last executing test programs: 9m21.814821673s ago: executing program 2 (id=827): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getresgid(&(0x7f0000000340), &(0x7f0000000380), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9m20.979878555s ago: executing program 2 (id=829): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x80044dff, 0x1000000000000) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201141001090222000100000000090400000103e900000905000000000000000705d77b5d2898"], 0x0) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x7, 0x4) (rerun: 32) 9m17.547720689s ago: executing program 2 (id=839): syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580), &(0x7f0000000140)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000176dd9a4da5dd8be000000005f48f276ecdcfd8a5416e5edbd17771838f84bd4194e6685c6e7390d31cbc73d035ffe734f5bf69be8946e9304b0b71d54c7a99b1b35441b353794b0c713dc092514cada0bf5026376429c2e792bf0c1c07d43aab47378b0161d1fd0a6f61fbfa9d0ba326af02e452e743211e822ba51727325e9afaeeb8d", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x21, 0x2, 0x7) socket$inet6(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c000, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x641, 0x4000000c, r4, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) fanotify_mark(r3, 0x1, 0x8001023, r4, 0x0) utimensat(r4, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xa, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000300)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 9m16.920050383s ago: executing program 2 (id=840): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x11) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGSW(r3, 0x80404531, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) syz_pidfd_open(r7, 0x0) 9m15.651789387s ago: executing program 2 (id=842): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6a, 0x2}, @cond=[{0x0, 0x400}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000180)={0x1, 0x0, 0x0}) r3 = socket(0x22, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r4, @ANYBLOB="010027bd06a3bba1df00264b91cfb6ec252fb9dc2b154a1b0f00e62f31fa9a7de5989742de43a5013a787cf74f3c676c84cc0656298bb8b6d34fd3ee7609b3680813af930a47c22066b3a856fb88c8ba1fc21f12bca1981c7fef8c2c70b0183ee4ae969160299bc2b3567481b787188d1276691e97679598ed40707e34d7078f4c49da0672cccd6a0b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000007c0)={0x0, 0x9, 0x1, [0x8, 0x1, 0x1, 0x7ffd, 0x5], [0x3, 0x8001, 0x0, 0x1, 0x2, 0x79b, 0x1, 0x80, 0xfffffffffffffffd, 0x7f, 0xa, 0x1, 0x5, 0x6, 0x8, 0x686b, 0x9, 0x7, 0x2, 0x6, 0xffffffff00000000, 0x1, 0x0, 0xa00, 0x8, 0x0, 0x2, 0x8, 0x9, 0x2, 0x1, 0x20, 0xd, 0x0, 0x4, 0x4, 0x400, 0x6, 0x0, 0x9, 0x80000001, 0x100, 0x1, 0x7, 0x3, 0xffffffffffffffff, 0x26616247, 0x3, 0x7fff, 0x40, 0xdc, 0x4, 0x4, 0x3, 0xfffffffffffffffb, 0x3, 0x20000004, 0x5, 0x2, 0x5, 0x9a, 0x5, 0xa, 0xe2, 0x3b, 0x9, 0x100000001, 0x2, 0x5, 0x2, 0x4bef, 0xfffffffffffffffa, 0x7, 0x8, 0x5, 0x5, 0xffffffff, 0x31b5, 0xa, 0x5, 0xff, 0x1000, 0x0, 0xe000000, 0x100, 0x101, 0xf75, 0x8, 0x6, 0x3, 0x2, 0x10000, 0x0, 0x5, 0xfffffffffffffffe, 0x8, 0x4a78533c, 0x7, 0x2, 0x4, 0x7fffffffffffffff, 0x1, 0x4, 0xffffffff, 0x6a5, 0xfffffffffffffff9, 0x10, 0x2222, 0x8, 0x101, 0x8a97, 0x2, 0x3ff, 0x2, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c00)={0x0, 0xff, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000010c0)={0x0, 0x2, {0x7, @struct={0x1c, 0x9}, 0x0, 0x6, 0xe0, 0x8, 0xa21, 0x4, 0x3, @struct={0xb, 0x6}, 0x18000, 0x1, [0x200, 0x7fff, 0x4, 0x92, 0x3e, 0x800]}, {0x9, @usage=0xa, r5, 0x0, 0x4, 0x1, 0x3f39, 0x80000001, 0x0, @usage=0x8000000000000000, 0x401, 0x687, [0x1, 0xff, 0x5, 0x3ff, 0x1, 0x8000000000000001]}, {0x5, @usage=0x8, r6, 0xd24e, 0x7, 0x2, 0x101, 0x40, 0x446, @usage=0x7a86, 0x9, 0x2, [0x1118, 0xfffffffffffffffd, 0x8, 0xfffffffffffffffe, 0xb32, 0x80000000]}, {0xffffffffffffffff, 0xffffffffffffffff, 0x40000}}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 9m14.672151236s ago: executing program 2 (id=849): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) socket$inet(0x2, 0x2, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) dup(r0) recvmmsg(r0, &(0x7f0000000d80), 0x2, 0x10162, 0x0) 8m59.149456799s ago: executing program 32 (id=849): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) socket$inet(0x2, 0x2, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) dup(r0) recvmmsg(r0, &(0x7f0000000d80), 0x2, 0x10162, 0x0) 4m42.569427342s ago: executing program 5 (id=1626): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init() poll(&(0x7f0000000080)=[{r4}], 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x10001, 0x402) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[0x0], 0x1}) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) copy_file_range(r6, 0x0, r6, 0x0, 0x9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, 0x0, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="bbc3bbbbbbbb0180c200000186dd6087fb8900000000fe880000000000000000000000000001fc02000000000000000000000000000077ff8511c052cb7d1e20d4801a6691ceac2409628c9f8c2ac679951a62f7fb9a2f7f2c67eac94f"], 0x0) memfd_secret(0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4m42.347774377s ago: executing program 5 (id=1627): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x18, 0x3, "4ef1c2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = io_uring_setup(0x59f8, &(0x7f0000002040)={0x0, 0xffffffff, 0x0, 0x0, 0x39d}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x17) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 4m37.02266263s ago: executing program 5 (id=1640): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m34.569457728s ago: executing program 5 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x80, 0xa6, 0x0, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x66, 0x0, 0x0, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x23, 0xf4, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @multicast1, @remote, @remote, @local]}, @timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0xe, [{@private=0xa010102, 0xb}]}, @timestamp={0x44, 0x10, 0xcb, 0x0, 0xb, [0xb, 0x825, 0x9d35]}, @generic={0x86, 0x3, "88"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f80)=@deltfilter={0x1d38, 0x2d, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0xe, 0x7}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10cc, 0x2, [@TCA_CGROUP_POLICE={0x878, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x1, 0x8, 0x1, 0x8, 0x3, 0x7, 0x8, 0xee, 0x52, 0xff, 0x9, 0x9, 0x0, 0x1, 0xffffffcb, 0x5a, 0x4, 0x8, 0x5, 0x7f51, 0x9, 0x4, 0x5, 0x1, 0xd00c, 0x1, 0x1ff, 0x9, 0x1, 0x9, 0x4, 0x5, 0x4, 0x7, 0x2f5, 0x3, 0x7, 0x4, 0x3c2, 0x6, 0xffff, 0x81, 0x7, 0x6, 0xffffff99, 0x1, 0x3fd2e228, 0x3, 0x9, 0x5, 0x6, 0x6, 0x8000, 0x1, 0x7, 0x0, 0x5, 0x7, 0xca11, 0x1, 0x1, 0xe, 0x7, 0x80, 0x6, 0x8, 0x7, 0x8e4, 0x1, 0xb, 0x4, 0x9, 0x7, 0x40, 0x8001, 0xe700000, 0x4, 0x9, 0x5, 0x44, 0x0, 0x97, 0xe1, 0xfffffff9, 0x1000, 0x100, 0x9, 0x1, 0x8, 0x7, 0x6, 0x200, 0x7, 0xfffffffb, 0x80, 0x3, 0xffff8001, 0xe36, 0x7ff, 0xffffff00, 0xffffffff, 0x5, 0xcb, 0x7, 0x0, 0x3, 0x393, 0xe, 0x5, 0x2, 0x2, 0x8, 0x1, 0x8001, 0x80000001, 0x0, 0x7, 0xffff, 0x9, 0x7, 0x81, 0x0, 0x3, 0x7ff, 0x5, 0x6f74, 0x6c18, 0x8001, 0xfffffff9, 0x50b1, 0x7fff, 0x5, 0x401, 0x401, 0x9, 0x3, 0x1, 0x0, 0xc, 0x6, 0x0, 0xb, 0x9, 0x40000, 0xfffffffa, 0x9, 0x5, 0xd5, 0x4, 0x4, 0x6c, 0x4, 0x8, 0x2, 0x7, 0xc, 0x7, 0x5, 0x7f, 0xd4dd, 0x401, 0xffff, 0x1, 0x1, 0x9, 0x5, 0xff, 0x74, 0x9, 0x50, 0x6, 0x4, 0x8000, 0xbf, 0x1000, 0x6, 0x8, 0x7f, 0x2, 0xbf2, 0x2, 0x5, 0x10001, 0x6, 0x3, 0x1, 0x2, 0x2, 0x9, 0x1, 0x5, 0x8, 0x90000000, 0x7, 0x2, 0x2, 0x9, 0x7f, 0x1, 0x401, 0x0, 0x74d, 0xd0, 0x1, 0x10001, 0x5, 0x1, 0x3, 0x3, 0xfffff801, 0xc2, 0x6, 0x9, 0x9, 0x4, 0xe9, 0x5, 0x5, 0x10, 0x7, 0x5, 0x0, 0x7, 0x7, 0xfd3, 0x6, 0x2, 0x6, 0x1, 0x7, 0x1ff, 0x0, 0x2, 0x36a8, 0x7ff, 0xf, 0x431, 0x5, 0x3, 0xb, 0xa, 0x1000, 0x5, 0x3, 0x1, 0x2ae, 0x7, 0x5, 0x71, 0x5, 0x6, 0x2, 0x8, 0x1, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5, 0x1, {0xfc, 0x0, 0x5, 0xc7, 0x0, 0x81}, {0x7, 0x0, 0x7, 0x40, 0xfcb7, 0x9}, 0xa, 0x67, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x8, 0x0, 0x2, 0xb, 0x8, 0x9, 0x9, 0x1, 0x9, 0x6, 0x8001, 0x800000, 0x40, 0xf, 0x2d4bbed9, 0x6, 0x100, 0x5, 0x47, 0xfffffffd, 0xfffffffe, 0xf1, 0x9, 0x3, 0x8, 0x2815, 0x4, 0x81, 0x10001, 0x40000000, 0x2, 0x0, 0x8, 0x682, 0x6, 0x7, 0x2, 0x87c9, 0x6, 0x101, 0x50e, 0x6, 0x9, 0x80, 0xa, 0x4, 0x6, 0x4, 0x100, 0x4, 0x5, 0x5, 0x2, 0x400, 0x6, 0x2, 0x8, 0x5, 0xfffffffe, 0x4, 0x4c3, 0x2, 0x1, 0x52, 0x7, 0x5000000, 0x2, 0x1, 0xf, 0x7d3b, 0x8, 0xc, 0x0, 0x4, 0xffff31b6, 0x8000, 0x3, 0x10000, 0x0, 0x7, 0x3, 0x6, 0x7fffffff, 0x9, 0x6, 0x10, 0x6, 0x800, 0x7fff, 0x7fffffff, 0x4, 0x0, 0x100, 0x6, 0x8, 0x2, 0x0, 0x3, 0x8, 0x10001, 0xe7, 0x7, 0x2, 0x8, 0x8, 0x80000000, 0x2, 0x9, 0x6553, 0x9, 0x20f5, 0x5, 0xfff, 0x3, 0xa, 0x4, 0x6, 0xe670, 0xf0d, 0x7, 0x80000001, 0x2, 0x5, 0x7f, 0xfffffff9, 0x9, 0x401, 0x5, 0x7, 0x44c, 0xffffffff, 0x2, 0x1, 0x3, 0x7ff, 0x4, 0x0, 0x9, 0x5, 0x2, 0x9, 0x4, 0xc, 0x4, 0x9, 0x6, 0x7, 0xabe3, 0xf, 0x0, 0x9, 0xfe07, 0x401, 0x8, 0x80000001, 0x6, 0x1ff, 0x5cd50657, 0x3, 0x80, 0x197e297a, 0x1, 0xfff, 0x3ff, 0xa0f7, 0x2, 0x0, 0x1, 0x0, 0x655d, 0x8b, 0x3, 0x8, 0xffffffff, 0x2, 0x1ff, 0x1, 0xb, 0xd35, 0xab, 0x2, 0xc2d, 0x2, 0x1, 0x1, 0x2, 0x6353513f, 0x80000001, 0x2, 0x5, 0x6, 0x7, 0x3, 0xc, 0x6, 0x6, 0x8, 0x3, 0x400, 0x8080000, 0xfff, 0x9, 0x8000, 0x3633, 0x4, 0xbc4, 0x0, 0x80000000, 0x4, 0x0, 0xffff4f20, 0x5, 0x5, 0x6, 0x9, 0x6, 0x10001, 0x8, 0x8, 0x6b89, 0x7, 0x2, 0x6, 0x8, 0x7, 0x6, 0xfffffffe, 0x0, 0x6, 0x521, 0x35f, 0x0, 0x9, 0x4, 0x6, 0x1, 0x5, 0xcff1, 0x3, 0xd8, 0x7, 0x7, 0x2, 0x0, 0x4, 0x6, 0xb87, 0x6, 0x96238fb, 0xa6c8, 0x10000, 0x2, 0x5, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]}, @TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff17d9, 0x1, 0x3, 0x8, 0x2, 0xdb, 0xff, 0xc, 0x9d, 0x1ff, 0x3, 0x3, 0x5, 0x3, 0x401, 0x7f, 0x715, 0xfffffe85, 0x0, 0x8, 0x7, 0x3, 0x8001, 0x4, 0x8, 0x9, 0x0, 0x8, 0x1, 0x8001, 0x7, 0x20000, 0x0, 0x0, 0xfff, 0x3, 0xaa3, 0x1, 0x965, 0xfffffffe, 0x400, 0x4, 0x0, 0x762, 0x6, 0x0, 0xebe, 0x1, 0x101, 0xb0, 0x6, 0x3, 0x8, 0x4, 0x87, 0x2, 0x1, 0x9, 0x2, 0xc1, 0x4, 0x2, 0x9, 0x6, 0x7, 0xfffffffb, 0x5, 0x2, 0xb, 0x1, 0x0, 0x46f6, 0x47, 0x3, 0x77a9, 0x8, 0x9, 0x3, 0x0, 0x4, 0x3, 0x5, 0xc00, 0xa, 0x10001, 0x9, 0x9, 0x1, 0x7, 0x1, 0x8, 0x7fffffff, 0x5, 0xffffffff, 0xfffffff9, 0x1, 0x4, 0x6, 0x9, 0xa39, 0x1000, 0x8, 0x1ff, 0xc165, 0x8, 0x0, 0x3, 0x80000000, 0xd2400000, 0x8, 0x8, 0x4, 0x6, 0x2, 0xc8, 0x126, 0x3, 0xc64, 0x1, 0x2, 0x8, 0x6cd2, 0xffff99a7, 0x7, 0x7, 0x4, 0x5, 0x9, 0xf8000000, 0x4, 0x0, 0xffffffff, 0x6, 0x2, 0x0, 0x10, 0x9, 0x2, 0x4, 0xfffeffff, 0x1, 0x0, 0x200, 0x3, 0x4, 0x86, 0x4, 0x7f, 0x7fff, 0x0, 0x2154, 0x2, 0x8, 0x4, 0xf, 0x0, 0xb, 0x181646b2, 0x200000, 0x3, 0xb, 0x4c85, 0xb, 0x80000001, 0x6, 0x7, 0x3f80, 0xe, 0xd30d, 0xa, 0xa, 0x10, 0x542, 0xf, 0x8, 0xb4, 0x81, 0xff, 0xeb06, 0xe5, 0xfffffffe, 0x10, 0x1, 0x8, 0xcc, 0x1ff, 0x3, 0x9, 0xa3d5, 0x2, 0xc2be, 0x5, 0xfffffffa, 0x6, 0x0, 0x4, 0xe, 0x5, 0x10, 0x5d3, 0x1, 0x6, 0x7, 0xfffffffe, 0x2, 0xffffffff, 0x2, 0x8000, 0x3, 0x0, 0x3, 0xffff7fff, 0xd, 0x420, 0x9, 0x2, 0xdc7119, 0x0, 0x3, 0x8, 0x386, 0xb, 0x2, 0xa3e, 0x6, 0x500000, 0xffffffff, 0x0, 0x80, 0x9, 0x8, 0x401, 0x3a42, 0x95, 0x1, 0x0, 0x7f, 0x101, 0x5, 0x4, 0x1ba4, 0x6, 0x8, 0x1, 0x8, 0x7d, 0x5, 0x412f, 0x9, 0x7fff, 0x0, 0x4, 0x4, 0xdb5, 0x27de, 0xffff8001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xd, 0x6, 0xd9d, 0xffffffff, {0xff, 0x1, 0xfff8, 0xffff, 0xf0, 0x3}, {0x1, 0x2, 0x1000, 0x4, 0x3, 0x3}, 0xc0, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0xe, 0x4, 0x8, 0x200, 0x1, 0x3b, 0x9, 0x101, 0x6, 0x64c7, 0x7ff, 0x1, 0x8, 0x1, 0x7fffffff, 0x7, 0x401, 0x9, 0x81, 0x10001, 0x2, 0x6, 0xea, 0x7ff, 0x1, 0xc5, 0x9, 0x4, 0xfffff339, 0xe, 0x1, 0x6, 0x8, 0x10000, 0x6, 0x5, 0x8001, 0x0, 0x7, 0x401, 0x91a, 0xe2b0, 0x0, 0x40, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x38000, 0x7, 0x2, 0x7, 0xa, 0x6, 0xf759, 0x8, 0x5, 0x0, 0x3, 0x0, 0x7, 0x3, 0x2, 0x6, 0x7, 0x2, 0x3ff, 0x6, 0x0, 0x400, 0x800, 0x6, 0x4, 0x6, 0xd, 0xb, 0xfff, 0x16820, 0x8, 0x1, 0x2, 0x8, 0x200, 0x2, 0xd646, 0x4, 0x13, 0x8, 0x4, 0x10000, 0x2, 0x9, 0x7, 0x3, 0x38c, 0x0, 0x5, 0x2, 0xb784, 0xfffffffd, 0x6, 0x81, 0x10001, 0x10001, 0x1, 0x9, 0x6, 0x3, 0x3, 0x400, 0xff, 0x1, 0x5, 0xfffffc01, 0x5a, 0x7ff, 0x9, 0x80000000, 0x3, 0x5, 0x7, 0xf, 0xfffffff7, 0x6d2000, 0x100, 0x6, 0x40, 0x5ce4, 0x2, 0x4, 0x7, 0x4, 0x100, 0x9, 0x1000, 0xd, 0x40, 0xff, 0x8000, 0x0, 0x66f9, 0x0, 0x4, 0x2, 0x7ff, 0x7, 0x0, 0x41, 0xfffffffb, 0x7, 0x3, 0x9, 0x401, 0x10000, 0x8, 0x9, 0x2, 0xff, 0x4, 0x4, 0x6, 0xfffffff9, 0x1, 0x5, 0x67b23441, 0x0, 0x1ff, 0x3980000, 0x3, 0x2, 0x81, 0x3, 0x8, 0x1, 0xc8, 0x2, 0x4, 0x5, 0x27, 0x4, 0x3, 0xfffffffd, 0x7, 0x3, 0x8, 0xffffffff, 0x10001, 0x4, 0xec79, 0xd, 0x5, 0x7ff, 0x8, 0x2, 0x1, 0x8, 0x80, 0xfffffff7, 0x7ff, 0x6, 0x0, 0x9, 0x79d7, 0x6, 0xffffff01, 0x8, 0x2, 0x1, 0x4, 0x2, 0x8, 0x1, 0x2, 0x372811e3, 0x91e0, 0x5, 0x80, 0x6, 0x7, 0x0, 0x2, 0x3, 0x2, 0x0, 0x0, 0x9, 0x1000, 0x263c, 0x8, 0x7, 0x5, 0x6, 0x8001, 0x5, 0x9, 0xfffffff8, 0x893, 0x939, 0x190f, 0x19, 0x9, 0x1, 0x3, 0x6769, 0xefdc, 0xe2, 0x10000, 0x3a, 0x8, 0x4, 0x800, 0x101, 0x75]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xb}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x2d0, 0x2, [@TCA_BASIC_EMATCHES={0x2c4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0x1c0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x540, 0x1, 0xffff}, {0xc6f, 0x100, 0x800, 0x4, 0xa, 0x0, 0x1}}}, @TCF_EM_IPT={0x88, 0x3, 0x0, 0x0, {{0x48, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1b, 0x5, "6bdabeceae9c619885e5ca39afbe3f7d52dd199364804e"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x2e, 0x5, "c5572b608f40c66e6b1ca6f8a7d17eb57984cd80a85b0984e04c19a6f3f94340448d853834d26d7f1d0a"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0xc000, 0x4, 0x2f70}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x8}, {0x0, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="b64590", @TCF_META_TYPE_VAR="36d49d186b5116c20d96", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bd328c06b5accf", @TCF_META_TYPE_VAR="16f9e6fb77"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xc5, 