534be"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) 6.598077951s ago: executing program 7 (id=1738): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x800, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x400002}, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x8a, 0x31, 0x7c, 0x40, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x8e, 0xd1}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x9b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x54, 0x0, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9cb720"}, {0x5, 0x24, 0x0, 0xf663}, {0xd, 0x24, 0xf, 0x1, 0x5a1a, 0x3ff, 0x8, 0xe6}, {0x6, 0x24, 0x1a, 0x4, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xde54, 0x0, 0x7f, 0x0, 0x9, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x1, 0x80, 0x40}, @country_functional={0x12, 0x24, 0x7, 0xa, 0xb8db, [0x1, 0x4, 0x3b5, 0xc, 0x6d, 0x1ff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x48, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x60, 0x80, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x9, 0x7f}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0x6, 0x80, 0xff, 0x7}, 0x141, &(0x7f0000000140)={0x5, 0xf, 0x141, 0x6, [@ptm_cap={0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x57, 0x2, 0x5, 0xf0f, 0x0, [0xcf, 0x3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0xf00, 0xce54, [0x0, 0xff000f, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0xe, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x7, 0x8001, 0x7f}, @generic={0xf8, 0x10, 0x4, "00f73911c6effacb989d14fe2002cc249f5f059cd9b027a14c57c6143d06da485ddd8716a11d43617812a65489c62941799a98e2708b9150765fc2b6a94bf824a710425d86e83b7499a0e65be388816e50afbdd3e55e8ec662540c84b9db6378dfcae603a919e4e5a68bd299e2a3d61f7928bdd9e1f4a0cdbe4e7c3ff1ef090a0d4a11a0c0b07054df09fc70291e5ebdf147ce69515bf918cfef5db21da7a2638f703e99bee55f9d9a77be0ed013e66f27e498221c0cc917a7ead46c12668b50249284766c79910a0b5c9acf404a5ddb303d3c74557796fcf563a5b59f4209452f6957567feb96de10ae1c35b638d6a6bf9b1f610f"}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x449}}, {0x62, &(0x7f0000000340)=@string={0x62, 0x3, "5bf35c671e9c695e57425c4db0f6e0c65f9f9dd1ff2b0b93561ec8941dadaadd3fd0fb584b5c3971d00c7784b5ab70ca0e21fa610e3057e97dc358603a045cb3a78ba23ad89866f78c15983fea1832ed2273d61c32f640b7588c65a58bc8df55"}}]}) 6.429184385s ago: executing program 5 (id=1739): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000002007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 5.455995217s ago: executing program 5 (id=1740): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe800000000000000000000000003faa140006000000004001f0ffff"], 0x40}}, 0x0) 4.90931775s ago: executing program 5 (id=1741): openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff5e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 4.808410171s ago: executing program 6 (id=1742): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x3, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x101000000, 0x12) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001300)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'pcm3724\x00', [0x0, 0x3, 0x80802, 0x1, 0x2f, 0x81, 0xcc70, 0x5, 0xffe, 0x1, 0x4, 0x1, 0x3, 0x7, 0xffff, 0x10002, 0x7, 0x7ffffffd, 0x1ff, 0x401, 0xbd, 0x0, 0x7fff, 0x2, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x3, 0x8049]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000380800"]) 4.075458216s ago: executing program 7 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x400040) 4.073354253s ago: executing program 2 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000380)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x0, 0x7) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, &(0x7f0000000c40)={[{@uid={'uid', 0x3d, r1}}]}) 3.871817622s ago: executing program 5 (id=1745): bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0200000004000000030000000720000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x50) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a00fffe0900020073797a32000000000900010073797a310000000054000480500001800a00010071756f74610000004000028008000240000000000c000140fffffffffffffffd0c000440000000000000003a"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_open_dev$dri(0x0, 0x1ff, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000000)="06", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x3, 0xd) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0xdab}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) r6 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x1c, r2, 0x605, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x28, r5, 0x605, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x40010) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x7c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20048800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x4040}, 0x4004) close(0x3) 3.399291781s ago: executing program 7 (id=1747): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) getsockopt(0xffffffffffffffff, 0x2af, 0x9, &(0x7f0000001100)=""/216, &(0x7f0000001200)=0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000007070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r6, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x82, 0x3) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 3.127872976s ago: executing program 2 (id=1748): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_emit_ethernet(0x13d, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)={0x0, 0x2, [0x423, 0x6e0, 0x710, 0x488]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x48c59) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x0) 2.971980791s ago: executing program 6 (id=1749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 2.865481675s ago: executing program 6 (id=1750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000066, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x80) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@measure}], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES8=r5], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) waitid(0x1, 0x0, &(0x7f0000000100), 0x80000000, &(0x7f0000000400)) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) futex(&(0x7f0000000540)=0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095ffffffff000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$key(0xf, 0x3, 0x2) 2.385433327s ago: executing program 2 (id=1751): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000040aa140006000000004001f0ffff"], 0x40}}, 0x0) 2.208148885s ago: executing program 7 (id=1752): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0xb9b, "f44e9a065587", @short="93c59cabdf99e1b3"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.047910856s ago: executing program 2 (id=1753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0xfff}, 0xc) 2.039505463s ago: executing program 2 (id=1754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x1fffffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.914748575s ago: executing program 2 (id=1755): io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x22d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000080)={0xf0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r4, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x3a, 0x0, 0x6f5}]}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r11, 0x0, 0xb, 0x0, &(0x7f0000008dc0)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e000709fefffffffcffffff01fc0000040042801c000180100004800c000f0090000000000000000600060088a80000040002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) 1.80375521s ago: executing program 7 (id=1756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone3(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x29}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x60040014, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000100), 0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)="8d8ade225093be72b52c563e53ad4aa877ed583ff732b59391a11e8fac2ae746502e764ed4531111e2ae3fba95257d0619ad8085f47734ffc3a5863cd3a64d1708b5c4f8720d1116bc152f191a67970bf3217b389341e59f28a39f541f67cb80c231ae1f060935c4cf35b46de28f11", 0x6f}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044014) r6 = socket(0x1d, 0x2, 0x6) socket(0x10, 0x803, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00000000000000fffffffe", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 1.667385054s ago: executing program 5 (id=1757): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_emit_ethernet(0x13d, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)={0x0, 0x2, [0x423, 0x6e0, 0x710, 0x488]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, 0x0, 0x48c59) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x0) 1.290483038s ago: executing program 8 (id=1758): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$tun(0xffffffffffffff9c, 0x0, 0x432402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22060400) 1.275271891s ago: executing program 5 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300340427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e00f01002802040027001a800400070004001c000400070004001c0008002900539b030008002e0001000000"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000005700)="37bddd756bc9421f6a6b5f54ebfab222d30bd5f2b4cac394b8fbd34bea7e32dda30e74611a152fefa2b557c57514a3380bb9687398e78c4731f5cef8b412f371c8d82caa22587624f03d1b0386800731701d79921205a6f8409af1857de612bf") bind$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f00000054c0)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002c80)=""/231, 0xe7}}, {{&(0x7f0000001800)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f0000000180)=""/2, 0x2}], 0x1, &(0x7f00000018c0)=""/222, 0xde}, 0x8}, {{&(0x7f00000019c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001a40)=""/23, 0x17}, {&(0x7f0000001a80)=""/4092, 0xffc}, {&(0x7f0000002a80)=""/185, 0xb9}, {&(0x7f0000002b80)=""/12, 0xc}, {&(0x7f0000003280)=""/181, 0xb5}, {&(0x7f0000001700)=""/132, 0x84}, {&(0x7f0000003040)=""/233, 0xe9}, {&(0x7f0000002e00)=""/230, 0xe6}, {&(0x7f0000002f00)=""/77, 0x4d}, {&(0x7f0000005940)=""/232, 0xe8}], 0xa, &(0x7f0000003140)=""/146, 0x92}, 0x5}, {{&(0x7f0000003200)=@ethernet, 0x80, &(0x7f0000003680), 0x6, &(0x7f00000001c0)=""/16, 0x10}, 0x101}, {{&(0x7f0000003740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000037c0)=""/11, 0xb}, {&(0x7f0000003800)=""/221, 0xdd}, {&(0x7f0000003900)=""/219, 0xdb}, {&(0x7f0000003a00)=""/236, 0xec}], 0x4}}, {{&(0x7f0000003b40)=@phonet, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002bc0)=""/182, 0xb6}, {&(0x7f00000050c0)=""/240, 0xf0}, {&(0x7f0000003d80)=""/42, 0x2a}, {&(0x7f0000003dc0)=""/75, 0x4b}], 0x4, &(0x7f0000003e80)=""/98, 0x62}, 0x9}, {{&(0x7f0000003f00)=@phonet, 0x80, &(0x7f0000005200)=[{&(0x7f0000003f80)=""/236, 0xec}, {&(0x7f0000004080)=""/1}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/263, 0x107}, {&(0x7f0000000200)=""/26, 0xa}], 0x5, &(0x7f0000005280)=""/159, 0x9f}, 0x200}, {{&(0x7f0000005340)=@nfc, 0x80, &(0x7f0000005480)=[{&(0x7f00000053c0)=""/44, 0x2c}, {&(0x7f0000005400)=""/84, 0x54}], 0x2}, 0x10000}], 0x8, 0x2000, &(0x7f00000056c0)={0x0, 0x989680}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = io_uring_setup(0x400026ff, &(0x7f00000002c0)={0x0, 0x4, 0x2000, 0x2, 0x396, 0x0, r1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x3, 0xc, 0x0, 0x100}, 0x20) ioctl$I2C_TIMEOUT(r1, 0x702, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x3, 0x75, &(0x7f0000005780)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x8000, 0x5}, {0x6, 0x24, 0x1a, 0x800}, [@dmm={0x7, 0x24, 0x14, 0x800, 0x1ef1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x4, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xd, 0x2, 0x7f}}}}}}}]}}, &(0x7f0000005900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0x6, 0x80, 0x4, 0xd7, 0x2}, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="0500120143e76dfd000000000000000000000000000013a8873eb5ba80964f709674a6038a47181c37db803af192ad0dfd43518beb03995d319d22424a1ddce31eb1716771237e8b382cef184de92d"], 0x2, [{0x76, &(0x7f0000005840)=@string={0x76, 0x3, "68e0be755cd3a6725ea807f256e1dadaaaf5fe13ca2fec66d06d3ffba1311d7171e2470669bbe303d88bb43f98d8e71c37b3e9f2c04928163d4ba5a12a013ef8a500beae880f78d6de846eff0b49ad2797b9f46d7bd8a81a8973494e61cd0d1a53b4eed5692769ae1c283973a96355713ec5dd27"}}, {0x4, &(0x7f00000058c0)=@lang_id={0x4, 0x3, 0x100c}}]}) 1.206756718s ago: executing program 6 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 399.747304ms ago: executing program 6 (id=1761): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x44, &(0x7f0000000280)=""/68, 0x40f00, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0x8000, 0x80}, 0x10, 0x319a, r3, 0x2, &(0x7f0000000380)=[r2, r0, r0], &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xc}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x3ff}, 0x94) cachestat(r5, &(0x7f0000000440)={0xa, 0x1ff}, &(0x7f00000004c0), 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001400010126bd7000f8fbdf250a385600", @ANYRES32=r6, @ANYBLOB="14000200000000000000000000000000000022010800090000800000b8486861e6c1fa307fdf10951fe84fe4bacabae20740ec981923ceaa9b44dc29586c3a22862d903b54ccd381c2"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003e7a38308450c0880f46f01400209047f0300ff82bc02000000000000000000001dc83a538cc2e99c26267b23335de1ec787002010071"], &(0x7f0000007ec0)={0x0, 0x0, 0x0, 0x0}) (async) open_tree(0xffffffffffffffff, 0x0, 0x100) 214.864597ms ago: executing program 8 (id=1762): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x980912, 0x0, '\x00', @string=0x0}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x100893, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) setresuid(r2, r1, r2) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) read$msr(r3, &(0x7f0000000180)=""/245, 0xf5) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200487b9, &(0x7f0000e68000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x322}], 0x1}}], 0x1, 0x40) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x1e9982, 0x0) r6 = dup(r5) ioctl$BLKRRPART(r6, 0x125f, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close_range(r7, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000340)=r7, 0x1) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r8 = fsopen(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f000018e000/0x2000)=nil, 0x2000, 0x9) syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001dbc1840861246202ec10000000109022d0001000040000904d80403ff04010009058f024036dc442409050d"], 0x0) r9 = signalfd4(r8, &(0x7f0000000040), 0x8, 0x1000) ioctl$TUNSETOWNER(r9, 0x400454cc, r1) 0s ago: executing program 6 (id=1763): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='/dev/sg#\x00', &(0x7f00000003c0)='/dev/dri/card#\x00', 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) kernel console output (not intermixed with test programs): 0 descriptor?? [ 398.952493][T10817] comedi comedi0: pcm3724: a I/O base address must be specified [ 398.973397][ T5901] gspca_main: se401-2.14.0 probing 047d:5003 [ 399.377862][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.432252][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.469747][T10832] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 