0x2}, {0x8000, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0e", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x401}, [@TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="1c053921c3a8", @TCF_META_TYPE_VAR="3267c8ddfc", @TCF_META_TYPE_VAR="56166b71", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="683c1b825469f5a0"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x68, 0xdd}, {0x7, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="4891c6", @TCF_META_TYPE_VAR="a6c8d5bfc4a1d71d5e84", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3f8ed19527e53bfe53", @TCF_META_TYPE_VAR="951426", @TCF_META_TYPE_VAR="9538d0026c8e52b3e0"]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="18bcc44678aea5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8b, 0x1}, {0x6, 0x9b, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe}, {0x1, 0x5, 0x1}}}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x6}, {0x3, 0x6, 0x0, "a30428e4f1c4"}}}]}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x2}, "f21695b85c1992e36117bcb2fff1ce8bb7dfd21ada3876ae562398dd341a85f2037f41920ae1a32ffb914e3783adc4ac80598f0bb87296784a0157d0abd3177df15d1282e1614a3083d078a5e99575aa57b8aa5b72962b2daf045de2ba8024990022142fdf9c462732c8d5c53c0092e6783675d91f3823ae35ade96374707171b181fc286671ec074f182097387822ed0565a88a583bcddd50b382e31b38890898afc01933a225371119f6ef880187c15f3f0b691ce07e01"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x34ea, 0x3, 0xe}, {0x3, 0x40, 0x58, 0x8}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x7}, {0xcbbe, 0x2, 0x2, "ffa0"}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xd}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x3e0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x3cc, 0x2, [@m_sample={0x88, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2b3, 0x19, 0x7, 0x7, 0x7}}]}, {0x39, 0x6, "13640f24cdb80b8ecb4c9d176c7eb47617c71ce2192fcce075d897dc54bb8d316cc81147b0895e0cbd7c10f8a1ac2261dc4a1a0c29"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xec, 0x3, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x10000000, 0xfffffe70}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x7a, 0x6, "9503625ee9ce3239fb8a394f5bf5e2a657e7007656f1605eb3f80f0eea713a0e745768ade9e035bf3a409b72c65e2a3624f9d85c4d4fc6c790f696c96eb3f150966889f5be7e0ba2d047b8fb0d5b53a4b454f61a0570e80720198320c4312b35d0a7d2d455b0a816e2cda943af6b387e8f7e4af2a8fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x9c, 0x11, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x80, 0xffffffffffffffff, 0x400, 0x99}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x220}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x49e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4bb}]}, {0x24, 0x6, "835eeb66fbd38bbdecfd83b2c7c43da3106e48155cf30f9660bfdb9f7a198ebe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x140, 0x6, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0xffffffffffffffff, 0x80000, 0x9}}}]}, {0xc5, 0x6, "a2c175cbce817edeb1b1190e8e30a6290489dc7a26aef84348532919ccb503eca70b5d58a17c1e500e03f5bbce6140a762aa641db1bdfedb23a25194ae2608c906ba8df1740adbddb2ed2a7d6b71bfed2c530c27ec36040b65e6c5fa6c7ad740017c8c54dee22af431682a9ef437bd4ba0b093a647b3a6e60fad8446df7d3e0fd8f4e7c5f958f77d77166378f1a3ae0e5663f750b806fbc1af3c47215c29ba7b50bf7ea97af724ac86a45d29b9b1d5d689cf20df2a9f9676ecff569bd504e95c70"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x78, 0x2001, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffff81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0xc, 0x6, "d866a97a8e1d4358"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_fw={{0x7}, {0x534, 0x2, [@TCA_FW_ACT={0x51c, 0x4, [@m_skbedit={0xac, 0x14, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0x60f, 0x0, 0x400, 0x5c}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xfffffffe, 0x4, 0x3ff, 0xeb27}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xce21}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xe}]}, {0x28, 0x6, "05e5e019b3064a5cfe01da010993a895eb83cb125132c9d54bbdd95a38b65c5488d58519"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x7, 0x7, 0x1, 0x1}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xcc, 0x10000000, 0xdb, 0xffffffff}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @TCA_SKBMOD_DMAC={0xa}]}, {0xbd, 0x6, "502a8b3cf74aa0889b4223d91a491ae639f44c836c54ee2b58eb7d0900b1e22321a7b446a0da4d6cf47268bda926ce4008ec267292636f47823fdb767b9360e3a2c5bf0cf4e92a45f1d2eda80a29ebea8dcb18990f4fb097a529efef474a5054e39d15da9a9307a2127fa856ac0ea05c02b19dd89a0cad8d70c26a48279eeebb36510f609035247eee6914fe8ce8d6482136e7f9cd67a5e16acabce1ffd8377f22dbb3ec6ef722d6df65ff29752e31595bb71d6c7b4359c9f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x1a4, 0x13, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xffff8001, 0x5, 0xffffff01}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0x6, 0x61, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xcd71}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xa5, 0x20000000, 0x9, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0x1, 0x2, 0x80000001, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}]}, {0xed, 0x6, "629ac9cc13d9ecdf11de1b9f1d6cf4c053061d0235f39f41fb83ed11dcc7dc1433497f3bb4caabdfbd2c9352cda38f3436f56b7810535f07378199efd54c32d0ebba9307ff1e738bd04509f4f2df57e5072d4e0ab961977858e68a667da66c9e3259285d5a9caa6db1c13af02de24b54ce5cbceb6847fb0a28e468b0286e45aa39eb40b38eaadb56caf28f755ab7d41f80984e5d1f62c0e1e98bf587ab445ac5893d068ada2fca1cb5a0e484e2b72ab30918820458ac48f50d32c3992a3855ce027c4d5376b4cf11897bb2ec949df0fad9fc46a10411ade3d358333dacc8e2cfeaed96e1a8691994db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x44, 0x14, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}]}, {0x7, 0x6, 'j{)'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x124, 0x15, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x62d, 0xe, 0x4, 0x5, 0xff}, 0x3}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x1000, 0x2, 0x0, 0x15}}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x86, 0x6, "da5e67b2cc5e001dc73726eccf6b2a8df2b0907e1f18d88f67b034090c9f12bf2e0be974633352f665a6b10725d089a6616fcb9582427fdf0d1b7b2cd0fc02659c06d94ece8f698bbf440db34408cecc046e99c089d3c050c951a2a80bf60284585e75627cfd8db91979d9f47a37a1f2d642dbf83550e2c5fe624b60540394ce0f5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}]}}]}, 0x1d38}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c00"], 0x0, 0x0, 0x0}, 0x0) 4m31.471815257s ago: executing program 5 (id=1651): mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 4m31.262343387s ago: executing program 5 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x28, r1, 0x501, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) ustat(0x801, &(0x7f0000000300)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$pagemap(r2, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000000)=0x10009, 0x4) 4m16.004770628s ago: executing program 33 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x28, r1, 0x501, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) ustat(0x801, &(0x7f0000000300)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$pagemap(r2, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000000)=0x10009, 0x4) 2m5.936436305s ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x9b, 0x1, 0x987a, 0x88, 0x1, 0x5f0e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x5a, 0x2b, 0x47, 0x40, 0x5e1, 0x408, 0xe186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x68, 0xf7, 0x2, 0x11, 0x3a, 0x6d, 0xe9, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x26, 0x10000180}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffdffe, 0x10001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r8) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 1m48.215013471s ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x9b, 0x1, 0x987a, 0x88, 0x1, 0x5f0e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x5a, 0x2b, 0x47, 0x40, 0x5e1, 0x408, 0xe186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x68, 0xf7, 0x2, 0x11, 0x3a, 0x6d, 0xe9, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x26, 0x10000180}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffdffe, 0x10001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r8) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 1m24.7680268s ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x9b, 0x1, 0x987a, 0x88, 0x1, 0x5f0e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x5a, 0x2b, 0x47, 0x40, 0x5e1, 0x408, 0xe186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x68, 0xf7, 0x2, 0x11, 0x3a, 0x6d, 0xe9, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x26, 0x10000180}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffdffe, 0x10001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r8) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 1m4.395973255s ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x9b, 0x1, 0x987a, 0x88, 0x1, 0x5f0e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x5a, 0x2b, 0x47, 0x40, 0x5e1, 0x408, 0xe186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x68, 0xf7, 0x2, 0x11, 0x3a, 0x6d, 0xe9, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x26, 0x10000180}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffdffe, 0x10001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r8) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 41.075710443s ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x9b, 0x1, 0x987a, 0x88, 0x1, 0x5f0e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x5a, 0x2b, 0x47, 0x40, 0x5e1, 0x408, 0xe186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x68, 0xf7, 0x2, 0x11, 0x3a, 0x6d, 0xe9, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x26, 0x10000180}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffdffe, 0x10001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r8) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 21.229868649s ago: executing program 3 (id=2298): socket(0x7, 0x1, 0x101000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x6, "6c1c74676bb59cb4d3c70993c545a55e45eeccdf5e36b56303765b1660e17bf12d21d363e9288ba83fedcc381f36713d3732635bd639c5cfa021546d3d907864"}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x200000000000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x33, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0xb, 0x2, 0xa, 0x4, 0xfffffffffffffffc}, @generic={0x2, 0x9, 0xd, 0x400, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @btf_id={0x18, 0x17, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x0, 0x4, 0x9, 0x3, 0xfffffffffffffff0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8a, 0xaf, &(0x7f0000000340)=""/175, 0x41100, 0x74, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0xb3c, 0xffffff01}, 0x10, 0x30527, 0xffffffffffffffff, 0x5, &(0x7f0000000440), &(0x7f0000000480)=[{0x3, 0x3, 0x1, 0x92ed6565b94b11b}, {0x5, 0x3, 0x7, 0x4}, {0x1, 0x5, 0xb}, {0x0, 0x5, 0xf, 0x8}, {0x0, 0x5, 0x10, 0x6}], 0x10, 0x5, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010"], 0xc0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 19.815077135s ago: executing program 6 (id=2301): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r4 = memfd_create(0x0, 0x5) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="cd5300000000000000001f000000"], 0x14}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) syz_clone(0x20100900, &(0x7f00000006c0)="d9e30cf878df92be24ae6dd20fc4aa32ffdaef2fb53e9dab5cf4e996209ba2824d2c8c80371bd9e072b56672efbdbb57521b76b71d37fdcc292a98206e2a803d5c33780c4ec38981b4a9e40bd875a2a8ba47e8c976232e3a55989bee6286e7d3189ec00799cdc6bd1176660ff311a7406933a331bed852f5d94412ba607aa1d2a05238cea2230dd33cbe95002abe4dae27fb291546354d501f91ee3b398cc59a211b67a0f15be15554ccaee9db3e55d6d042d42432f149da7cc317c388da374d465fb4705993966778186c228db91a45922e9514", 0xd4, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f00000007c0)="d21fccd2bb51418d47011fb72029a09491841b054fdddeebb95e19bd8c11b9281d73b36ceb2779f45633084a4e5a89b2e0532c4e581acdb9a75a75318fe0ff9d2f2a34f5f8c3c034693292ad4e3635f7225379ce5e6829b352062ed7b8278ecabbca7b2f58833ca600c7b4e638cf4a162ff0425907e9f6b0670be9b120fba8a6d23eeb240f") setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) socket$igmp(0x2, 0x3, 0x2) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) 16.639455492s ago: executing program 1 (id=2307): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040050bbe1a0000000000010902240001000000000904000d0903000000092100000001222900090581030000000115"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf122dc16a5658a3b58626b458ae4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r4) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r5, r6}, &(0x7f0000000580)=""/259, 0x54, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x94, 0x8}, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) write$binfmt_misc(r1, 0x0, 0x0) sigaltstack(0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='1', 0x1) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setrlimit(0xd, &(0x7f0000000180)={0x8, 0xfdf}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x603100) read(r9, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) 13.063516627s ago: executing program 6 (id=2311): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd04}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x10000, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, "3127608efb75b4c827912445aead8b49f0a87e73a02eec2f"}) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e81695230109022400010000640009043401"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r6 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1d}, &(0x7f0000000040), &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ddc9ed4c", @ANYRES16=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) epoll_create(0x6bd0cc) 13.039616725s ago: executing program 3 (id=2312): read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0x2, &(0x7f0000000000)={0xff, 0x6}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x8}, 0x18) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0xfe, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x8, 0x0, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x0, 0x5}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x1, 0x2, 'C1'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) 12.110519853s ago: executing program 1 (id=2313): mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000ac0)=""/235, 0xeb}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000000440)}], 0x6, &(0x7f00000004c0)=""/25, 0x19}, 