399.477601][T10832] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1311'. [ 399.706330][ T5968] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 399.878679][ T5901] gspca_se401: ExtraFeatures: 97 [ 399.898103][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 399.905511][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 399.929596][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 399.945907][ T5901] gspca_se401: Too many frame sizes [ 399.959263][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 399.990646][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 400.060745][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 400.195786][ T5968] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 400.290604][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 400.320625][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.328707][ T5968] usb 3-1: Product: syz [ 400.346035][ T5968] usb 3-1: Manufacturer: syz [ 400.353569][ T5968] usb 3-1: SerialNumber: syz [ 400.865914][ T30] audit: type=1400 audit(1758988782.696:615): avc: denied { write } for pid=10837 comm="syz.5.1312" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 400.922684][ T5968] usb 3-1: config 0 descriptor?? [ 400.945586][ T5968] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 400.946568][ T5901] usb 1-1: USB disconnect, device number 34 [ 400.963682][ T5203] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 401.036380][ T5203] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 401.149393][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 401.224190][ T5203] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 401.282090][ T5928] usb 3-1: USB disconnect, device number 24 [ 401.288053][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 401.449896][T10851] usb usb8: usbfs: process 10851 (syz.3.1315) did not claim interface 0 before use [ 401.460592][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 401.462352][ T30] audit: type=1400 audit(1758988783.676:616): avc: denied { read } for pid=10850 comm="syz.3.1315" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 401.651169][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 401.779011][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.810242][ T30] audit: type=1400 audit(1758988783.676:617): avc: denied { open } for pid=10850 comm="syz.3.1315" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 401.834010][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.849362][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.879385][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 401.913155][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.940566][ T30] audit: type=1400 audit(1758988784.166:618): avc: denied { read } for pid=10855 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 401.944521][ T24] usb 6-1: config 0 descriptor?? [ 402.252108][ T24] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp [ 402.294692][ T24] logitech 0003:046D:C20E.0007: item fetching failed at offset 7/11 [ 402.311969][T10863] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1317'. [ 402.314702][ T24] logitech 0003:046D:C20E.0007: parse failed [ 402.327935][T10863] hsr0: entered allmulticast mode [ 402.351708][T10863] hsr_slave_0: entered allmulticast mode [ 402.359907][ T24] logitech 0003:046D:C20E.0007: probe with driver logitech failed with error -22 [ 402.372720][T10863] hsr_slave_1: entered allmulticast mode [ 402.378840][T10867] bond1: option mode: unable to set because the bond device has slaves [ 402.398215][T10867] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 402.970936][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 403.302605][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 403.348422][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.358979][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 403.368198][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 403.380086][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 403.407187][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 403.446105][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 403.469951][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.491050][ T49] usb 6-1: USB disconnect, device number 30 [ 403.513295][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 403.519873][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 403.530372][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 403.541883][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 403.551653][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 403.681820][ T30] audit: type=1400 audit(1758988785.916:619): avc: denied { setopt } for pid=10886 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 403.789481][T10893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1328'. [ 404.480165][T10899] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1329'. [ 404.820942][ T49] usb 2-1: USB disconnect, device number 43 [ 404.943558][T10907] bond1: option mode: unable to set because the bond device has slaves [ 404.958907][T10907] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 404.966526][ T49] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 405.120791][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 405.188651][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 405.420493][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.454328][ T49] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 405.488497][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 405.516003][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 405.557150][ T49] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 405.567965][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.579979][ T49] usb 4-1: Product: syz [ 405.585625][ T49] usb 4-1: Manufacturer: syz [ 405.592692][ T49] usb 4-1: SerialNumber: syz [ 405.600092][ T49] usb 4-1: config 0 descriptor?? [ 405.626683][ T49] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 405.643813][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 405.668459][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 405.708397][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 405.744665][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 405.830640][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 405.853620][ T5968] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 405.889689][ T6323] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 405.915014][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 405.929842][ T5914] usb 4-1: USB disconnect, device number 41 [ 406.312317][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 406.439762][ T5968] usb 1-1: config index 0 descriptor too short (expected 65535, got 18) [ 406.461509][ T5968] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 406.475805][ T5968] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 406.485326][ T5968] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 406.497037][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.510831][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 406.519905][ T5968] usb 1-1: config 0 descriptor?? [ 406.522354][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.562949][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.665946][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.679677][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 406.690395][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.708576][ T24] usb 2-1: config 0 descriptor?? [ 406.733871][ T5968] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 407.068273][ T5968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.094599][ T5968] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 407.104270][ T5968] usb 1-1: media controller created [ 407.131965][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.162961][ T24] hid_parser_main: 73 callbacks suppressed [ 407.162981][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.274798][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.295956][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.347295][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.350797][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.367149][T10944] bond1: option mode: unable to set because the bond device has slaves [ 407.377690][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.410670][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.416324][ T30] audit: type=1400 audit(1758988789.646:620): avc: denied { write } for pid=10916 comm="syz.1.1335" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 407.421517][T10944] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 407.456459][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.463060][ T30] audit: type=1400 audit(1758988789.676:621): avc: denied { open } for pid=10916 comm="syz.1.1335" path="/242/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 407.479024][ T24] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 407.538636][ T5968] az6027: usb out operation failed. (-71) [ 407.571542][ T24] konepure 0003:1E7D:2DBE.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 407.583030][ T5968] stb0899_attach: Driver disabled by Kconfig [ 407.602997][ T5968] az6027: no front-end attached [ 407.602997][ T5968] [ 407.642637][ T24] usb 2-1: USB disconnect, device number 44 [ 407.673504][ T5968] az6027: usb out operation failed. (-71) [ 407.749261][ T5968] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 408.050807][ T5968] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 408.127732][T10962] misc userio: Invalid payload size [ 408.148460][T10962] netlink: 'syz.5.1348': attribute type 13 has an invalid length. [ 408.385550][T10951] fido_id[10951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 408.420424][ T5968] dvb-usb: schedule remote query interval to 400 msecs. [ 408.441702][ T5968] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 408.463445][ T5968] usb 1-1: USB disconnect, device number 35 [ 408.553503][ T30] audit: type=1400 audit(1758988790.776:622): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 408.561497][ T5968] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 408.782553][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.270821][ T5914] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 409.405582][T10963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.430709][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 409.438816][ T5914] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 409.448072][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.456125][ T5914] usb 4-1: Product: syz [ 409.460327][ T5914] usb 4-1: Manufacturer: syz [ 409.470441][ T5914] usb 4-1: SerialNumber: syz [ 409.480962][ T5914] usb 4-1: config 0 descriptor?? [ 409.503482][ T5914] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 409.600681][ T5968] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 409.911094][ T1206] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 409.935910][ T5914] gspca_sn9c20x: Write register 1001 failed -71 [ 409.944925][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 409.950177][ T5914] gspca_sn9c20x: Device initialization failed [ 409.956800][ T5914] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 409.966988][ T5968] usb 1-1: config 223 has an invalid interface number: 25 but max is 0 [ 409.975444][ T5968] usb 1-1: config 223 has an invalid descriptor of length 10, skipping remainder of the config [ 409.987969][ T5914] usb 4-1: USB disconnect, device number 42 [ 409.998680][ T5968] usb 1-1: config 223 has no interface number 0 [ 410.005274][ T5968] usb 1-1: config 223 interface 25 has no altsetting 0 [ 410.020596][ T5968] usb 1-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=4b.dc [ 410.029965][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.045248][ T5968] usb 1-1: Product: syz [ 410.059428][ T5968] usb 1-1: Manufacturer: syz [ 410.064106][ T5968] usb 1-1: SerialNumber: syz [ 410.072226][ T1206] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 410.086332][ T1206] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 410.120851][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.147031][ T1206] usb 6-1: Product: syz [ 410.160696][ T1206] usb 6-1: Manufacturer: syz [ 410.176406][ T1206] usb 6-1: SerialNumber: syz [ 410.184383][ T1206] usb 6-1: config 0 descriptor?? [ 410.202163][ T1206] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 410.230017][ T1206] usb 6-1: setting power ON [ 410.236206][ T1206] dvb-usb: bulk message failed: -22 (2/0) [ 410.249767][ T1206] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 410.266334][ T1206] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 410.276488][ T1206] dvb_usb_cxusb 6-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 410.839785][ T5968] usb 1-1: USB disconnect, device number 36 [ 411.151110][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 411.489390][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.508217][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.527400][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 411.651804][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.677706][T11004] misc userio: Invalid payload size [ 411.697653][T11004] netlink: 'syz.0.1360': attribute type 13 has an invalid length. [ 411.705773][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'. [ 411.732114][ T24] usb 4-1: config 0 descriptor?? [ 412.168755][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 412.211537][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 412.290291][ T24] usb 4-1: USB disconnect, device number 43 [ 412.323950][ T5968] usb 6-1: USB disconnect, device number 31 [ 413.285498][ T30] audit: type=1400 audit(1758988795.516:623): avc: denied { write } for pid=11032 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.307347][T11036] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1368'. [ 413.598337][ T30] audit: type=1400 audit(1758988795.536:624): avc: denied { nlmsg_write } for pid=11032 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.687767][T11041] sd 0:0:1:0: device reset [ 414.937778][ T30] audit: type=1400 audit(1758988797.086:625): avc: denied { setopt } for pid=11047 comm="syz.5.