0x7}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000007c0)={0x0, 0x0, @ioapic}) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffffff, &(0x7f0000000540)='./file1/file4/file0\x00', 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0x7b9, 0x800000000000000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 11.414176093s ago: executing program 1 (id=2314): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x154}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0x23, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41}, 0x50) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000900)={0x2020}, 0x2020) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r8, 0x80083314, &(0x7f0000000400)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = syz_io_uring_setup(0x748d, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000012001ffe00989837a182138b00268f1c", @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r13], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r12, 0xfffffffffffffffc, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r9, 0x27e2, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x2, 0x0) 11.234646774s ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x9b, 0x1, 0x987a, 0x88, 0x1, 0x5f0e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x5a, 0x2b, 0x47, 0x40, 0x5e1, 0x408, 0xe186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x68, 0xf7, 0x2, 0x11, 0x3a, 0x6d, 0xe9, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd, 0x9}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x26, 0x10000180}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffdffe, 0x10001, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r8) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 6.644107837s ago: executing program 1 (id=2316): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x3, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x20000000) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000080)=0x8) 6.643413767s ago: executing program 6 (id=2317): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc3, 0xa1, 0xd7, 0x8, 0xccd, 0x99, 0x950d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x71, 0xf9}}]}}]}}, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4a340, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 6.638715806s ago: executing program 3 (id=2318): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) fstat(r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000240)="292d15f870d35540b46407a9c04f97a7adcb7f4328377f8f5f3bbd0fa6d5514b514a762382ccd197ad4122044de22f6a7350054ac90f0b3e9be1e7dcc8af967f689f6a32d9b32c163e9849c5366c0b2481610eb953fb0e96ce6bcaf655630dfcacf4ee54c43807ba70d6396c15454017761a7756f585c1de803e65bc4aef91c8908cc0855680a48025f3f6946cded0facb210cba64fe1f53477e5b9a8cea4a113e51a3aeb48e5d1213c879c1665cd81164", 0xb1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x34, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 6.63783856s ago: executing program 4 (id=2319): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000003c0)=[r4, 0x0], 0x4, 0x2, 0x4}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000000010d000000000000000000000000000000000000160000000772ae527f2c1fed0308ff69d70d6bbbc64950073561762d05e7a693ba93507bca9fc53681ee6c23ebef80c00795554ab105980743f10800f47a14e4724ce8b5ff05f55dd10ea4c6857dd7c68b636a94ac7759b04199e817b6d319fbbd"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r5, 0x4}, 0x38) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) sendto$inet(r6, &(0x7f0000000300)="08000000080000001c891c8ba100000000c75b901d727b0008e08da41ace04246a652614049eb74f88885e26cf", 0x2d, 0x3ca611852b6ae74, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x88) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000050001"], 0x1c}}, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x20) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xa, &(0x7f00000000c0)=0x2, 0x4) 5.624491155s ago: executing program 1 (id=2320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r0}, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffe}]}}}]}, 0x3c}}, 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x2f, 0x1, 0x0, 0x0, "4c54758e5ee36a5e0b7cd845e8257f7f3c43cbd7af144faaaaeceb1cc7ef9085a01e5afeffdf0fd1c8d5bd233217f0e0eea535a26b42a2a06cb1bb241c500f75"}}}}, &(0x7f00000002c0)={0x1, 0x3, [0xbb4, 0x4, 0xc4f, 0x171]}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x18, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9, 0x40000000000005, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@empty, 0xfffffffe, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d80)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r9, 0x0) 5.303467714s ago: executing program 3 (id=2321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1f0e0000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) write$sequencer(r6, &(0x7f0000000000), 0xca80) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x840, 0x1, 0x0, 0x400400}}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)="8fc5", 0x2}], 0x1}}], 0x1, 0x4000040) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e25, @remote}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140)="4693", 0xfffffffffffffd13, 0x11, 0x0, 0x0) recvmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x40010063) 4.80713239s ago: executing program 4 (id=2322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x18, 0xc099, 0x0, {0x3, 0x100, 0x91d, 0x7f, 0x8, 0x9, 0xd, 0x4, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x5, 0x2}}}, 0x78) dup(0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, 0x0, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000340)={&(0x7f00000004c0)={'hmac(sha256)\x00'}}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140)="4693", 0x2, 0x400d0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010063) 4.123377108s ago: executing program 4 (id=2323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f00000001c0), &(0x7f0000000080)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x3a) ioctl$SIOCAX25ADDUID(r2, 0x89e7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername$ax25(r2, 0xfffffffffffffffd, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.57576918s ago: executing program 6 (id=2324): syz_open_dev$video(0x0, 0x7d5b0e07, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r4, 0x6, &(0x7f0000000100)=0xf6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000400)={0x1d, r9, 0x2}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000080)={0x0}, 0x4}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 3.352386773s ago: executing program 4 (id=2325): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x3, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x20000000) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000080)=0x8) 2.562482739s ago: executing program 6 (id=2326): r0 = socket(0x80000000000000a, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = io_uring_setup(0x5287, &(0x7f0000000000)={0x0, 0x9c6c, 0x1, 0x2, 0x2a6}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) syz_io_uring_setup(0x23a3, &(0x7f00000001c0)={0x0, 0xc7ac, 0x0, 0x2, 0x8a, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000280)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x100}) close(0x3) 2.044929858s ago: executing program 4 (id=2327): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x214c00) r1 = syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x0, 0x8}}) connect$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x2, @any, 0x3, 0x1}, 0xe) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r4, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, [0x0, 0x7, 0x3, 0x5668, 0xfffffffffffffff3, 0x0, 0x5, 0x1, 0x2, 0x2, 0x853, 0x7, 0x1, 0x3ff, 0x8]}, &(0x7f0000000240)=0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='xen_mmu_flush_tlb_one_user\x00', r6, 0x0, 0xffffffffdfffffed}, 0x18) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2021) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x2000, 0x1d45}}, 0x50) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r8) 1.367514222s ago: executing program 4 (id=2328): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x8, 0x8, 0x3ff, 0x9, 0x1ff}) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="16010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x88, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_MASK={0x54, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x14, 0x4, @empty}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x16, &(0x7f0000000680)={&(0x7f0000000300)={0x58, r0, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x0, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST]}]}]}, 0x58}}, 0x0) 751.46846ms ago: executing program 1 (id=2329): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x7, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'full', 0x20, 0x8, 0x20, 0xffffc}, 0x2f) r5 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$inet(0x2, 0x2, 0x0) 725.869489ms ago: executing program 6 (id=2330): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0x5, 0x4) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0x31, 0x8b, {0x8b, 0x23, "3d77eee64e3426f1f04352990a8bd73cd7af1c84c5fc2fc8f784a37ff17d00a392a21cd3873f7ef4b78653ae0f3cffff01ebf01006c707fa7caaced63a7b57306ca56ead8a4ff91785c6bb7c03c21807add11a1e0b185e7570c1b41f5dc55f57fe8ce30448958086649bc79dacc155708df9c780a99a543f5412837e44bc63f6576c3b6f1b3675f9e7"}}, &(0x7f0000000180)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "5d063f9bef9092f2cacac6a6c00ee50e85549b8f2191ffe0831718ce8832f5d7f2d745cba0b9cfef6319c1fd49495df028a1162014cee1c150b562d5e78209aed1cf671be9092deaee67688e20cd77d049945e02f91a53a67c42b8441d7161f82b7fb427645ceb16594776a3b213a7686da8cefff42284fbac5aafdeae1930c05ab6603fc8bef71d800cf0c80feddc3fa19343ec72abd212327514f40810ea623042618bfd44b949e107ac02897255a996ed3cdf2dff37dca11296ee3d0493ec892fe2a57d7dc556fb6c58e727e0beb224d4bcd5b1c81d1b22709f1d99ee1cf3f48504da98088e39b1d6d95b0cbb0961e61defc38d1bf92b"}}, &(0x7f0000000280)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0x149, 0xe, 0x5, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0xa1, 0x0, 0x800, 0x33}, @generic={0xbb, 0x10, 0x3, "d0855aa103d0742fba2286251a0be54718784dc25a7df340c81c78fc5202e43124ee5cd454bc62fb9276e39bba8a6c718e8d96667580bbeadf13cec75f3a4fd98fe22b26e10b91c06070ad12b49cef7165d6b83efb927bcbb119e01ba9a4067e4e677b50a1441b15a521f306f6e5108643c5893fb2c7a7d08ccbb2eb47ecb0aa81316b96eefc84d95a77c54ce419f5439d8b6c1d97862720ad1f470c2d695c2d091cf80961e808e0d393e30026b545fb3cda65e21b902187"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x5, 0xf000, 0x5825, [0xff0030, 0x3f1e, 0xf]}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbb, 0x0, 0x0, 0x6, "020a3c33", "0e50409a"}}, &(0x7f0000000040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x7, 0x8, 0xbd, 0x4e4, 0x84c}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x40, 0x1, 0x7d, "546de10de2c6cfe3beb0b9e0279d3039622047b992f5d0e8f870431037291ca061a5c3bea07486e3f61206708f83e832f837b4c0985e710c2932e8f6842c89f7c1f80efd5387ed9d5ff812256467692913d96be69f5fc58ef79dc736df0a6f8413bca483ffd0c6ee12fd359f057fdb5716a93b2b6af4c1ce0854947573"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xa0, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "67cc"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x13, 0x6}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "74be"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x5a}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x31}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) 612.641149ms ago: executing program 3 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) gettid() r0 = creat(&(0x7f0000000480)='./file0\x00', 0xc4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x101882, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000085b198c818ce2f473f5baab0a18187fea6512d05fe412fdffbe6ed124875b0f22f46575b619061bf2743855c672d8e4973f06654ac9aee97d372114f1d7385dd368b07455af0fb1a8b414fa94367b945f5b224668458e45c9abbcc266dae88dc9821a4a92ef869ad4a48d4298691355ce15aa1543657f87eeed3c79f43359dc68104e748fc4ce1d3083ddaa9ba41b1b6eed2632c8cbe0f9f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000700)=0xed) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x2000000000000088, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 0s ago: executing program 3 (id=2332): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x327700, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001800)={{r3, 0x3000, 0x61, 0x4a, 0x2, 0x7, 0x20c202ab, 0x10000, 0x995, 0x40, 0x8, 0x5, 0xd, 0x3, 0x7}}) timer_create(0x7, &(0x7f0000000200)={0x0, 0x31, 0x2, @thr={&(0x7f0000000080)="b416ded96e84dcc2ca5657cf97a0873dfa091902e5781fc46102813b45ca46742726357c2656f3249cb1f8113cc6e70a1dfb65c683a5bd7fd8b2459b6161c0c4c0495634797ba398910d4fe6ff6d5a9ebff6c15835a933224fdb515884c66b96c340098016af9299", &(0x7f0000000100)="cda4fb29f09a30c5e890e6da68a9bb1baec54e6ed36d1d8e686a1d2f08bf345c1e2e2f63f1367ea460ac1f2d5ac64cb371b3a2775b1a65bb8827a80c3ed8dc18436e6c92c083db1018bf10b979d1a677e4144d77ae14a423e25c34b047416479a24ce04954afb6e37e778b6892331847196c5d1ba949a504f19bd84ff3d67852e4eeffc9336ae96f910f63123f9f4db4455e12f43616e1859ae7c08d65de928d9dbea4854dd722d1b4f3473c4143228e173cdbd5dc8569bed48efdd890686a84191720e4496b40db7ece86863dd3b08c3ef5d391fe2347ace5a3b74c3c50d60b8f1d1b888c2f207be3eb6a7723d3ba63f46ad43d12b7"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}}, &(0x7f0000000300)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xaba, @loopback, 0xa9a6}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ation available [ 790.238812][ T29] audit: type=1400 audit(1732195721.925:1468): avc: denied { write } for pid=15365 comm="syz.3.2077" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 790.272503][T15368] tipc: Started in network mode [ 790.316758][T15368] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 790.367847][T15368] tipc: Enabled bearer , priority 10 [ 790.411205][T15371] tipc: Resetting bearer [ 790.642313][ T29] audit: type=1400 audit(1732195722.325:1469): avc: denied { bind } for pid=15364 comm="syz.6.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 790.671510][ T7590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 790.723241][ T29] audit: type=1400 audit(1732195722.325:1470): avc: denied { write } for pid=15364 comm="syz.6.