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 415.983039][T11060] bond1: option mode: unable to set because the bond device is up [ 416.036309][T11060] bond_slave_0: entered promiscuous mode [ 416.042062][T11060] bond_slave_1: entered promiscuous mode [ 416.051575][T11060] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 416.070125][T11060] bond1: (slave macvlan6): Enslaving as a backup interface with an up link [ 416.209734][T11065] netlink: 'syz.1.1377': attribute type 4 has an invalid length. [ 416.286374][T11065] netlink: 'syz.1.1377': attribute type 4 has an invalid length. [ 417.790536][ T30] audit: type=1400 audit(1758988800.016:626): avc: denied { read } for pid=11072 comm="syz.3.1379" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 417.835872][ T30] audit: type=1400 audit(1758988800.016:627): avc: denied { open } for pid=11072 comm="syz.3.1379" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 417.964991][ T30] audit: type=1400 audit(1758988800.016:628): avc: denied { ioctl } for pid=11072 comm="syz.3.1379" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 418.592752][T11090] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 418.600596][T11090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1383'. [ 419.017536][ T30] audit: type=1400 audit(1758988801.226:629): avc: denied { create } for pid=11085 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 419.419067][ T30] audit: type=1400 audit(1758988801.236:630): avc: denied { sys_admin } for pid=11085 comm="syz.1.1384" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 419.451774][T11093] loop6: detected capacity change from 0 to 524287487 [ 419.459078][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.470692][ T30] audit: type=1400 audit(1758988801.676:631): avc: denied { append } for pid=11081 comm="syz.5.1382" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.505930][T11101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1386'. [ 419.521820][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.529802][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.591764][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.768745][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.777296][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.795696][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.806269][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.898052][T11113] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.905236][T11113] overlayfs: failed to set xattr on upper [ 419.911040][T11113] overlayfs: ...falling back to redirect_dir=nofollow. [ 419.918019][T11113] overlayfs: ...falling back to index=off. [ 419.923883][T11113] overlayfs: ...falling back to uuid=null. [ 419.986654][T11114] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 420.233442][T11099] loop6: detected capacity change from 524287487 to 3 [ 420.274709][T11093] ldm_validate_partition_table(): Disk read failed. [ 420.291054][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 420.440186][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.996118][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 421.025521][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 421.041457][T11093] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.060726][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.247405][T11093] Dev loop6: unable to read RDB block 0 [ 421.258226][ T24] usb 2-1: Product: syz [ 421.265176][ T24] usb 2-1: Manufacturer: syz [ 421.273991][ T24] usb 2-1: SerialNumber: syz [ 421.281110][ T24] usb 2-1: config 0 descriptor?? [ 421.288361][ T24] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 421.299477][T11093] loop6: unable to read partition table [ 421.313328][T11093] loop6: partition table beyond EOD, truncated [ 421.321107][T11093] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -Ӥ.i >^.dDd) failed (rc=-5) [ 421.739311][ T24] usb 2-1: clie_3_5_startup: get config number failed: -32 [ 421.785643][ T24] visor 2-1:0.0: probe with driver visor failed with error -32 [ 421.984251][ T30] audit: type=1400 audit(1758988804.216:632): avc: denied { create } for pid=11131 comm="syz.0.1396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 422.143723][ T5218] ldm_validate_partition_table(): Disk read failed. [ 422.150758][ T5218] Dev loop6: unable to read RDB block 0 [ 422.165700][ T5218] loop6: unable to read partition table [ 422.172264][ T5218] loop6: partition table beyond EOD, truncated [ 422.683433][ T30] audit: type=1400 audit(1758988804.906:633): avc: denied { append } for pid=11122 comm="syz.2.1392" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 422.725122][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 422.764867][ T24] usb 2-1: USB disconnect, device number 45 [ 423.700611][ T1206] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 423.914563][ T1206] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 423.936425][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.959372][ T1206] usb 1-1: config 0 descriptor?? [ 423.985128][ T1206] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 424.636478][ T30] audit: type=1400 audit(1758988806.806:634): avc: denied { link } for pid=11159 comm="syz.2.1402" name="file1" dev="tmpfs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.876354][ T30] audit: type=1400 audit(1758988806.816:635): avc: denied { setattr } for pid=11159 comm="syz.2.1402" name="#55" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 425.119201][ T30] audit: type=1400 audit(1758988806.816:636): avc: denied { rename } for pid=11159 comm="syz.2.1402" name="#55" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 425.156380][ T30] audit: type=1400 audit(1758988806.826:637): avc: denied { nlmsg_read } for pid=11159 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 425.923778][ T1206] gspca_stv06xx: HDCS-1020 sensor detected [ 426.124026][ T30] audit: type=1326 audit(1758988808.356:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8c78eec9 code=0x7ffc0000 [ 426.200124][ T30] audit: type=1326 audit(1758988808.356:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8c78eec9 code=0x7ffc0000 [ 426.249914][ T30] audit: type=1326 audit(1758988808.416:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f9e8c78eec9 code=0x7ffc0000 [ 426.262789][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1410'. [ 426.277578][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.299684][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.334227][ T1206] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 426.368994][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 426.484505][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.532878][ T1206] usb 1-1: USB disconnect, device number 37 [ 426.543983][ T30] audit: type=1326 audit(1758988808.456:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8c78eec9 code=0x7ffc0000 [ 426.585170][ T30] audit: type=1326 audit(1758988808.456:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8c78eec9 code=0x7ffc0000 [ 426.614916][ T30] audit: type=1326 audit(1758988808.466:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e8c78eec9 code=0x7ffc0000 [ 426.792077][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.285662][T11200] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 427.292759][T11200] overlayfs: failed to set xattr on upper [ 427.298501][T11200] overlayfs: ...falling back to redirect_dir=nofollow. [ 427.305416][T11200] overlayfs: ...falling back to index=off. [ 427.311369][T11200] overlayfs: ...falling back to uuid=null. [ 427.364411][T11201] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 429.442894][T11214] ubi31: attaching mtd0 [ 429.552626][T11214] ubi31: scanning is finished [ 429.749715][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 429.749731][ T30] audit: type=1400 audit(1758988811.676:662): avc: denied { connect } for pid=11206 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 429.817038][ T30] audit: type=1400 audit(1758988811.676:663): avc: denied { ioctl } for pid=11206 comm="syz.0.1413" path="socket:[30444]" dev="sockfs" ino=30444 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.576364][T11214] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 430.627915][T11214] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 430.673785][T11214] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 430.700449][T11214] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 430.718347][T11214] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 430.739572][T11214] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 430.794319][T11214] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3445277814 [ 430.879643][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1416'. [ 430.950823][T11214] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 431.084257][T11225] ubi31: background thread "ubi_bgt31d" started, PID 11225 [ 431.360617][ T5928] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 431.367309][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 431.424898][T11237] openvswitch: netlink: nsh attribute has 12 unknown bytes. [ 431.450631][T11237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.540655][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 431.552644][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.563984][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.591258][ T5928] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 431.607666][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.773929][ T5928] usb 2-1: config 0 descriptor?? [ 432.420378][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 432.435912][ T5928] apple 0003:05AC:024B.0009: unknown global tag 0xe [ 432.458080][ T5928] apple 0003:05AC:024B.0009: item 0 1 1 14 parsing failed [ 432.535128][ T5928] apple 0003:05AC:024B.0009: parse failed [ 432.546251][ T5928] apple 0003:05AC:024B.0009: probe with driver apple failed with error -22 [ 432.580666][ T1206] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 432.690428][ T5968] usb 2-1: USB disconnect, device number 46 [ 432.810707][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 432.859471][T11262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1426'. [ 432.942568][ T1206] usb 6-1: config 0 has no interfaces? [ 432.960427][ T1206] usb 6-1: New USB device found, idVendor=1645, idProduct=8093, bcdDevice=1f.7a [ 432.978161][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.987863][ T1206] usb 6-1: Product: syz [ 432.993990][ T1206] usb 6-1: Manufacturer: syz [ 433.071912][ T1206] usb 6-1: SerialNumber: syz [ 433.168270][ T1206] usb 6-1: config 0 descriptor?? [ 433.631714][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.706986][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 433.720395][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.340631][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 434.347402][ T1206] usb 6-1: USB disconnect, device number 32 [ 434.366317][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.377245][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 434.387629][ T10] usb 2-1: string descriptor 0 read error: -22 [ 434.450712][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 434.475521][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.545497][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 434.691555][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.700155][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.715456][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 434.729994][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 434.748895][ T10] usb 2-1: media controller created [ 434.865640][T11286] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1433'. [ 434.952576][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 434.959158][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.992221][ T1206] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.160715][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 435.203851][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 435.248731][T11290] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1434'. [ 435.318253][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 435.415652][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 435.478778][ T1206] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 435.487799][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 435.572525][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.595325][ T1206] usb 3-1: Product: syz [ 435.599558][ T1206] usb 3-1: Manufacturer: syz [ 435.604614][ T1206] usb 3-1: SerialNumber: syz [ 435.614041][ T1206] usb 3-1: config 0 descriptor?? [ 435.620269][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 435.649539][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 435.671617][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.693337][ T24] usb 1-1: Product: syz [ 435.710612][ T24] usb 1-1: Manufacturer: syz [ 435.715252][ T24] usb 1-1: SerialNumber: syz [ 435.753492][ T24] usb 1-1: config 0 descriptor?? [ 435.937172][ T5928] usb 3-1: USB disconnect, device number 25 [ 436.438136][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 436.453411][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 436.498386][ T24] input input34: Device does not respond to id packet M [ 436.613833][ T10] usb 2-1: USB disconnect, device number 47 [ 436.667608][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 436.732857][ T24] input input34: Device does not respond to id packet P [ 436.746231][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 436.756053][ T24] input input34: Device does not respond to id packet B [ 436.779727][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 436.824770][ T24] input input34: Device does not respond to id packet N [ 436.857033][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 437.392384][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 437.405727][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 437.416332][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 437.440223][ T24] usb 1-1: USB disconnect, device number 38 [ 437.679351][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 438.347958][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 438.465649][ T30] audit: type=1400 audit(1758988820.676:664): avc: denied { setopt } for pid=11326 comm="syz.1.