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 790.733037][T15371] tipc: Disabling bearer [ 790.750499][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 790.790228][T15318] chnl_net:caif_netlink_parms(): no params data found [ 791.230477][ T53] Bluetooth: hci3: command tx timeout [ 791.560622][ T6585] hsr_slave_0: left promiscuous mode [ 791.618049][ T6585] hsr_slave_1: left promiscuous mode [ 791.666817][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.677818][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.718393][ T29] audit: type=1400 audit(1732195723.415:1471): avc: denied { accept } for pid=15394 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 791.718453][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.754226][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.790561][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 791.841984][ T6585] veth1_macvtap: left promiscuous mode [ 791.847570][ T6585] veth0_macvtap: left promiscuous mode [ 791.860749][ T6585] veth1_vlan: left promiscuous mode [ 791.873315][ T6585] veth0_vlan: left promiscuous mode [ 792.164097][ T29] audit: type=1400 audit(1732195723.865:1472): avc: denied { ioctl } for pid=15404 comm="syz.3.2085" path="socket:[50414]" dev="sockfs" ino=50414 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 792.190018][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.830498][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 793.110106][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 793.190401][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 793.225538][T15412] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 793.233921][ T29] audit: type=1400 audit(1732195724.925:1473): avc: denied { ioctl } for pid=15410 comm="syz.4.2086" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 793.310577][ T53] Bluetooth: hci3: command tx timeout [ 793.608809][T15417] input: syz0 as /devices/virtual/input/input32 [ 793.870511][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 794.413213][T15411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2086'. [ 794.459518][T15414] pimreg: entered allmulticast mode [ 794.666943][T15432] No source specified [ 794.735260][T15318] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.742779][T15318] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.749986][T15318] bridge_slave_0: entered allmulticast mode [ 794.760440][T15318] bridge_slave_0: entered promiscuous mode [ 794.768791][T15318] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.786672][T15318] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.811424][T15318] bridge_slave_1: entered allmulticast mode [ 794.818344][T15318] bridge_slave_1: entered promiscuous mode [ 794.910522][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 794.970713][T15441] FAULT_INJECTION: forcing a failure. [ 794.970713][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 795.105187][T15441] CPU: 0 UID: 0 PID: 15441 Comm: syz.4.2095 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 795.115652][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 795.125730][T15441] Call Trace: [ 795.129022][T15441] [ 795.131963][T15441] dump_stack_lvl+0x16c/0x1f0 [ 795.136666][T15441] should_fail_ex+0x497/0x5b0 [ 795.141368][T15441] ? fs_reclaim_acquire+0xae/0x150 [ 795.146501][T15441] should_failslab+0xc2/0x120 [ 795.151205][T15441] kmem_cache_alloc_node_noprof+0x71/0x310 [ 795.157013][T15441] ? __alloc_skb+0x2b1/0x380 [ 795.161606][T15441] __alloc_skb+0x2b1/0x380 [ 795.166021][T15441] ? __pfx___alloc_skb+0x10/0x10 [ 795.170957][T15441] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 795.176940][T15441] netlink_alloc_large_skb+0x69/0x130 [ 795.182318][T15441] netlink_sendmsg+0x689/0xd70 [ 795.187089][T15441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.192377][T15441] ____sys_sendmsg+0xaaf/0xc90 [ 795.197140][T15441] ? copy_msghdr_from_user+0x10b/0x160 [ 795.202601][T15441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.207891][T15441] ___sys_sendmsg+0x135/0x1e0 [ 795.212567][T15441] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.217766][T15441] ? __pfx_lock_release+0x10/0x10 [ 795.222781][T15441] ? trace_lock_acquire+0x14a/0x1d0 [ 795.227983][T15441] ? __fget_files+0x206/0x3a0 [ 795.232658][T15441] __sys_sendmsg+0x16e/0x220 [ 795.237246][T15441] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.242373][T15441] do_syscall_64+0xcd/0x250 [ 795.246874][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.252760][T15441] RIP: 0033:0x7f5930b7e819 [ 795.257165][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.276763][T15441] RSP: 002b:00007f5931a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.285164][T15441] RAX: ffffffffffffffda RBX: 00007f5930d35fa0 RCX: 00007f5930b7e819 [ 795.293127][T15441] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 795.301086][T15441] RBP: 00007f5931a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 795.309044][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.317000][T15441] R13: 0000000000000000 R14: 00007f5930d35fa0 R15: 00007fff1d6be978 [ 795.324970][T15441] [ 795.372669][T15318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.393223][ T53] Bluetooth: hci3: command tx timeout [ 795.523405][T15318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.856744][T15318] team0: Port device team_slave_0 added [ 795.950511][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 796.004291][T15488] netlink: 'syz.1.2098': attribute type 13 has an invalid length. [ 796.134144][ T5171] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 796.197625][T15318] team0: Port device team_slave_1 added [ 796.380458][ T5171] usb 7-1: Using ep0 maxpacket: 16 [ 796.392698][ T5171] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.405324][ T5171] usb 7-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 796.414937][ T5171] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.417025][T15496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2100'. [ 796.423297][ T5171] usb 7-1: Product: syz [ 796.436399][ T5171] usb 7-1: Manufacturer: syz [ 796.441112][ T5171] usb 7-1: SerialNumber: syz [ 796.444707][T11387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.457571][T15318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.465444][ T5171] usb 7-1: config 0 descriptor?? [ 796.476312][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.513390][T15318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.588155][ T5171] peak_usb 7-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 796.606241][ T5171] peak_usb 7-1:0.0: unable to read PCAN-USB serial number (err -22) [ 796.933169][T15318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.941018][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.990494][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 796.997672][T15318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.762406][ T5171] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 797.866076][ T5171] usb 7-1: USB disconnect, device number 13 [ 798.030477][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.196741][T15318] hsr_slave_0: entered promiscuous mode [ 798.238100][T15318] hsr_slave_1: entered promiscuous mode [ 798.250641][T15318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.258370][T15318] Cannot create hsr debugfs directory [ 799.070599][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 799.859637][T15553] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 800.110610][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 800.346297][T15554] Falling back ldisc for ptm0. [ 800.762327][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 801.150476][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 801.554628][ T3414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.901343][T15318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 801.931958][T15318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 801.945587][T15318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 801.959268][T15318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 801.970631][ T8] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 802.112812][T15318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.121876][ T8] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 802.131182][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.154317][ T8] usb 2-1: config 0 descriptor?? [ 802.179095][T15318] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.187730][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 802.190476][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 802.207463][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.214654][T15509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.236524][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.243701][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.330565][T11175] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 802.480715][T11175] usb 4-1: Using ep0 maxpacket: 16 [ 802.491843][T11175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.504169][T11175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 802.515371][T15318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.535236][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2120'. [ 802.544293][T11175] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 802.558800][T11175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.568378][ T8] cpia1 2-1:0.0: unexpected state after lo power cmd: 4e [ 802.578851][ T29] audit: type=1326 audit(1732195734.275:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 802.602317][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.620793][T15318] veth0_vlan: entered promiscuous mode [ 802.669745][T11175] usb 4-1: config 0 descriptor?? [ 802.889441][T15318] veth1_vlan: entered promiscuous mode [ 802.946055][ T29] audit: type=1326 audit(1732195734.275:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.027607][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 803.035709][ T8] gspca_cpia1: usb_control_msg 05, error -71 [ 803.061557][ T8] cpia1 2-1:0.0: unexpected systemstate: 4e [ 803.076828][T15318] veth0_macvtap: entered promiscuous mode [ 803.094202][ T8] usb 2-1: USB disconnect, device number 86 [ 803.230561][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 803.244155][T15318] veth1_macvtap: entered promiscuous mode [ 803.259204][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.270740][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.286578][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.403124][ T29] audit: type=1326 audit(1732195734.275:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.431284][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.452463][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.462979][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.473058][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.483522][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.494336][T15318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.508187][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.538936][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.549034][ T29] audit: type=1326 audit(1732195734.275:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.567743][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.585591][ T29] audit: type=1326 audit(1732195734.275:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.609521][ T29] audit: type=1326 audit(1732195734.275:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.633015][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.656650][ T29] audit: type=1326 audit(1732195734.275:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.772662][ T29] audit: type=1326 audit(1732195734.275:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.846435][ T29] audit: type=1326 audit(1732195734.275:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 803.860487][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.869797][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.040967][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.270495][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 804.421791][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.433050][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.443647][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.454829][T15318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.468784][T15318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.477767][T15318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.486618][T15318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.495435][T15318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.520836][ T29] audit: type=1326 audit(1732195734.275:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15614 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ca17e819 code=0x7ffc0000 [ 804.663511][T11175] usbhid 4-1:0.0: can't add hid device: -71 [ 804.682663][T11175] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 804.764217][T11175] usb 4-1: USB disconnect, device number 68 [ 804.978892][T15654] netlink: 'syz.6.2124': attribute type 13 has an invalid length. [ 805.182852][T15500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.191193][T15500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.283104][ T5171] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 805.310526][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 805.427513][T15509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.436357][T15509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.065470][ T5171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.076473][ T5171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.086457][ T5171] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 806.095648][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.108301][ T5171] usb 2-1: config 0 descriptor?? [ 806.169701][T15663] netlink: 'syz.4.2126': attribute type 13 has an invalid length. [ 806.350539][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 806.360928][T11175] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 806.515298][T11175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 806.526741][T11175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.538372][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.546382][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.554581][T11175] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 