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.049684][ T30] audit: type=1400 audit(1758988821.226:665): avc: denied { ioctl } for pid=11333 comm="syz.1.1445" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 439.901261][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.321911][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 440.407594][T11357] misc userio: Invalid payload size [ 441.978741][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 442.272164][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 442.282085][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 442.292990][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.332724][ T10] usb 6-1: config 0 descriptor?? [ 442.345396][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 442.380617][ T1206] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 442.530668][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 442.541287][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 442.560034][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 442.572020][T11422] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1457'. [ 442.583219][T11422] netem: unknown loss type 0 [ 442.591212][T11422] netem: change failed [ 442.600784][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 442.622839][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 442.650597][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 442.672088][ T1206] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 442.683503][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.727397][ T1206] usb 3-1: Product: syz [ 442.740695][ T1206] usb 3-1: Manufacturer: syz [ 442.760696][ T10] usb 6-1: Detected FT232A [ 442.790974][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 442.799338][ T1206] usb 3-1: SerialNumber: syz [ 442.830467][ T1206] usb 3-1: config 0 descriptor?? [ 442.848356][ T10] usb 6-1: USB disconnect, device number 33 [ 442.931539][ T1206] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 442.956795][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 442.986429][ T5203] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 442.991125][ T10] ftdi_sio 6-1:0.0: device disconnected [ 443.309083][ T5203] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 443.684230][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 443.837304][ T1206] usb 3-1: USB disconnect, device number 26 [ 444.108639][T11433] netlink: 'syz.5.1460': attribute type 10 has an invalid length. [ 444.337137][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1466'. [ 444.854529][ T1206] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 445.006240][ T5928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 445.011918][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 445.029898][ T1206] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 445.124818][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.231788][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 445.250802][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 445.281650][ T1206] usb 2-1: config 0 descriptor?? [ 445.287058][T11460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 445.302095][ T5928] usb 3-1: config 4 interface 0 has no altsetting 0 [ 445.371899][ T5928] usb 3-1: string descriptor 0 read error: -22 [ 445.388288][ T5928] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 445.457412][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.507481][ T5928] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 445.592947][ T5928] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 445.788417][T11467] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 445.792499][ T5928] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 445.802697][T11487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.841832][ T5928] usb 3-1: media controller created [ 445.910926][T11487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.938957][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.057057][ T1206] usbhid 2-1:0.0: can't add hid device: -71 [ 446.063211][ T1206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 446.089626][ T5928] zl10353_read_register: readreg error (reg=127, ret==0) [ 446.145465][ T5928] usb 3-1: USB disconnect, device number 27 [ 446.156535][ T1206] usb 2-1: USB disconnect, device number 48 [ 446.910724][ T5928] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 447.020049][T11509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 447.029804][T11509] block device autoloading is deprecated and will be removed. [ 447.112911][ T1206] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 447.120686][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 447.184670][ T5928] usb 4-1: config 0 has an invalid interface number: 71 but max is 0 [ 447.199716][ T5928] usb 4-1: config 0 has no interface number 0 [ 447.211446][ T5928] usb 4-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 447.230798][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.244527][ T5928] usb 4-1: Product: syz [ 447.248757][ T5928] usb 4-1: Manufacturer: syz [ 447.256264][ T5928] usb 4-1: SerialNumber: syz [ 447.520686][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 447.533019][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 447.554278][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 447.571592][ T5928] usb 4-1: config 0 descriptor?? [ 447.606031][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 447.640565][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 447.658192][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 447.677688][ T1206] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 447.687078][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.749384][ T1206] usb 6-1: Product: syz [ 447.762049][ T1206] usb 6-1: Manufacturer: syz [ 447.769007][ T1206] usb 6-1: SerialNumber: syz [ 447.788541][ T1206] usb 6-1: config 0 descriptor?? [ 447.916838][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.942274][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.110306][ T5928] gspca_main: finepix-2.14.0 probing 04cb:011b [ 448.229550][ T5928] usb 4-1: USB disconnect, device number 44 [ 448.235621][ T1206] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input37 [ 448.247379][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.251742][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 448.275676][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.295341][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.343737][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.399335][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.417860][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 448.440580][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 448.456075][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 448.474562][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 448.486316][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.500855][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.529381][ T10] usb 1-1: Product: syz [ 448.534280][ T10] usb 1-1: Manufacturer: syz [ 448.539092][ T6323] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 448.539469][ T10] usb 1-1: SerialNumber: syz [ 448.566195][ T10] usb 1-1: config 0 descriptor?? [ 448.579810][ T5928] usb 6-1: USB disconnect, device number 34 [ 448.670817][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 448.677459][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.688720][ T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 448.697988][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.706862][ T9] usb 3-1: Product: syz [ 448.711416][ T9] usb 3-1: Manufacturer: syz [ 448.716015][ T9] usb 3-1: SerialNumber: syz [ 448.731680][ T9] usb 3-1: config 0 descriptor?? [ 448.800915][ T1206] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 448.982517][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.992553][ T1206] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 449.002027][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.013985][ T1206] usb 2-1: config 0 descriptor?? [ 449.823787][ T1206] itetech 0003:258A:6A88.000A: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 450.174026][ T24] usb 2-1: USB disconnect, device number 49 [ 450.228344][T11548] comedi comedi0: pcm3724: a I/O base address must be specified [ 450.358694][T11551] tipc: Enabling not permitted [ 450.367554][T11551] tipc: Enabling of bearer rejected, failed to enable media [ 450.730663][ T5928] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 450.768125][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 450.780971][T11559] macvlan4: entered allmulticast mode [ 450.786613][T11559] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 450.850131][ T10] usb 1-1: USB disconnect, device number 39 [ 450.970581][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 450.978478][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.994376][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.005114][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.020605][ T5928] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 451.030184][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.440111][ T5928] usb 4-1: config 0 descriptor?? [ 451.488588][ T24] usb 3-1: USB disconnect, device number 28 [ 451.827131][ T10] IPVS: starting estimator thread 0... [ 451.921222][T11577] IPVS: using max 45 ests per chain, 108000 per kthread [ 451.934953][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 451.942174][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 451.949310][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 451.960914][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 452.046699][T11583] 9pnet_fd: Insufficient options for proto=fd [ 452.062806][T11583] overlayfs: missing 'lowerdir' [ 452.067873][ T30] audit: type=1400 audit(1758988834.286:666): avc: denied { setopt } for pid=11573 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 452.376851][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 452.385310][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 452.395214][ T5928] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 452.402526][ T30] audit: type=1400 audit(1758988834.636:667): avc: denied { read } for pid=11564 comm="syz.0.1497" name="file0" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.433159][ T5928] konepure 0003:1E7D:2DBE.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 452.491668][ T5928] usb 4-1: USB disconnect, device number 45 [ 452.502964][ T30] audit: type=1400 audit(1758988834.656:668): avc: denied { open } for pid=11564 comm="syz.0.1497" path="/282/file0" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.560646][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 452.608851][T11585] fido_id[11585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 452.825213][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.836409][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 452.847822][ T10] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 452.857166][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.891227][ T10] usb 2-1: config 0 descriptor?? [ 452.920940][T11580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 453.013528][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 453.480631][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 453.480697][ T5928] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 453.486849][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 453.508650][ T10] usb 2-1: USB disconnect, device number 50 [ 453.791412][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 453.803059][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 453.862757][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 453.912950][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 453.955235][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 453.995271][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 454.091312][ T5928] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 454.107633][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 454.114768][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.256611][ T5928] usb 6-1: Product: syz [ 454.423419][T11608] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 454.431212][ T5928] usb 6-1: Manufacturer: syz [ 454.435883][ T5928] usb 6-1: SerialNumber: syz [ 454.441947][T11608] macvlan4: entered allmulticast mode [ 454.457019][T11608] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 454.465466][ T5928] usb 6-1: config 0 descriptor?? [ 454.497541][ T5928] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 454.549221][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 454.744842][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 454.820616][T11613] input: syz0 as /devices/virtual/input/input39 [ 454.858317][ T5928] usb 6-1: USB disconnect, device number 35 [ 454.860570][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 455.117192][T11621] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1511'. [ 457.136940][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 457.396531][T11637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.562701][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 457.575212][ T10] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 457.610822][T11648] bond1: option mode: unable to set because the bond device has slaves [ 457.612896][ T10] usb 2-1: config 0 has no interface number 0 [ 457.625162][T11651] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 457.669099][ T10] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 457.755825][ T10] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 457.767388][ T10] usb 2-1: config 0 interface 126 has no altsetting 0 [ 457.838186][ T10] usb 2-1: string descriptor 0 read error: -71 [ 457.844776][ T10] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 458.310456][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.331459][ T10] usb 2-1: config 0 descriptor?? [ 458.346929][ T10] usb 2-1: can't set config #0, error -71 [ 458.370909][ T10] usb 2-1: USB disconnect, device number 51 [ 458.403156][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 458.747103][T11661] macvlan5: entered allmulticast mode [ 458.853252][T11665] loop6: detected capacity change from 0 to 1 [ 458.878059][T11665] Dev loop6: unable to read RDB block 1 [ 458.972081][T11665] loop6: unable to read partition table [ 459.045105][T11665] loop6: partition table beyond EOD, truncated [ 459.102544][T11665] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 459.277938][ T30] audit: type=1400 audit(1758988841.506:669): avc: denied { ioctl } for pid=11669 comm="syz.0.1524" path="socket:[31625]" dev="sockfs" ino=31625 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.580344][ T30] audit: type=1400 audit(1758988841.716:670): avc: denied { create } for pid=11681 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 459.703971][ T30] audit: type=1400 audit(1758988841.846:671): avc: denied { getopt } for pid=11681 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 459.723440][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.145804][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 461.250896][T11708] netlink: 'syz.0.1534': attribute type 2 has an invalid length. [ 461.533256][T11708] macvlan6: entered allmulticast mode [ 461.891210][ T49] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 462.088069][ T49] usb 6-1: config index 0 descriptor too short (expected 27, got 18) [ 462.118520][ T49] usb 6-1: config 7 has an invalid interface number: 145 but max is 0 [ 462.167961][ T49] usb 6-1: config 7 has no interface number 0 [ 462.184426][ T49] usb 6-1: config 7 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.238906][ T49] usb 6-1: New USB device found, idVendor=2040, idProduct=d8e3, bcdDevice=23.cf [ 462.284032][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.530741][ T49] usb 6-1: Product: syz [ 462.540089][ T49] usb 6-1: Manufacturer: syz [ 462.577698][ T49] usb 6-1: SerialNumber: syz [ 462.724965][T11744] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 462.742977][T11742] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 462.762862][T11742] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 462.779954][T11742] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 462.890804][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 462.906423][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1548'. [ 463.056246][ T30] audit: type=1400 audit(1758988845.286:672): avc: denied { map } for pid=11746 comm="syz.0.1548" path="socket:[32305]" dev="sockfs" ino=32305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.146495][T11747] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1548'. [ 463.217902][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.245676][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.261367][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1548'. [ 463.270601][ T10] usb 2-1: config 1 interface 1 has no altsetting 1 [ 463.302388][T11747] tipc: MTU too low for tipc bearer [ 463.308183][T11753] comedi comedi0: pcm3724: a I/O base address must be specified [ 463.308739][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.339399][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.348071][ T10] usb 2-1: Product: syz [ 463.375776][ T10] usb 2-1: Manufacturer: syz [ 463.382477][ T10] usb 2-1: SerialNumber: syz [ 463.705878][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 463.714569][ T10] cdc_ncm 2-1:1.0: bind() failure [ 463.739073][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 463.758202][ T10] cdc_ncm 2-1:1.1: bind() failure [ 463.839845][ T30] audit: type=1400 audit(1758988846.066:673): avc: denied { connect } for pid=11761 comm="syz.3.1552" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.904383][ T5901] usb 2-1: USB disconnect, device number 52 [ 464.310727][ T49] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 464.508914][ T49] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.526688][ T49] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 464.654606][ T5901] usb 6-1: USB disconnect, device number 36 [ 464.673862][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.771231][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 464.886155][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 464.968936][ T49] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.041873][ T49] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.063518][ T49] usb 4-1: Product: syz [ 465.068438][ T49] usb 4-1: Manufacturer: syz [ 465.084534][ T49] cdc_wdm 4-1:1.0: skipping garbage [ 465.371437][ T49] cdc_wdm 4-1:1.0: skipping garbage [ 465.380425][ T49] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 465.386971][ T49] cdc_wdm 4-1:1.0: Unknown control protocol [ 465.486874][T11793] netlink: 'syz.1.1561': attribute type 1 has an invalid length. [ 465.494727][T11793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1561'. [ 465.939296][ T49] usb 4-1: USB disconnect, device number 46 [ 465.960631][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 466.186554][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 466.352163][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 466.363999][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 466.376665][ T9] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 466.386155][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.423404][ T9] usb 3-1: Product: syz [ 466.433426][ T9] usb 3-1: Manufacturer: syz [ 466.535230][ T9] usb 3-1: SerialNumber: syz [ 466.544899][ T9] usb 3-1: config 0 descriptor?? [ 466.667339][T11805] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 466.674825][T11805] overlayfs: failed to set xattr on upper [ 466.680982][T11805] overlayfs: ...falling back to redirect_dir=nofollow. [ 466.687875][T11805] overlayfs: ...falling back to index=off. [ 466.693936][T11805] overlayfs: ...falling back to uuid=null. [ 466.742008][T11806] fuse: Bad value for 'fd' [ 466.758696][T11806] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 466.993216][T11791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.041242][T11791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.568865][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 467.629141][T11824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1572'. [ 467.651564][T11824] macvlan5: entered allmulticast mode [ 467.798714][ T5901] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 467.887894][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1574'. [ 468.330564][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 468.339223][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.347962][ T5901] usb 4-1: config 4 interface 0 has no altsetting 0 [ 468.357185][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 468.364532][ T5901] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 468.373692][ T49] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 468.382464][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.442259][ T5901] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 468.489288][ T5901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.528359][ T5901] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 468.537682][ T49] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 468.578730][ T49] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 468.592591][ T5901] usb 4-1: media controller created [ 468.618073][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.652027][ T49] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 468.661550][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.734537][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.761019][ T49] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 468.772742][T11819] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 468.806858][ T49] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.842526][ T49] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 468.860725][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.880200][T11826] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 468.891625][ T49] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.960962][ T49] usb 1-1: invalid MIDI in EP 0 [ 468.978817][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 469.108666][ T5901] usb 4-1: USB disconnect, device number 47 [ 469.258584][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.277296][ T49] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 469.326554][ T49] usb 1-1: USB disconnect, device number 40 [ 469.393140][ T9] powermate: unknown product id 0240 [ 469.460094][ T9] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 469.481547][ T9] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 469.502892][ T9] usb 3-1: USB disconnect, device number 29 [ 470.104797][T11858] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[11858] [ 470.296316][ T5968] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 470.324065][ T30] audit: type=1400 audit(1758988852.356:674): avc: denied { mounton } for pid=11845 comm="syz.1.1580" path="/293/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 470.490760][ T30] audit: type=1400 audit(1758988852.376:675): avc: denied { shutdown } for pid=11845 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 470.684956][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 470.763006][ T5968] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.811262][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.819294][ T5968] usb 6-1: Product: syz [ 470.872150][ T5968] usb 6-1: Manufacturer: syz [ 470.876781][ T5968] usb 6-1: SerialNumber: syz [ 470.967604][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 471.010263][ T5968] usb 6-1: config 0 descriptor?? [ 471.523096][T11871] misc userio: Invalid payload size [ 472.348671][ T49] usb 6-1: USB disconnect, device number 37 [ 472.473990][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.591056][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 472.599958][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 478.156933][ C1] sched: DL replenish lagged too much [ 479.785395][T11892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 486.656038][ T30] audit: type=1400 audit(1758988868.886:676): avc: denied { append } for pid=11908 comm="syz.3.1598" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 487.140632][ T5968] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 487.492567][ T5968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.581885][ T5968] usb 6-1: config 1 has no interface number 0 [ 487.919737][ T5968] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.202446][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 488.234620][ T5968] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 488.284432][ T5968] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 35782, setting to 1024 [ 488.605509][ T5968] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 488.856508][ T5968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.887569][T11936] comedi comedi0: pcm3724: a I/O base address must be specified [ 488.896356][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.970212][ T5968] usb 6-1: Product: syz [ 489.000730][ T5968] usb 6-1: Manufacturer: syz [ 489.068774][ T5968] usb 6-1: SerialNumber: syz [ 490.088590][ T30] audit: type=1400 audit(1758988872.266:677): avc: denied { setopt } for pid=11937 comm="syz.2.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 490.563225][ T5968] usb 6-1: can't set config #1, error -71 [ 490.703675][ T5968] usb 6-1: USB disconnect, device number 38 [ 491.588032][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.622724][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.291324][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.299338][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.307248][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.395600][ T5859] Bluetooth: hci5: command tx timeout [ 494.686088][T11959] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1608'. [ 496.468919][ T5859] Bluetooth: hci5: command tx timeout [ 496.763471][ T30] audit: type=1400 audit(1758988878.966:678): avc: denied { read append } for pid=11973 comm="syz.1.1613" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 497.828397][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.963540][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 498.256010][T11960] syz.5.1607 (11960): drop_caches: 2 [ 498.308177][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 498.597954][ T5859] Bluetooth: hci5: command tx timeout [ 500.610620][ T5859] Bluetooth: hci5: command tx timeout [ 501.361171][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.507344][T11993] FAULT_INJECTION: forcing a failure. [ 503.507344][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 503.544138][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.5.1616 Not tainted syzkaller #0 PREEMPT(full) [ 503.544167][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.544177][T11993] Call Trace: [ 503.544184][T11993] [ 503.544191][T11993] dump_stack_lvl+0x16c/0x1f0 [ 503.544222][T11993] should_fail_ex+0x512/0x640 [ 503.544245][T11993] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 503.544267][T11993] should_failslab+0xc2/0x120 [ 503.544288][T11993] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 503.544305][T11993] ? __alloc_skb+0x2b2/0x380 [ 503.544330][T11993] __alloc_skb+0x2b2/0x380 [ 503.544350][T11993] ? __pfx___alloc_skb+0x10/0x10 [ 503.544377][T11993] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 503.544405][T11993] netlink_alloc_large_skb+0x69/0x130 [ 503.544429][T11993] netlink_sendmsg+0x6a1/0xdd0 [ 503.544455][T11993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.544487][T11993] ____sys_sendmsg+0xa98/0xc70 [ 503.544514][T11993] ? copy_msghdr_from_user+0x10a/0x160 [ 503.544536][T11993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.544573][T11993] ___sys_sendmsg+0x134/0x1d0 [ 503.544595][T11993] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.544647][T11993] __sys_sendmsg+0x16d/0x220 [ 503.544668][T11993] ? __pfx___sys_sendmsg+0x10/0x10 [ 503.544706][T11993] do_syscall_64+0xcd/0x4e0 [ 503.544730][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.544747][T11993] RIP: 0033:0x7fb741f8eec9 [ 503.544762][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.544778][T11993] RSP: 002b:00007fb742e29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.544795][T11993] RAX: ffffffffffffffda RBX: 00007fb7421e5fa0 RCX: 00007fb741f8eec9 [ 503.544806][T11993] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000003 [ 503.544817][T11993] RBP: 00007fb742e29090 R08: 0000000000000000 R09: 0000000000000000 [ 503.544827][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.544836][T11993] R13: 00007fb7421e6038 R14: 00007fb7421e5fa0 R15: 00007ffc32930ec8 [ 503.544859][T11993] [ 506.442368][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.576737][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 506.592999][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 507.187546][T11996] misc userio: Invalid payload size [ 508.827238][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.156759][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 511.976158][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 512.484425][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.656468][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 512.808914][T11949] chnl_net:caif_netlink_parms(): no params data found [ 513.246245][ T5968] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 513.563836][ T5968] usb 3-1: device descriptor read/64, error -71 [ 513.823754][ T30] audit: type=1400 audit(1758988896.056:679): avc: denied { ioctl } for pid=12024 comm="syz.3.1624" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x3e03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 513.874002][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1627'. [ 513.883862][ T5968] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 514.620877][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.656737][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.675548][ T5968] usb 3-1: device descriptor read/64, error -71 [ 514.701158][T11949] bridge_slave_0: entered allmulticast mode [ 514.708656][T11949] bridge_slave_0: entered promiscuous mode [ 514.734278][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.023967][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.041517][T11949] bridge_slave_1: entered allmulticast mode [ 515.074720][T11949] bridge_slave_1: entered promiscuous mode [ 515.181079][ T5968] usb usb3-port1: attempt power cycle [ 515.520679][ T5968] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 515.588860][ T5968] usb 3-1: device descriptor read/8, error -71 [ 515.610832][ T1206] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 515.790703][ T1206] usb 4-1: Using ep0 maxpacket: 32 [ 515.807554][ T30] audit: type=1400 audit(1758988898.036:680): avc: denied { ioctl } for pid=12049 comm="syz.5.1630" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 515.838221][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.888689][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.898202][ T5968] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 515.917202][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 515.994083][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 516.047643][ T5968] usb 3-1: device descriptor read/8, error -71 [ 516.105494][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 516.203588][ T5968] usb usb3-port1: unable to enumerate USB device [ 516.269950][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 516.421835][T11949] team0: Port device team_slave_0 added [ 516.581521][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 516.817411][T12050] ceph: No mds server is up or the cluster is laggy [ 516.888119][ T1206] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 516.912484][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.960064][ T1206] usb 4-1: Product: syz [ 516.976987][ T1206] usb 4-1: Manufacturer: syz [ 517.009718][ T1206] usb 4-1: SerialNumber: syz [ 517.054320][ T1206] usb 4-1: config 0 descriptor?? [ 517.118109][ T1206] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 517.199804][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 517.241116][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 517.386704][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 517.500823][ T5968] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 517.605730][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 517.703036][ T5968] usb 6-1: Using ep0 maxpacket: 32 [ 517.729381][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 517.754931][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 517.768484][ T6311] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 517.828326][ T5968] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 517.854324][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 517.867933][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 517.966573][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 517.987939][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.104932][ T5968] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 518.124508][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.147808][ T5968] usb 6-1: Product: syz [ 518.162035][ T5968] usb 6-1: Manufacturer: syz [ 518.193012][ T5968] usb 6-1: SerialNumber: syz [ 518.235090][ T5968] usb 6-1: config 0 descriptor?? [ 518.302639][ T5968] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input43 [ 518.335991][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.420067][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.521611][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.644190][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.744444][ T6311] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.833230][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 518.974911][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 519.037344][ T5203] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 519.064622][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 519.453546][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'. [ 521.880430][ T12] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 521.928329][ T12] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 521.983012][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.007584][ T12] bond_slave_0: left promiscuous mode [ 522.019826][ T12] bond_slave_0: left allmulticast mode [ 522.350359][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.591086][ T12] bond_slave_1: left promiscuous mode [ 522.596654][ T12] bond_slave_1: left allmulticast mode [ 522.675809][ T12] bond0 (unregistering): Released all slaves [ 523.179610][ T12] bond1 (unregistering): Released all slaves [ 523.256435][T11949] team0: Port device team_slave_1 added [ 523.317598][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 523.483336][ T5968] usb 4-1: USB disconnect, device number 48 [ 523.723400][ T9] usb 6-1: USB disconnect, device number 39 [ 524.065259][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.798673][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.237145][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.292618][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.999079][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.204659][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.192270][ T12] tipc: Left network mode [ 529.256088][T11949] hsr_slave_0: entered promiscuous mode [ 529.391603][T11949] hsr_slave_1: entered promiscuous mode [ 529.397794][T11949] debugfs: 'hsr0' already exists in 'hsr' [ 529.465102][T11949] Cannot create hsr debugfs directory [ 530.675246][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 530.689689][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 530.752807][T12122] ceph: No mds server is up or the cluster is laggy [ 531.128109][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 531.194482][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 531.950585][ T1206] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 532.264500][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 532.346154][ T1206] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 532.384020][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.891227][T12148] ceph: No mds server is up or the cluster is laggy [ 533.050454][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 533.280408][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 533.614622][ T24] libceph: connect (1)[c::]:6789 error -101 [ 533.957416][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 535.419342][ T1206] usb 3-1: config 0 descriptor?? [ 535.558108][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 535.690277][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 535.717699][ T1206] usb 3-1: can't set config #0, error -71 [ 535.771147][ T1206] usb 3-1: USB disconnect, device number 34 [ 535.953350][T12161] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 535.961357][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1651'. [ 536.446596][T11949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 536.524130][T11949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.686147][T11949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 536.738164][T11949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 537.262608][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 537.347003][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 537.724967][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.803383][T12194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 537.832717][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.156763][ T12] hsr_slave_0: left promiscuous mode [ 538.355693][ T12] hsr_slave_1: left promiscuous mode [ 538.431560][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.451510][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1659'. [ 539.207846][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.442012][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.462041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.728560][ T1206] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 539.971116][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 540.014331][ T1206] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 540.050791][ T12] veth1_macvtap: left promiscuous mode [ 540.089684][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.101014][ T12] veth0_macvtap: left promiscuous mode [ 540.106649][ T12] veth1_vlan: left promiscuous mode [ 540.275354][ T1206] usb 2-1: config 0 descriptor?? [ 540.340640][ T12] veth0_vlan: left promiscuous mode [ 540.464139][T12207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 541.186828][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.241199][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.601411][ T1206] usbhid 2-1:0.0: can't add hid device: -71 [ 541.607435][ T1206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 542.411614][ T1206] usb 2-1: USB disconnect, device number 53 [ 542.536671][T12225] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 542.543889][T12225] overlayfs: failed to set xattr on upper [ 542.550042][T12225] overlayfs: ...falling back to redirect_dir=nofollow. [ 542.557282][T12225] overlayfs: ...falling back to index=off. [ 542.563174][T12225] overlayfs: ...falling back to uuid=null. [ 542.591856][T12226] fuse: Unknown parameter '0x000000000000000800000000000000000000' [ 542.602247][T12226] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 545.343877][ T12] pim6reg9 (unregistering): left allmulticast mode [ 548.484594][ T12] pim6reg (unregistering): left allmulticast mode [ 550.347903][T12241] netlink: 'syz.5.1667': attribute type 13 has an invalid length. [ 550.894077][T12218] syz.3.1663 (12218): drop_caches: 2 [ 552.818166][T12252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.901718][ T30] audit: type=1400 audit(1758988935.066:681): avc: denied { create } for pid=12243 comm="syz.2.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 552.921549][ T30] audit: type=1400 audit(1758988935.066:682): avc: denied { ioctl } for pid=12243 comm="syz.2.1668" path="socket:[35641]" dev="sockfs" ino=35641 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 552.947973][T12252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.956615][T12252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.965959][T12252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.973708][T12252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.036654][ T12] team_slave_1 (unregistering): left promiscuous mode [ 554.048067][ T12] team_slave_1 (unregistering): left allmulticast mode [ 554.080418][ T12] team0 (unregistering): Port device team_slave_1 removed [ 554.155066][ T12] team_slave_0 (unregistering): left promiscuous mode [ 554.163528][ T12] team_slave_0 (unregistering): left allmulticast mode [ 554.192337][ T12] team0 (unregistering): Port device team_slave_0 removed [ 555.025656][T12252] Bluetooth: hci3: command tx timeout [ 555.369029][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.380067][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.389378][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.397300][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.405226][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.580556][T12252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 555.594880][T12252] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 555.603485][T12252] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 555.611729][T12252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 555.619289][T12252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.588085][T12236] kthread_run failed with err -4 [ 557.090724][T12252] Bluetooth: hci3: command tx timeout [ 557.501213][T12252] Bluetooth: hci2: command tx timeout [ 557.654162][T12252] Bluetooth: hci6: command tx timeout [ 560.410817][T12252] Bluetooth: hci3: command tx timeout [ 560.416265][T12252] Bluetooth: hci2: command tx timeout [ 560.428778][ T5859] Bluetooth: hci6: command tx timeout [ 560.531560][T12274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1672'. [ 560.571392][T12275] vlan2: entered allmulticast mode [ 560.598226][T12275] bridge0: entered allmulticast mode [ 562.453866][T12252] Bluetooth: hci6: command tx timeout [ 562.453913][ T5861] Bluetooth: hci3: command tx timeout [ 562.539676][T12252] Bluetooth: hci2: command tx timeout [ 562.791641][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.324636][ T12] IPVS: stop unused estimator thread 0... [ 564.575943][T12252] Bluetooth: hci6: command tx timeout [ 564.684032][T12252] Bluetooth: hci2: command tx timeout [ 564.689843][T12301] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 565.147257][T12313] netlink: 'syz.5.1676': attribute type 4 has an invalid length. [ 565.229585][T12315] netlink: 'syz.5.1676': attribute type 4 has an invalid length. [ 565.578701][T12258] chnl_net:caif_netlink_parms(): no params data found [ 565.704294][T12256] chnl_net:caif_netlink_parms(): no params data found [ 566.113690][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 568.812039][T12336] misc userio: Invalid payload size [ 568.840848][T12336] netlink: 'syz.2.1679': attribute type 13 has an invalid length. [ 578.402236][T12332] kthread_run failed with err -4 [ 581.957716][T12249] chnl_net:caif_netlink_parms(): no params data found [ 582.383516][ T1089] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.404320][ T1089] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.419549][ T1089] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 582.559550][ T1089] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.572039][ T1089] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.582575][ T1089] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 582.607172][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.615723][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.626918][T12256] bridge_slave_0: entered allmulticast mode [ 582.634306][T12256] bridge_slave_0: entered promiscuous mode [ 582.647291][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.654482][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.665891][T12256] bridge_slave_1: entered allmulticast mode [ 582.673614][T12256] bridge_slave_1: entered promiscuous mode [ 582.680092][T12258] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.688840][T12258] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.697075][T12258] bridge_slave_0: entered allmulticast mode [ 582.710163][T12258] bridge_slave_0: entered promiscuous mode [ 582.749851][ T1089] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.762910][ T1089] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.784811][ T5968] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 582.793081][ T1089] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 582.830969][T12258] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.906357][T12258] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.916261][T12258] bridge_slave_1: entered allmulticast mode [ 582.931099][ T5968] usb 3-1: device descriptor read/64, error -71 [ 582.948334][T12258] bridge_slave_1: entered promiscuous mode [ 583.078006][ T1089] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 583.190564][ T5968] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 583.333439][ T1089] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.344132][ T5968] usb 3-1: device descriptor read/64, error -71 [ 583.353588][ T1089] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.400590][ T1089] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 583.455346][ T5968] usb usb3-port1: attempt power cycle [ 583.481726][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.599016][T12360] bridge0: entered promiscuous mode [ 583.610920][T12360] macsec1: entered promiscuous mode [ 583.637109][T12360] bridge0: port 1(macsec1) entered blocking state [ 583.646660][T12360] bridge0: port 1(macsec1) entered disabled state [ 583.663920][T12360] macsec1: entered allmulticast mode [ 583.676201][T12360] macsec1: left allmulticast mode [ 583.684287][T12360] bridge0: left promiscuous mode [ 583.729698][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.741545][T12258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.768851][T12258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.783960][T12249] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.794633][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.800762][ T5968] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 583.813361][T12249] bridge_slave_0: entered allmulticast mode [ 583.821154][ T5968] usb 3-1: device descriptor read/8, error -71 [ 583.825385][T12249] bridge_slave_0: entered promiscuous mode [ 583.856010][T12249] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.863428][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.884887][T12249] bridge_slave_1: entered allmulticast mode [ 583.900934][T12249] bridge_slave_1: entered promiscuous mode [ 584.009532][T12256] team0: Port device team_slave_0 added [ 584.039806][T12258] team0: Port device team_slave_0 added [ 584.071779][ T5968] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 584.112082][ T5968] usb 3-1: device descriptor read/8, error -71 [ 584.390795][ T5968] usb usb3-port1: unable to enumerate USB device [ 584.415348][T12249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.453193][T12256] team0: Port device team_slave_1 added [ 584.466339][T12258] team0: Port device team_slave_1 added [ 