806.568871][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.576302][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.577459][T11175] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.610080][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.621626][T11175] usb 7-1: config 0 descriptor?? [ 806.646721][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.659008][ T5171] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 806.689560][ T5171] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 806.747461][ T5171] arvo 0003:1E7D:30D4.0016: couldn't init struct arvo_device [ 806.755337][ T5171] arvo 0003:1E7D:30D4.0016: couldn't install keyboard [ 806.778394][ T5171] arvo 0003:1E7D:30D4.0016: probe with driver arvo failed with error -5 [ 806.836193][T15666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.848567][T15666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.314627][T15506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.328012][T15666] bond_slave_0: entered promiscuous mode [ 807.334369][T15666] bond_slave_1: entered promiscuous mode [ 807.390268][T11175] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 807.390500][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 807.407847][T11175] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 807.460504][T11175] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x4 [ 807.467766][T11175] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 807.504430][T11175] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 807.553245][T11175] hid-steam 0003:28DE:1102.0017: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 807.589981][T15665] bond_slave_0: left promiscuous mode [ 807.596191][T15665] bond_slave_1: left promiscuous mode [ 807.644459][T11175] usb 2-1: USB disconnect, device number 87 [ 807.663931][ T4947] usb 7-1: USB disconnect, device number 14 [ 808.257701][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2133'. [ 808.430485][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 808.597304][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.606159][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.630473][ T5171] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 808.743988][T15507] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.780686][ T5171] usb 2-1: Using ep0 maxpacket: 8 [ 808.794987][ T5171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.819998][ T5171] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 808.840466][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.914555][T15507] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.933771][ T5171] usb 2-1: config 0 descriptor?? [ 808.956049][ T5171] usb 2-1: bad CDC descriptors [ 809.028549][T15507] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.091842][T15507] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.144256][ T5883] usb 2-1: USB disconnect, device number 88 [ 809.227625][T15507] bridge_slave_1: left allmulticast mode [ 809.238141][T15507] bridge_slave_1: left promiscuous mode [ 809.244246][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.253648][T15507] bridge_slave_0: left allmulticast mode [ 809.259285][T15507] bridge_slave_0: left promiscuous mode [ 809.265421][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.470513][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 809.629844][T15507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.640321][T15507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.650988][T15507] bond0 (unregistering): Released all slaves [ 810.330382][T15771] FAULT_INJECTION: forcing a failure. [ 810.330382][T15771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.343474][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.3.2138 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 810.353873][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 810.363907][T15771] Call Trace: [ 810.367166][T15771] [ 810.370088][T15771] dump_stack_lvl+0x16c/0x1f0 [ 810.374752][T15771] should_fail_ex+0x497/0x5b0 [ 810.379411][T15771] _copy_to_user+0x32/0xd0 [ 810.383815][T15771] simple_read_from_buffer+0xd0/0x160 [ 810.389186][T15771] proc_fail_nth_read+0x198/0x270 [ 810.394200][T15771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.399739][T15771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.405290][T15771] vfs_read+0x1df/0xbe0 [ 810.409436][T15771] ? __fget_files+0x1fc/0x3a0 [ 810.414096][T15771] ? __pfx___mutex_lock+0x10/0x10 [ 810.419104][T15771] ? __pfx_vfs_read+0x10/0x10 [ 810.423767][T15771] ? __fget_files+0x206/0x3a0 [ 810.428432][T15771] ksys_read+0x12b/0x250 [ 810.432655][T15771] ? __pfx_ksys_read+0x10/0x10 [ 810.437490][T15771] do_syscall_64+0xcd/0x250 [ 810.441997][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.447882][T15771] RIP: 0033:0x7f846a37d25c [ 810.452287][T15771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 810.471877][T15771] RSP: 002b:00007f846b1b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.480273][T15771] RAX: ffffffffffffffda RBX: 00007f846a536080 RCX: 00007f846a37d25c [ 810.488228][T15771] RDX: 000000000000000f RSI: 00007f846b1b20a0 RDI: 000000000000000a [ 810.496223][T15771] RBP: 00007f846b1b2090 R08: 0000000000000000 R09: 0000000000000000 [ 810.504201][T15771] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 810.510591][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 810.512155][T15771] R13: 0000000000000000 R14: 00007f846a536080 R15: 00007ffc33265728 [ 810.512193][T15771] [ 811.299736][T10778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 811.312227][T10778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 811.333835][T10778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 811.353927][T15507] hsr_slave_0: left promiscuous mode [ 811.364051][T15507] hsr_slave_1: left promiscuous mode [ 811.401690][T10778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 811.429350][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 811.429367][ T29] audit: type=1400 audit(1732195743.125:1508): avc: denied { append } for pid=15777 comm="syz.6.2141" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 811.485517][T10778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 811.500452][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.507895][T15507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.522098][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.550510][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 811.637399][T10778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 811.640462][T15507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.711185][T15507] veth1_macvtap: left promiscuous mode [ 811.716968][T15507] veth0_macvtap: left promiscuous mode [ 811.722882][T15507] veth1_vlan: left promiscuous mode [ 811.913619][T15507] veth0_vlan: left promiscuous mode [ 812.338452][ T29] audit: type=1400 audit(1732195743.485:1509): avc: denied { map } for pid=15787 comm="syz.4.2144" path="socket:[51183]" dev="sockfs" ino=51183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 812.382817][ T29] audit: type=1400 audit(1732195743.485:1510): avc: denied { read } for pid=15787 comm="syz.4.2144" path="socket:[51183]" dev="sockfs" ino=51183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 812.455212][T15792] overlayfs: failed to resolve './file1': -2 [ 812.590484][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 812.678738][ T29] audit: type=1400 audit(1732195744.355:1511): avc: denied { getopt } for pid=15793 comm="syz.3.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 812.785342][T15803] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 813.502396][T15506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.610511][ T29] audit: type=1326 audit(1732195745.285:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b7e819 code=0x7ffc0000 [ 813.634192][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 813.647120][ T29] audit: type=1326 audit(1732195745.285:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b7e819 code=0x7ffc0000 [ 813.671482][ T29] audit: type=1326 audit(1732195745.285:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f5930b7e819 code=0x7ffc0000 [ 813.696479][ T29] audit: type=1326 audit(1732195745.285:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b7e819 code=0x7ffc0000 [ 813.721174][T10778] Bluetooth: hci3: command tx timeout [ 813.750407][ T29] audit: type=1326 audit(1732195745.285:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f5930b7e819 code=0x7ffc0000 [ 813.800414][ T29] audit: type=1326 audit(1732195745.285:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b7e819 code=0x7ffc0000 [ 814.439588][T15820] syz.3.2151: attempt to access beyond end of device [ 814.439588][T15820] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 814.670477][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 814.975726][T15507] team0 (unregistering): Port device team_slave_1 removed [ 815.029893][T15507] team0 (unregistering): Port device team_slave_0 removed [ 815.102910][ T5883] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 815.260462][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 815.270951][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 815.282852][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 815.298934][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 815.310533][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.318976][ T5883] usb 4-1: Product: syz [ 815.326393][ T5883] usb 4-1: Manufacturer: syz [ 815.331641][ T5883] usb 4-1: SerialNumber: syz [ 815.360864][ T5883] usb 4-1: config 0 descriptor?? [ 815.369366][ T5883] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 815.384825][ T5883] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 815.710574][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 815.798178][T10778] Bluetooth: hci3: command tx timeout [ 816.013924][T15838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2155'. [ 816.022986][T15838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 816.750525][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 816.930703][ T5883] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 817.370631][T15840] bridge0: port 4(erspan0) entered blocking state [ 817.377174][T15840] bridge0: port 4(erspan0) entered disabled state [ 817.383798][T15840] erspan0: entered allmulticast mode [ 817.390006][T15840] erspan0: entered promiscuous mode [ 817.395739][T15840] bridge0: port 4(erspan0) entered blocking state [ 817.403909][T15840] bridge0: port 4(erspan0) entered forwarding state [ 817.419635][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 817.419649][ T29] audit: type=1400 audit(1732195749.115:1544): avc: denied { name_bind } for pid=15836 comm="syz.4.2157" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 817.790534][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 817.896426][T10778] Bluetooth: hci3: command tx timeout [ 818.361658][ T5883] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 818.368855][ T5883] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 818.375914][ T5883] em28xx 4-1:0.0: No AC97 audio processor [ 818.509907][ T5883] usb 4-1: USB disconnect, device number 69 [ 818.516701][ T5883] em28xx 4-1:0.0: Disconnecting em28xx [ 818.564095][T15774] chnl_net:caif_netlink_parms(): no params data found [ 818.600997][T15506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.623692][ T5883] em28xx 4-1:0.0: Freeing device [ 818.733464][T15861] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 818.770886][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.778050][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.785380][T15774] bridge_slave_0: entered allmulticast mode [ 818.792325][T15774] bridge_slave_0: entered promiscuous mode [ 818.801733][T15866] netlink: 'syz.4.2160': attribute type 13 has an invalid length. [ 818.830489][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 818.878348][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.885605][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.892928][T15774] bridge_slave_1: entered allmulticast mode [ 818.900126][T15774] bridge_slave_1: entered promiscuous mode [ 818.980248][T15774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.010467][ T5882] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 819.021543][T15774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.091837][T15774] team0: Port device team_slave_0 added [ 819.101453][T15774] team0: Port device team_slave_1 added [ 819.140558][ T5883] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 819.170546][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 819.178484][ T5882] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 819.187927][ T5882] usb 2-1: config 0 has no interface number 0 [ 819.194875][T15774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.208540][ T5882] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 819.220083][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.248583][ T5882] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 819.252523][T15774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.290226][T15774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.305611][ T5882] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 819.337254][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 819.338712][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.357937][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 819.395952][ T5882] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 819.534013][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.538456][T15774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.542949][ T5882] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 819.823571][ T5883] usb 4-1: config 0 descriptor?? [ 819.845464][ T5882] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.859881][ T5882] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 819.869976][ T5882] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 110, changing to 10 [ 819.870476][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 819.881254][ T5882] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 24940, setting to 1024 [ 819.901915][ T5882] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.946225][ T5882] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 819.954024][T10778] Bluetooth: hci3: command tx timeout [ 819.955500][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.020528][ T5882] usb 2-1: Product: syz [ 820.042634][T15872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.066805][ T5882] usb 2-1: Manufacturer: syz [ 820.082925][T15872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.091300][ T5882] usb 2-1: SerialNumber: syz [ 820.122005][T15774] hsr_slave_0: entered promiscuous mode [ 820.123525][ T5882] usb 2-1: config 0 descriptor?? [ 820.141377][ T5883] (null): keene_cmd_main failed (-71) [ 820.154327][ T5883] video4linux radio48: keene_cmd_main failed (-71) [ 820.167780][T15774] hsr_slave_1: entered promiscuous mode [ 820.175812][ T5883] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 820.183556][T15861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 820.193041][ T5882] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 820.208705][ T5883] usb 4-1: USB disconnect, device number 70 [ 820.214760][ T5882] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 820.235832][T15774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.244483][T15774] Cannot create hsr debugfs directory [ 820.320455][ T4947] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 820.428439][ T5882] usb 2-1: USB disconnect, device number 89 [ 820.483290][ T4947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.527939][ T4947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.546955][ T4947] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 820.561973][ T4947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.586498][ T4947] usb 7-1: config 0 descriptor?? [ 820.910476][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 820.993191][ T29] audit: type=1400 audit(1732195752.695:1545): avc: denied { ioctl } for pid=15900 comm="syz.4.2167" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 821.060834][ T4947] konepure 0003:1E7D:2DB4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0 [ 821.075816][ T29] audit: type=1326 audit(1732195752.735:1546): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.2168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846a37e819 code=0x0 [ 821.174498][T15913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2170'. [ 821.404936][T15774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 821.463158][T15774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 821.473026][ T29] audit: type=1400 audit(1732195753.165:1547): avc: denied { watch } for pid=15922 comm="syz.4.2171" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 821.520119][ T29] audit: type=1400 audit(1732195753.165:1548): avc: denied { watch_sb watch_reads } for pid=15922 comm="syz.4.2171" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 821.553191][T15774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 821.577840][T15774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 821.779558][T15774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.854553][T15774] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.916684][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.924109][T15500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.950642][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 822.091931][T15507] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.099065][T15507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.705044][T15774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.766457][T15774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.990505][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 823.169962][T15774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.242728][ T29] audit: type=1400 audit(1732195754.915:1549): avc: denied { read } for pid=15948 comm="syz.4.2174" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 823.773346][T15774] veth0_vlan: entered promiscuous mode [ 823.833435][T15774] veth1_vlan: entered promiscuous mode [ 823.939845][T15774] veth0_macvtap: entered promiscuous mode [ 823.953442][ T3414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.983924][T15774] veth1_macvtap: entered promiscuous mode [ 824.009935][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.030525][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 824.047321][ T4947] usb 7-1: USB disconnect, device number 15 [ 824.098200][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.115049][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.137539][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.173237][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.210815][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.247670][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.270723][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.291649][T15774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.344577][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.389720][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.436091][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.461268][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.471253][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.481870][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.491848][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.502718][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.514004][T15774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.521333][T15487] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 824.541096][T15774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.549864][T15774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.627533][T15774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.690327][T15981] serio: Serial port ptm0 [ 824.707825][T15487] usb 2-1: device descriptor read/64, error -71 [ 824.927833][T15774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.070496][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 825.095071][T15487] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 825.321084][T15487] usb 2-1: device descriptor read/64, error -71 [ 825.656057][T15487] usb usb2-port1: attempt power cycle [ 825.664808][T15500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.684706][T15500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.818827][T15507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.880825][T15507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.000627][T15487] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 826.031391][T15487] usb 2-1: device descriptor read/8, error -71 [ 826.110636][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 826.141707][T15994] binder: 15993:15994 ioctl 4018620d 0 returned -22 [ 826.380448][T15487] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 826.413904][T15487] usb 2-1: device descriptor read/8, error -71 [ 826.531124][T15487] usb usb2-port1: unable to enumerate USB device [ 827.150554][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 828.190541][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 828.583734][T16042] syz.4.2188 (16042): drop_caches: 2 [ 828.605643][T16042] syz.4.2188 (16042): drop_caches: 2 [ 828.734356][ T4947] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 828.912084][ T4947] usb 4-1: Using ep0 maxpacket: 8 [ 828.924252][ T4947] usb 4-1: config index 0 descriptor too short (expected 65307, got 27) [ 828.933635][ T4947] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 828.950664][ T4947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.030585][ T4947] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 829.230542][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 829.345721][ T4947] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 829.356763][ T4947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.364842][ T4947] usb 4-1: Product: syz [ 829.369057][ T4947] usb 4-1: Manufacturer: syz [ 829.373709][ T4947] usb 4-1: SerialNumber: syz [ 829.380113][ T4947] usb 4-1: config 0 descriptor?? [ 829.635903][T15500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.743902][T16049] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 830.270481][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 830.392764][T15505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.784355][T15500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.798006][T16035] netlink: 'syz.3.2190': attribute type 4 has an invalid length. [ 830.809771][T15467] usb 4-1: USB disconnect, device number 71 [ 830.862964][T15500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.946383][T15500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.010023][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 831.270574][T15467] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 831.310475][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 831.450795][T15467] usb 7-1: Using ep0 maxpacket: 8 [ 831.497804][T15467] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 831.520594][T15467] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.541256][T15467] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 831.550148][T15467] usb 7-1: config 0 has no interface number 0 [ 831.577499][T15467] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 831.614441][T15467] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 831.666619][T10778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 831.677048][T10778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 831.711587][T15467] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 831.721891][T15467] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.738369][T10778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 831.751894][T15467] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 831.761077][T15467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.769328][T15467] usb 7-1: Product: syz [ 831.774068][T15467] usb 7-1: Manufacturer: syz [ 831.778697][T15467] usb 7-1: SerialNumber: syz [ 831.789520][T15467] usb 7-1: config 0 descriptor?? [ 831.795611][T16058] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 831.805502][T10778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 831.813421][T10778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 831.823415][T15467] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 831.830775][T10778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.969418][T16068] binder: 16064:16068 ioctl 4018620d 0 returned -22 [ 832.011314][T16055] veth1_vlan (unregistering): left allmulticast mode [ 832.350487][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 832.425966][T16055] bridge0: port 3(macvlan1) entered disabled state [ 832.526968][T16055] macvlan1 (unregistering): left allmulticast mode [ 832.544662][T16055] macvlan1 (unregistering): left promiscuous mode [ 832.559865][T16055] bridge0: port 3(macvlan1) entered disabled state [ 832.649496][ T29] audit: type=1400 audit(1732195764.345:1550): avc: denied { setopt } for pid=16057 comm="syz.6.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 832.885332][T15467] usb 7-1: USB disconnect, device number 16 [ 832.957681][T15500] bridge_slave_1: left allmulticast mode [ 833.024706][T15500] bridge_slave_1: left promiscuous mode [ 833.050631][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.073849][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.104852][T15500] bridge_slave_0: left allmulticast mode [ 833.120606][T15500] bridge_slave_0: left promiscuous mode [ 833.126315][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.390483][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 833.670975][T16082] binder: 16080:16082 ioctl c0306201 0 returned -14 [ 833.845422][T16086] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 833.960532][ T53] Bluetooth: hci3: command tx timeout [ 834.109169][T16088] xt_nat: multiple ranges no longer supported [ 834.430538][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 834.590516][T15500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.602496][T15500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.613353][T15500] bond0 (unregistering): Released all slaves [ 835.034832][T16103] netlink: 'syz.6.2206': attribute type 13 has an invalid length. [ 835.220006][T16062] chnl_net:caif_netlink_parms(): no params data found [ 835.410867][T15485] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 835.470641][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 835.569731][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.588591][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.626453][T16062] bridge_slave_0: entered allmulticast mode [ 835.674268][T15485] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.684678][T15485] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.694387][T15485] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 835.703616][T15485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.718921][ T29] audit: type=1400 audit(1732195767.415:1551): avc: denied { read write } for pid=16126 comm="syz.6.2209" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 835.732626][T16062] bridge_slave_0: entered promiscuous mode [ 835.763654][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.776673][ T29] audit: type=1400 audit(1732195767.415:1552): avc: denied { open } for pid=16126 comm="syz.6.2209" path="/113/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 835.804376][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.936031][T15485] usb 2-1: config 0 descriptor?? [ 835.947567][T15485] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 835.967151][T16062] bridge_slave_1: entered allmulticast mode [ 835.979594][ T29] audit: type=1400 audit(1732195767.625:1553): avc: denied { read } for pid=16126 comm="syz.6.2209" path="socket:[53921]" dev="sockfs" ino=53921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 836.004010][T15485] dvb-usb: bulk message failed: -22 (3/0) [ 836.031432][T16062] bridge_slave_1: entered promiscuous mode [ 836.047256][ T53] Bluetooth: hci3: command tx timeout [ 836.058059][T15485] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 836.069046][T15485] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 836.076256][T15485] usb 2-1: media controller created [ 836.082864][T15485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.203514][T16133] input: syz0 as /devices/virtual/input/input33 [ 836.387324][T15509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 836.510519][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 836.863167][T15485] dvb-usb: bulk message failed: -22 (6/0) [ 836.868954][T15485] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 836.889147][T15485] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 836.915790][T15500] hsr_slave_0: left promiscuous mode [ 836.968153][T15500] hsr_slave_1: left promiscuous mode [ 836.988525][T15500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.007530][T15485] dvb-usb: schedule remote query interval to 150 msecs. [ 837.015247][T15500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.035050][T15485] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 837.061209][T15500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.104086][T15500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.219205][T15485] dvb-usb: bulk message failed: -22 (1/0) [ 837.227989][T15485] dvb-usb: error while querying for an remote control event. [ 837.266555][T15500] veth1_macvtap: left promiscuous mode [ 837.272255][T15500] veth0_macvtap: left promiscuous mode [ 837.550470][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 837.554972][T15500] veth1_vlan: left promiscuous mode [ 837.581820][T15500] veth0_vlan: left promiscuous mode [ 837.687372][ T29] audit: type=1400 audit(1732195769.365:1554): avc: denied { setopt } for pid=16140 comm="syz.6.