584.478458][T12249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.607955][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.620389][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.652476][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.667880][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.675437][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.706138][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.789760][T12258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.797370][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.824073][T12258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.836922][T12258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.846184][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.872370][T12258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.889268][T12249] team0: Port device team_slave_0 added [ 584.896787][T12249] team0: Port device team_slave_1 added [ 584.944985][ T1089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.958937][ T1089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 585.032564][T12256] hsr_slave_0: entered promiscuous mode [ 585.038753][T12256] hsr_slave_1: entered promiscuous mode [ 585.045242][T12256] debugfs: 'hsr0' already exists in 'hsr' [ 585.053472][T12256] Cannot create hsr debugfs directory [ 585.059593][T12249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.067552][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.094075][T12249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.120581][ T1089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.130956][ T1089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 585.147722][T12258] hsr_slave_0: entered promiscuous mode [ 585.155587][T12258] hsr_slave_1: entered promiscuous mode [ 585.161726][T12258] debugfs: 'hsr0' already exists in 'hsr' [ 585.167483][T12258] Cannot create hsr debugfs directory [ 585.188197][ T1089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.198604][ T1089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 585.228741][T12249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.235998][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.262378][T12249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.336952][ T1089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.348157][ T1089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 585.492244][T12249] hsr_slave_0: entered promiscuous mode [ 585.500404][T12249] hsr_slave_1: entered promiscuous mode [ 585.510164][T12249] debugfs: 'hsr0' already exists in 'hsr' [ 585.531891][T12249] Cannot create hsr debugfs directory [ 586.007354][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1687'. [ 586.088332][T12415] misc userio: Invalid payload size [ 586.095421][T12415] netlink: 'syz.2.1690': attribute type 13 has an invalid length. [ 586.103347][T12415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1690'. [ 586.568921][T12256] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 586.660738][ T5921] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 586.681988][T12256] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 586.764007][T12256] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 586.803150][T12256] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 586.822456][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.838834][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 586.856544][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 586.880016][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 586.902738][ T5921] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 586.918374][ T5921] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 586.925473][T12258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.929283][ T5921] usb 6-1: Manufacturer: syz [ 586.976080][ T5921] usb 6-1: config 0 descriptor?? [ 587.027977][T12258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 587.064749][T12258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 587.167252][T12258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 587.349922][ T1089] bridge_slave_1: left allmulticast mode [ 587.371749][ T5921] rc_core: IR keymap rc-hauppauge not found [ 587.373115][ T1089] bridge_slave_1: left promiscuous mode [ 587.377881][ T5921] Registered IR keymap rc-empty [ 587.394770][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.401476][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.416607][ T1089] bridge_slave_0: left allmulticast mode [ 587.424623][ T1089] bridge_slave_0: left promiscuous mode [ 587.430414][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.440143][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.450701][ T5914] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 587.462064][ T5921] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 587.499764][ T5921] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 587.520790][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.528241][ T1089] bond_slave_0: left promiscuous mode [ 587.537654][ T1089] bond_slave_1: left promiscuous mode [ 587.545589][ T1089] bond_slave_0: left promiscuous mode [ 587.555662][ T1089] bond_slave_1: left promiscuous mode [ 587.561588][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.595258][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.612891][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.631345][ T5914] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 587.631799][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.652365][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.670873][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.670981][ T5914] usb 3-1: config 0 descriptor?? [ 587.692488][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.697569][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 587.712222][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.738200][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.771118][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.806535][ T5921] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 587.826865][ T5921] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 587.848615][ T5921] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 587.896716][ T5921] usb 6-1: USB disconnect, device number 40 [ 587.918652][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1694'. [ 587.933420][T12458] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1694'. [ 588.108287][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 588.116174][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 588.124800][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 588.132134][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 588.139331][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 588.147550][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 588.155356][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 588.163731][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 588.222926][ T1089] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 588.232044][ T1089] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 588.245875][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.258240][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.268137][ T1089] bond0 (unregistering): Released all slaves [ 588.385977][ T1089] bond1 (unregistering): Released all slaves [ 588.666313][ T1089] bond1 (unregistering): (slave macvlan6): Removing an active aggregator [ 588.675516][ T1089] bond1 (unregistering): (slave macvlan6): Releasing backup interface [ 588.688465][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.699894][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.709896][ T1089] bond0 (unregistering): Released all slaves [ 588.834287][ T1089] bond1 (unregistering): Released all slaves [ 589.127048][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.137841][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.149641][ T1089] bond0 (unregistering): Released all slaves [ 589.204581][T12458] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 589.212230][T12458] macvlan4: entered allmulticast mode [ 589.217719][T12458] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 589.246003][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 589.258548][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 589.279229][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 589.293333][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 589.320585][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 589.351381][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 589.398266][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 589.420052][ T5914] pwc: Registered as video103. [ 589.448105][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 589.493963][ T5914] usb 3-1: USB disconnect, device number 39 [ 589.666105][T12256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.771264][ T5928] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 589.900359][T12256] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.184566][T12258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.234485][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.241655][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.253405][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 590.278604][ T5928] usb 6-1: config 13 has an invalid interface number: 191 but max is 0 [ 590.299156][ T5928] usb 6-1: config 13 has no interface number 0 [ 590.314003][ T5928] usb 6-1: config 13 interface 191 altsetting 156 bulk endpoint 0x2 has invalid maxpacket 1023 [ 590.324690][ T5928] usb 6-1: config 13 interface 191 has no altsetting 0 [ 590.335499][ T5928] usb 6-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=fd.3e [ 590.347457][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.360897][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.368102][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.393571][ T5928] usb 6-1: Product: syz [ 590.397955][ T5928] usb 6-1: Manufacturer: syz [ 590.410882][ T5928] usb 6-1: SerialNumber: syz [ 590.427166][T12464] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 590.479130][T12258] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.537023][T11407] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.544217][T11407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.632142][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 590.649238][T11407] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.656472][T11407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.671747][ T5928] HFC-S_USB 6-1:13.191: probe with driver HFC-S_USB failed with error -5 [ 590.687746][ T5928] usb 6-1: USB disconnect, device number 41 [ 590.703419][T12249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.757614][ T1089] hsr_slave_0: left promiscuous mode [ 590.767668][ T1089] hsr_slave_1: left promiscuous mode [ 590.777486][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.786586][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.798038][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.806793][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.817465][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 590.829303][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 590.844591][ T1089] hsr_slave_0: left promiscuous mode [ 590.850077][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 590.857745][ T1089] hsr_slave_1: left promiscuous mode [ 590.863975][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.871487][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.873570][ T10] usb 3-1: string descriptor 0 read error: -22 [ 590.885139][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 590.885540][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.894234][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.902587][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 590.921250][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.927912][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.933470][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 590.949366][ T10] usb 3-1: media controller created [ 590.960405][ T1089] hsr_slave_0: left promiscuous mode [ 590.972030][ T1089] hsr_slave_1: left promiscuous mode [ 590.977165][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.986738][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.014792][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.046354][ T1089] veth1_macvtap: left promiscuous mode [ 591.052569][ T1089] veth0_macvtap: left promiscuous mode [ 591.058206][ T1089] veth1_vlan: left promiscuous mode [ 591.063624][ T1089] veth0_vlan: left promiscuous mode [ 591.069757][ T1089] veth1_macvtap: left promiscuous mode [ 591.075532][ T1089] veth0_macvtap: left promiscuous mode [ 591.081170][ T1089] veth1_vlan: left promiscuous mode [ 591.086627][ T1089] veth0_vlan: left promiscuous mode [ 591.350926][ T30] audit: type=1400 audit(1758988973.506:683): avc: denied { listen } for pid=12476 comm="syz.2.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 592.052874][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 592.232415][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 592.274760][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 592.467731][T12494] netlink: 'syz.5.1700': attribute type 1 has an invalid length. [ 592.476059][T12494] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1700'. [ 593.047299][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 593.084542][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 593.412228][ T10] usb 3-1: USB disconnect, device number 40 [ 593.648390][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 593.704730][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 594.019830][T12249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 594.031474][T12249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 594.086917][T12249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 594.145024][T12256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.155721][T12256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.187963][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1703'. [ 595.236359][T12256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.427930][T12249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.509659][T12249] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.579643][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.586833][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.669996][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.677213][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.985202][T12258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.201778][ T1089] IPVS: stop unused estimator thread 0... [ 596.737522][T12256] veth0_vlan: entered promiscuous mode [ 596.886173][T12249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.919528][T12256] veth1_vlan: entered promiscuous mode [ 597.465663][T12256] veth0_macvtap: entered promiscuous mode [ 597.497351][T12256] veth1_macvtap: entered promiscuous mode [ 597.561633][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.587360][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.609690][T12258] veth0_vlan: entered promiscuous mode [ 597.682704][T11411] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.696892][T12258] veth1_vlan: entered promiscuous mode [ 597.783928][T12582] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 597.791098][T12582] overlayfs: failed to set xattr on upper [ 597.796844][T12582] overlayfs: ...falling back to redirect_dir=nofollow. [ 597.803811][T12582] overlayfs: ...falling back to index=off. [ 597.809631][T12582] overlayfs: ...falling back to uuid=null. [ 597.834842][T12582] fuse: Bad value for 'fd' [ 597.846356][T12582] overlayfs: failed to resolve './file1/file0': -2 [ 597.867238][T11411] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.100660][T11411] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.132023][T11411] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.133952][T12586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1708'. [ 598.291478][T12258] veth0_macvtap: entered promiscuous mode [ 598.310329][T12258] veth1_macvtap: entered promiscuous mode [ 598.322805][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.355056][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.422824][T12258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.497426][T12258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.526006][T11398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.564127][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.573027][T11398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.582240][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.619682][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.646297][ T30] audit: type=1400 audit(1758988980.876:684): avc: denied { mounton } for pid=12256 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 598.659815][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.760385][T12608] misc userio: Invalid payload size [ 598.766269][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 598.806711][T12608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1712'. [ 598.833019][T12249] veth0_vlan: entered promiscuous mode [ 599.010622][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 599.146064][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 599.153100][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.165308][T12249] veth1_vlan: entered promiscuous mode [ 599.175903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.218956][ T10] usb 6-1: config 47 has too many interfaces: 225, using maximum allowed: 32 [ 599.249648][ T10] usb 6-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 599.264022][ T10] usb 6-1: config 47 has 0 interfaces, different from the descriptor's value: 225 [ 599.275418][ T10] usb 6-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 599.299492][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.311147][ T10] usb 6-1: Product: syz [ 599.315564][ T10] usb 6-1: Manufacturer: syz [ 599.336325][T12249] veth0_macvtap: entered promiscuous mode [ 599.345445][ T10] usb 6-1: SerialNumber: syz [ 599.362217][ T7527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.365264][T12249] veth1_macvtap: entered promiscuous mode [ 599.393904][ T7527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.537943][T12249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.576092][ T10] usb 6-1: USB disconnect, device number 42 [ 599.582345][T12621] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1713'. [ 599.642752][T12249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.737271][T11411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.748930][T12625] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.1669'. [ 599.806633][T11411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.869216][T11411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.920229][T11411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.714110][T12644] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 601.721251][T12644] overlayfs: failed to set xattr on upper [ 601.726996][T12644] overlayfs: ...falling back to redirect_dir=nofollow. [ 601.734288][T12644] overlayfs: ...falling back to index=off. [ 601.740117][T12644] overlayfs: ...falling back to uuid=null. [ 601.783028][T12645] fuse: Bad value for 'fd' [ 601.791854][T12645] overlayfs: failed to resolve './file1/file0': -2 [ 602.350116][T12652] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 602.639695][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.694267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.721267][T12657] usb usb8: usbfs: process 12657 (syz.5.1718) did not claim interface 0 before use [ 602.792485][T11409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.812794][T11409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.322988][T12667] netlink: 'syz.7.1722': attribute type 8 has an invalid length. [ 604.259076][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 604.628082][T12690] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1725'. [ 604.950586][ T30] audit: type=1400 audit(1758988987.106:685): avc: denied { remount } for pid=12679 comm="syz.7.1724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 607.087464][ T5901] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 607.530802][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 607.543103][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.572627][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 607.619823][ T5901] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 607.688504][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.751769][ T5901] usb 6-1: config 0 descriptor?? [ 607.776486][ T5901] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 608.692587][T12710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.721082][T12710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.941137][T12739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.965327][ T5901] usb 6-1: USB disconnect, device number 43 [ 609.029900][T12742] bond_slave_0: entered promiscuous mode [ 609.035727][T12742] bond_slave_1: entered promiscuous mode [ 609.051191][T12742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 609.059109][T12742] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 610.087237][ T5914] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 610.384883][T12714] bridge0: entered promiscuous mode [ 610.400096][ T5914] usb 8-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 610.428214][T12714] macsec1: entered promiscuous mode [ 610.433638][ T1206] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 610.446547][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.471604][ T5914] usb 8-1: config 0 descriptor?? [ 610.484373][T12714] bridge0: port 3(macsec1) entered blocking state [ 610.494244][ T5914] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 610.520741][ T5914] input: xirlink-cit as /devices/platform/dummy_hcd.7/usb8/8-1/input/input49 [ 610.600648][ T1206] usb 9-1: device descriptor read/64, error -71 [ 610.682975][T12714] bridge0: port 3(macsec1) entered disabled state [ 610.721681][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.756153][T12714] macsec1: entered allmulticast mode [ 610.767372][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.785337][ T5901] usb 8-1: USB disconnect, device number 2 [ 610.845546][ T1206] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 610.861044][T12714] bridge0: entered allmulticast mode [ 610.895352][T12714] macsec1: left allmulticast mode [ 610.903676][T12714] bridge0: left allmulticast mode [ 610.934983][T12714] bridge0: left promiscuous mode [ 611.000714][ T1206] usb 9-1: device descriptor read/64, error -71 [ 611.143332][ T1206] usb usb9-port1: attempt power cycle [ 611.505027][ T1206] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 611.831583][ T1206] usb 9-1: device descriptor read/8, error -71 [ 612.293752][ T1206] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 612.366927][ T30] audit: type=1400 audit(1758988994.596:686): avc: denied { mount } for pid=12783 comm="syz.2.1744" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 612.392205][T12785] tracefs: Invalid uid '0x00000000ffffffff' [ 612.398898][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 612.429911][ T30] audit: type=1400 audit(1758988994.626:687): avc: denied { remount } for pid=12783 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 612.457108][ T1206] usb 9-1: device descriptor read/8, error -71 [ 612.469392][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1745'. [ 612.497592][T12780] comedi comedi0: pcm3724: a I/O base address must be specified [ 612.633426][ T1206] usb usb9-port1: unable to enumerate USB device [ 612.829237][ T30] audit: type=1400 audit(1758988995.046:688): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 613.504554][T12816] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 613.516647][ T30] audit: type=1400 audit(1758988995.726:689): avc: denied { mount } for pid=12811 comm="syz.6.1750" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 613.725606][ T30] audit: type=1400 audit(1758988995.736:690): avc: denied { mounton } for pid=12811 comm="syz.6.1750" path="/5/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 614.578169][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 614.739453][ T30] audit: type=1400 audit(1758988996.966:691): avc: denied { unmount } for pid=12249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 614.784046][T12839] vlan2: entered allmulticast mode [ 614.789249][T12839] bridge0: entered allmulticast mode [ 614.810953][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 614.840721][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.439777][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 615.441094][ T30] audit: type=1400 audit(1758988997.666:692): avc: denied { listen } for pid=12842 comm="syz.5.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 615.462541][ T5914] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 615.554854][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.742764][ T5914] usb 3-1: Product: syz [ 615.746978][ T5914] usb 3-1: Manufacturer: syz [ 615.773473][ T5914] usb 3-1: SerialNumber: syz [ 615.795332][ T5914] usb 3-1: config 0 descriptor?? [ 616.071750][ T3429] ------------[ cut here ]------------ [ 616.077636][ T3429] WARNING: CPU: 1 PID: 3429 at io_uring/io_uring.c:2980 io_ring_exit_work+0x3fc/0x10f0 [ 616.087495][ T3429] Modules linked in: [ 616.091773][ T3429] CPU: 1 UID: 0 PID: 3429 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 616.101337][ T3429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.111926][ T3429] Workqueue: iou_exit io_ring_exit_work [ 616.117502][ T3429] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 616.123769][ T3429] Code: 0f 85 0a 0b 00 00 48 8b 05 a1 8a 48 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 cf 0e e3 fc 4d 85 f6 79 12 e8 55 13 e3 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 43 13 e3 fc 48 8b 74 24 60 [ 616.143860][ T3429] RSP: 0000:ffffc9000cc37a90 EFLAGS: 00010293 [ 616.149929][ T3429] RAX: 0000000000000000 RBX: ffff888052d686c8 RCX: ffffffff84d88771 [ 616.157904][ T3429] RDX: ffff8880319f8000 RSI: ffffffff84d8877b RDI: 0000000000000007 [ 616.165901][ T3429] RBP: ffffc9000cc37c50 R08: 0000000000000007 R09: 0000000000000000 [ 616.173979][ T3429] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff888052d68000 [ 616.182026][ T3429] R13: dffffc0000000000 R14: fffffffffffffffc R15: ffff888052d68040 [ 616.189979][ T3429] FS: 0000000000000000(0000) GS:ffff8881247b1000(0000) knlGS:0000000000000000 [ 616.199084][ T3429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.205771][ T3429] CR2: 000000110c2df118 CR3: 0000000028379000 CR4: 00000000003526f0 [ 616.214089][ T3429] Call Trace: [ 616.217352][ T3429] [ 616.220267][ T3429] ? __pfx_io_ring_exit_work+0x10/0x10 [ 616.225986][ T3429] ? rcu_is_watching+0x12/0xc0 [ 616.230810][ T3429] ? preempt_schedule_thunk+0x16/0x30 [ 616.236171][ T3429] process_one_work+0x9cc/0x1b70 [ 616.241119][ T3429] ? __pfx_batadv_nc_worker+0x10/0x10 [ 616.246470][ T3429] ? __pfx_process_one_work+0x10/0x10 [ 616.251899][ T3429] ? assign_work+0x1a0/0x250 [ 616.256479][ T3429] worker_thread+0x6c8/0xf10 [ 616.261071][ T3429] ? __kthread_parkme+0x19e/0x250 [ 616.266076][ T3429] ? __pfx_worker_thread+0x10/0x10 [ 616.271179][ T3429] kthread+0x3c2/0x780 [ 616.275319][ T3429] ? __pfx_kthread+0x10/0x10 [ 616.279890][ T3429] ? rcu_is_watching+0x12/0xc0 [ 616.284698][ T3429] ? __pfx_kthread+0x10/0x10 [ 616.289283][ T3429] ret_from_fork+0x56a/0x730 [ 616.293879][ T3429] ? __pfx_kthread+0x10/0x10 [ 616.298445][ T3429] ret_from_fork_asm+0x1a/0x30 [ 616.303209][ T3429] [ 616.306207][ T3429] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 616.313472][ T3429] CPU: 1 UID: 0 PID: 3429 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 616.322903][ T3429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.332938][ T3429] Workqueue: iou_exit io_ring_exit_work [ 616.338475][ T3429] Call Trace: [ 616.341738][ T3429] [ 616.344646][ T3429] dump_stack_lvl+0x3d/0x1f0 [ 616.349216][ T3429] vpanic+0x6e8/0x7a0 [ 616.353191][ T3429] ? __pfx_vpanic+0x10/0x10 [ 616.357670][ T3429] ? io_ring_exit_work+0x3fc/0x10f0 [ 616.362844][ T3429] panic+0xca/0xd0 [ 616.366546][ T3429] ? __pfx_panic+0x10/0x10 [ 616.370947][ T3429] ? check_panic_on_warn+0x1f/0xb0 [ 616.376031][ T3429] check_panic_on_warn+0xab/0xb0 [ 616.380947][ T3429] __warn+0xf6/0x3c0 [ 616.384816][ T3429] ? io_ring_exit_work+0x3fc/0x10f0 [ 616.389990][ T3429] report_bug+0x3c3/0x580 [ 616.394294][ T3429] ? io_ring_exit_work+0x3fc/0x10f0 [ 616.399465][ T3429] handle_bug+0x184/0x210 [ 616.403786][ T3429] exc_invalid_op+0x17/0x50 [ 616.408287][ T3429] asm_exc_invalid_op+0x1a/0x20 [ 616.413123][ T3429] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 616.418912][ T3429] Code: 0f 85 0a 0b 00 00 48 8b 05 a1 8a 48 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 cf 0e e3 fc 4d 85 f6 79 12 e8 55 13 e3 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 43 13 e3 fc 48 8b 74 24 60 [ 616.438504][ T3429] RSP: 0000:ffffc9000cc37a90 EFLAGS: 00010293 [ 616.444543][ T3429] RAX: 0000000000000000 RBX: ffff888052d686c8 RCX: ffffffff84d88771 [ 616.452502][ T3429] RDX: ffff8880319f8000 RSI: ffffffff84d8877b RDI: 0000000000000007 [ 616.460483][ T3429] RBP: ffffc9000cc37c50 R08: 0000000000000007 R09: 0000000000000000 [ 616.468480][ T3429] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff888052d68000 [ 616.476430][ T3429] R13: dffffc0000000000 R14: fffffffffffffffc R15: ffff888052d68040 [ 616.484381][ T3429] ? io_ring_exit_work+0x3f1/0x10f0 [ 616.489557][ T3429] ? io_ring_exit_work+0x3fb/0x10f0 [ 616.494732][ T3429] ? __pfx_io_ring_exit_work+0x10/0x10 [ 616.500163][ T3429] ? rcu_is_watching+0x12/0xc0 [ 616.504904][ T3429] ? preempt_schedule_thunk+0x16/0x30 [ 616.510254][ T3429] process_one_work+0x9cc/0x1b70 [ 616.515173][ T3429] ? __pfx_batadv_nc_worker+0x10/0x10 [ 616.520520][ T3429] ? __pfx_process_one_work+0x10/0x10 [ 616.525872][ T3429] ? assign_work+0x1a0/0x250 [ 616.530441][ T3429] worker_thread+0x6c8/0xf10 [ 616.535015][ T3429] ? __kthread_parkme+0x19e/0x250 [ 616.540017][ T3429] ? __pfx_worker_thread+0x10/0x10 [ 616.545100][ T3429] kthread+0x3c2/0x780 [ 616.549157][ T3429] ? __pfx_kthread+0x10/0x10 [ 616.553722][ T3429] ? rcu_is_watching+0x12/0xc0 [ 616.558459][ T3429] ? __pfx_kthread+0x10/0x10 [ 616.563022][ T3429] ret_from_fork+0x56a/0x730 [ 616.567583][ T3429] ? __pfx_kthread+0x10/0x10 [ 616.572144][ T3429] ret_from_fork_asm+0x1a/0x30 [ 616.576889][ T3429] [ 616.580090][ T3429] Kernel Offset: disabled [ 616.584388][ T3429] Rebooting in 86400 seconds..