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 837.832674][T15485] dvb-usb: bulk message failed: -22 (1/0) [ 837.838516][T15485] dvb-usb: error while querying for an remote control event. [ 838.000619][T15467] dvb-usb: bulk message failed: -22 (1/0) [ 838.006620][T15467] dvb-usb: error while querying for an remote control event. [ 838.143775][ T53] Bluetooth: hci3: command tx timeout [ 838.590488][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 838.757816][T15467] dvb-usb: bulk message failed: -22 (1/0) [ 838.771828][T15467] dvb-usb: error while querying for an remote control event. [ 838.783766][T16157] syz.3.2214: attempt to access beyond end of device [ 838.783766][T16157] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 838.930454][T15467] dvb-usb: bulk message failed: -22 (1/0) [ 838.936237][T15467] dvb-usb: error while querying for an remote control event. [ 839.100723][T15467] dvb-usb: bulk message failed: -22 (1/0) [ 839.106551][T15467] dvb-usb: error while querying for an remote control event. [ 839.270442][T15467] dvb-usb: bulk message failed: -22 (1/0) [ 839.280492][T15467] dvb-usb: error while querying for an remote control event. [ 839.320184][T15467] usb 2-1: USB disconnect, device number 94 [ 839.391707][T15467] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 839.630478][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 840.027814][T15500] team0 (unregistering): Port device team_slave_1 removed [ 840.109567][T15500] team0 (unregistering): Port device team_slave_0 removed [ 840.199190][ T53] Bluetooth: hci3: command tx timeout [ 840.670520][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 840.698499][T16135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2211'. [ 840.854206][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.982149][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.710496][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 841.785676][T16062] team0: Port device team_slave_0 added [ 841.830234][T16062] team0: Port device team_slave_1 added [ 841.955043][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.992356][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.080385][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.266843][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.289116][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.338657][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.514758][T15500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 842.597212][ T29] audit: type=1400 audit(1732195774.295:1555): avc: denied { mounton } for pid=16191 comm="syz.4.2221" path="/500/file0" dev="proc" ino=54627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 842.597300][T16195] 9pnet_fd: Insufficient options for proto=fd [ 842.725065][T16062] hsr_slave_0: entered promiscuous mode [ 842.738068][T16062] hsr_slave_1: entered promiscuous mode [ 842.750509][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 842.780436][T16062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 842.793021][T16062] Cannot create hsr debugfs directory [ 842.829737][ T29] audit: type=1400 audit(1732195774.525:1556): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 843.757670][ T29] audit: type=1400 audit(1732195775.455:1557): avc: denied { prog_load } for pid=16221 comm="syz.3.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 843.790481][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 843.804762][ T29] audit: type=1400 audit(1732195775.455:1558): avc: denied { bpf } for pid=16221 comm="syz.3.2227" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 843.828413][T16214] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 843.853430][ T29] audit: type=1400 audit(1732195775.505:1559): avc: denied { read } for pid=5190 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 844.027589][ T29] audit: type=1400 audit(1732195775.505:1560): avc: denied { search } for pid=5190 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.294013][ T29] audit: type=1400 audit(1732195775.505:1561): avc: denied { append } for pid=5190 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 844.384680][ T29] audit: type=1400 audit(1732195775.505:1562): avc: denied { open } for pid=5190 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 844.465001][ T29] audit: type=1400 audit(1732195775.505:1563): avc: denied { getattr } for pid=5190 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 844.510808][ T29] audit: type=1400 audit(1732195775.545:1564): avc: denied { read } for pid=16221 comm="syz.3.2227" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 844.538034][ T53] Bluetooth: hci4: unknown advertising packet type: 0x66 [ 844.538099][ T53] Bluetooth: hci4: unknown advertising packet type: 0x4a [ 844.546366][ T53] Bluetooth: hci4: Malformed LE Event: 0x02 [ 844.567017][ T29] audit: type=1400 audit(1732195775.545:1565): avc: denied { open } for pid=16221 comm="syz.3.2227" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 844.840524][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 844.900490][ T4947] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 844.915731][T16234] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 844.924313][T16234] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 844.932780][T16234] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 845.050511][ T4947] usb 2-1: Using ep0 maxpacket: 8 [ 845.070570][ T4947] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 845.087042][ T4947] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 99, changing to 7 [ 845.133425][ T4947] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49789, setting to 1024 [ 845.172918][ T4947] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.193378][ T4947] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 845.203302][ T4947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.211600][ T4947] usb 2-1: Product: syz [ 845.218490][ T4947] usb 2-1: Manufacturer: syz [ 845.233381][ T4947] usb 2-1: SerialNumber: syz [ 845.252747][T16239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 845.311395][ T4947] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 845.350803][ T4947] usbtest 2-1:1.0: Linux user mode ISO test driver [ 845.357371][ T4947] usbtest 2-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 845.374417][T16062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 845.449934][T16254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2233'. [ 845.459713][T16062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 845.586351][T16062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.596617][T15485] usb 2-1: USB disconnect, device number 95 [ 845.644003][T16062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 845.710636][T16259] syz.6.2234: attempt to access beyond end of device [ 845.710636][T16259] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 845.880574][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 846.181163][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.218923][T16062] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.265360][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.272521][T15509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.377049][T15507] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.384380][T15507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.535480][T16062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 846.575843][T16062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.825351][T16277] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2235'. [ 846.910532][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 847.633932][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.746735][T16062] veth0_vlan: entered promiscuous mode [ 847.779509][T16062] veth1_vlan: entered promiscuous mode [ 847.849690][T16062] veth0_macvtap: entered promiscuous mode [ 847.925096][T16062] veth1_macvtap: entered promiscuous mode [ 847.941564][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 847.941578][ T29] audit: type=1400 audit(1732195779.645:1655): avc: denied { create } for pid=16308 comm="syz.1.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 847.960151][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.967395][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 847.993759][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.004077][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.014838][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.025668][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.057815][ T29] audit: type=1400 audit(1732195779.705:1656): avc: denied { connect } for pid=16308 comm="syz.1.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 848.089884][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.102580][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.124413][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.142260][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.161434][ T29] audit: type=1400 audit(1732195779.735:1657): avc: denied { setopt } for pid=16308 comm="syz.1.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 848.239355][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.265253][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.285320][T15509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 848.411053][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.471842][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.895615][ T29] audit: type=1400 audit(1732195779.765:1658): avc: denied { setopt } for pid=16311 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 848.900332][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.001450][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 849.003932][T16322] syz.6.2245: attempt to access beyond end of device [ 849.003932][T16322] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 849.262269][ T29] audit: type=1400 audit(1732195779.765:1659): avc: denied { bind } for pid=16311 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 849.291579][ T29] audit: type=1400 audit(1732195779.765:1660): avc: denied { name_bind } for pid=16311 comm="syz.3.2246" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 849.310714][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.361128][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.375220][ T29] audit: type=1400 audit(1732195779.765:1661): avc: denied { node_bind } for pid=16311 comm="syz.3.2246" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 849.375793][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.409366][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.422434][T16062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.431208][T16062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.439915][T16062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.448687][T16062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.472627][ T29] audit: type=1400 audit(1732195779.765:1662): avc: denied { write } for pid=16311 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 849.492359][ T29] audit: type=1400 audit(1732195779.765:1663): avc: denied { connect } for pid=16311 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 849.512257][ T29] audit: type=1400 audit(1732195779.765:1664): avc: denied { name_connect } for pid=16311 comm="syz.3.2246" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 850.030493][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 850.125200][T15500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.149123][T15500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.381498][T15509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.389447][T15509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.537037][T16348] sp0: Synchronizing with TNC [ 851.070667][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 851.160668][ T5883] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 851.179383][ T8] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 851.330551][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 851.342885][ T5883] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 851.352987][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.363226][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 851.379137][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 851.402805][ T5883] usb 2-1: Product: syz [ 851.406997][ T5883] usb 2-1: Manufacturer: syz [ 851.418336][ T5883] usb 2-1: SerialNumber: syz [ 851.425169][ T8] usb 7-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 851.445486][ T5883] usb 2-1: config 0 descriptor?? [ 851.451368][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.468301][ T5883] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 851.489734][ T8] usb 7-1: config 0 descriptor?? [ 851.672194][ T5883] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 851.919041][ T8] monterey 0003:0566:3004.0019: unknown main item tag 0x6 [ 851.940680][ T8] monterey 0003:0566:3004.0019: report_id 29495 is invalid [ 851.956540][ T8] monterey 0003:0566:3004.0019: item 0 2 1 8 parsing failed [ 851.974777][ T8] monterey 0003:0566:3004.0019: probe with driver monterey failed with error -22 [ 852.064209][T16357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 852.071554][T16357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 852.090766][T16357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 852.097324][T16357] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 852.110565][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 852.131461][T15486] usb 7-1: USB disconnect, device number 17 [ 852.450555][ T8] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 852.659849][ T3414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.160566][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 853.285691][ T3414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.310824][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 853.363239][ T3414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.424359][ T3414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.535579][ T3414] bridge_slave_1: left allmulticast mode [ 853.550587][ T3414] bridge_slave_1: left promiscuous mode [ 853.558592][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.574475][ T3414] bridge_slave_0: left allmulticast mode [ 853.580252][ T3414] bridge_slave_0: left promiscuous mode [ 853.593962][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.095649][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.106620][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.115232][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 854.120498][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 854.129025][ T3414] bond0 (unregistering): Released all slaves [ 854.190486][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 854.358903][T15485] usb 2-1: USB disconnect, device number 96 [ 854.690498][ T3414] hsr_slave_0: left promiscuous mode [ 854.699605][ T3414] hsr_slave_1: left promiscuous mode [ 854.712010][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.719628][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.941387][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 854.941425][ T29] audit: type=1400 audit(1732195786.595:1697): avc: denied { bind } for pid=16440 comm="syz.1.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 855.230480][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 855.620406][ T29] audit: type=1400 audit(1732195786.595:1698): avc: denied { read } for pid=16440 comm="syz.1.2257" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 855.739162][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.790725][T15485] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 855.811238][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.838049][T16456] FAULT_INJECTION: forcing a failure. [ 855.838049][T16456] name failslab, interval 1, probability 0, space 0, times 0 [ 855.840428][ T29] audit: type=1400 audit(1732195786.595:1699): avc: denied { open } for pid=16440 comm="syz.1.2257" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 855.850854][T16456] CPU: 1 UID: 0 PID: 16456 Comm: syz.1.2262 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 855.885318][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 855.895385][T16456] Call Trace: [ 855.898665][T16456] [ 855.901602][T16456] dump_stack_lvl+0x16c/0x1f0 [ 855.906298][T16456] should_fail_ex+0x497/0x5b0 [ 855.911000][T16456] should_failslab+0xc2/0x120 [ 855.915693][T16456] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 855.921086][T16456] ? skb_clone+0x190/0x3f0 [ 855.925526][T16456] skb_clone+0x190/0x3f0 [ 855.929792][T16456] netlink_deliver_tap+0xab3/0xd90 [ 855.934926][T16456] netlink_unicast+0x5e1/0x7f0 [ 855.935871][ T29] audit: type=1400 audit(1732195787.615:1700): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 855.939699][T16456] ? __pfx_netlink_unicast+0x10/0x10 [ 855.964754][T16456] netlink_sendmsg+0x8b8/0xd70 [ 855.969540][T16456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.974854][T16456] sock_write_iter+0x4fe/0x5b0 [ 855.979614][T16456] ? __pfx_sock_write_iter+0x10/0x10 [ 855.984897][T16456] ? bpf_lsm_file_permission+0x9/0x10 [ 855.990259][T16456] ? security_file_permission+0x71/0x210 [ 855.995889][T16456] vfs_write+0x5ae/0x1150 [ 856.000210][T16456] ? __pfx_sock_write_iter+0x10/0x10 [ 856.005488][T16456] ? trace_lock_acquire+0x14a/0x1d0 [ 856.010681][T16456] ? __pfx_vfs_write+0x10/0x10 [ 856.015436][T16456] ? __fget_files+0x40/0x3a0 [ 856.020029][T16456] ksys_write+0x207/0x250 [ 856.024349][T16456] ? __pfx_ksys_write+0x10/0x10 [ 856.029195][T16456] do_syscall_64+0xcd/0x250 [ 856.033693][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.039582][T16456] RIP: 0033:0x7f266e57e819 [ 856.043990][T16456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.063585][T16456] RSP: 002b:00007f266f369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 856.071993][T16456] RAX: ffffffffffffffda RBX: 00007f266e735fa0 RCX: 00007f266e57e819 [ 856.079955][T16456] RDX: 00000000000000fc RSI: 0000000020000000 RDI: 0000000000000003 [ 856.087919][T16456] RBP: 00007f266f369090 R08: 0000000000000000 R09: 0000000000000000 [ 856.095892][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.103860][T16456] R13: 0000000000000000 R14: 00007f266e735fa0 R15: 00007ffd98474608 [ 856.111841][T16456] [ 856.116273][T16456] netlink: 'syz.1.2262': attribute type 3 has an invalid length. [ 856.172818][ T3414] veth1_macvtap: left promiscuous mode [ 856.187063][ T29] audit: type=1400 audit(1732195787.885:1701): avc: denied { read } for pid=16461 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 856.219215][ T3414] veth0_macvtap: left promiscuous mode [ 856.220884][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 856.246629][T10778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.253607][ T3414] veth1_vlan: left promiscuous mode [ 856.259219][ T3414] veth0_vlan: left promiscuous mode [ 856.261546][T10778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.265052][ T29] audit: type=1400 audit(1732195787.915:1702): avc: denied { open } for pid=16461 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 856.283509][T10778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.295189][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 856.312276][T10778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.320246][ T29] audit: type=1400 audit(1732195787.945:1703): avc: denied { read } for pid=16463 comm="syz.1.2264" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 856.322358][T10778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 856.350579][T15485] usb 7-1: Using ep0 maxpacket: 8 [ 856.356736][ T29] audit: type=1400 audit(1732195787.945:1704): avc: denied { open } for pid=16463 comm="syz.1.2264" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 856.356864][T15485] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.391104][ T29] audit: type=1400 audit(1732195788.095:1705): avc: denied { name_bind } for pid=16459 comm="syz.3.2263" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 856.419997][T10778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 856.443216][ T29] audit: type=1400 audit(1732195788.095:1706): avc: denied { write } for pid=16463 comm="syz.1.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 856.477483][T15485] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 856.504909][T15485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 856.516475][T15485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 856.534075][T15485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 856.547271][T15485] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.568343][T15485] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 856.580055][T15485] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.619280][T15485] usb 7-1: Product: syz [ 856.624810][T15485] usb 7-1: Manufacturer: syz [ 856.630577][T15467] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 856.648204][T15485] usb 7-1: SerialNumber: syz [ 856.668537][T15485] usb 7-1: config 0 descriptor?? [ 856.674188][T16451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 856.798798][T15467] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 856.808425][T15467] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.819214][T15467] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.846843][T15467] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.862440][T15467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.878223][T15467] usb 2-1: Product: syz [ 856.882637][T15467] usb 2-1: Manufacturer: syz [ 856.887524][T15467] usb 2-1: SerialNumber: syz [ 857.094676][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 857.204550][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 857.320478][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 857.870933][T15504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 858.350534][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 858.513163][T10778] Bluetooth: hci3: command tx timeout [ 859.050934][T15485] rc_core: IR keymap rc-snapstream-firefly not found [ 859.057699][T15485] Registered IR keymap rc-empty [ 859.078397][T16495] mkiss: ax0: crc mode is auto. [ 859.090250][T15485] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 859.091126][T16461] chnl_net:caif_netlink_parms(): no params data found [ 859.341801][T15485] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input36 [ 859.394914][T15485] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input37 [ 859.404738][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 860.440495][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 860.447842][T16504] Falling back ldisc for ptm1. [ 860.614240][T10778] Bluetooth: hci3: command tx timeout [ 860.661347][T15485] usb 7-1: USB disconnect, device number 18 [ 860.661401][ C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 861.378393][T15467] usb 2-1: 0:2 : does not exist [ 861.398226][T15467] usb 2-1: USB disconnect, device number 97 [ 861.470520][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 861.586458][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 861.586475][ T29] audit: type=1400 audit(1732195793.285:1739): avc: denied { create } for pid=16522 comm="syz.6.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 861.638201][ T6092] udevd[6092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.309382][T16526] syz.4.2272: attempt to access beyond end of device [ 862.309382][T16526] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 862.330436][T16526] syz.4.2272: attempt to access beyond end of device [ 862.330436][T16526] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 862.344198][T16526] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 862.364846][ T29] audit: type=1400 audit(1732195793.845:1740): avc: denied { getopt } for pid=16522 comm="syz.6.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 862.385603][ T29] audit: type=1400 audit(1732195793.995:1741): avc: denied { create } for pid=16525 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 862.410486][ T29] audit: type=1400 audit(1732195793.995:1742): avc: denied { write } for pid=16525 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 862.510563][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 862.570075][T16526] syz.4.2272: attempt to access beyond end of device [ 862.570075][T16526] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 863.276266][T10778] Bluetooth: hci3: command tx timeout [ 863.296762][T16526] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 863.300622][ T29] audit: type=1400 audit(1732195794.065:1743): avc: denied { create } for pid=16535 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 863.306366][T16526] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 863.333877][T16526] UDF-fs: Scanning with blocksize 1024 failed [ 863.349603][T16526] syz.4.2272: attempt to access beyond end of device [ 863.349603][T16526] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 863.365338][T16526] syz.4.2272: attempt to access beyond end of device [ 863.365338][T16526] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 863.382537][ T29] audit: type=1400 audit(1732195794.375:1744): avc: denied { create } for pid=16535 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 863.403252][ T29] audit: type=1400 audit(1732195794.385:1745): avc: denied { write } for pid=16535 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 863.424004][ T29] audit: type=1400 audit(1732195794.385:1746): avc: denied { nlmsg_read } for pid=16535 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 863.476438][T16526] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 863.531036][T16526] syz.4.2272: attempt to access beyond end of device [ 863.531036][T16526] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 863.550492][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 863.615218][T16526] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 863.625157][T16526] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 863.634620][T16526] UDF-fs: Scanning with blocksize 2048 failed [ 863.647753][T15500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.647898][T16526] syz.4.2272: attempt to access beyond end of device [ 863.647898][T16526] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 863.672999][T16526] syz.4.2272: attempt to access beyond end of device [ 863.672999][T16526] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 863.687657][T16526] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 863.699482][T16526] syz.4.2272: attempt to access beyond end of device [ 863.699482][T16526] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 863.713562][T16526] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 863.723324][T16526] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 863.731221][T16526] UDF-fs: Scanning with blocksize 4096 failed [ 863.739767][T16526] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 863.839273][T16543] syz.3.2276: attempt to access beyond end of device [ 863.839273][T16543] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 863.980750][T16461] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.987841][T16461] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.995637][T16461] bridge_slave_0: entered allmulticast mode [ 864.005078][T16461] bridge_slave_0: entered promiscuous mode [ 864.019494][T16461] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.026698][T16461] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.035218][T16461] bridge_slave_1: entered allmulticast mode [ 864.041959][T16461] bridge_slave_1: entered promiscuous mode [ 864.122960][T16547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 864.141955][ T29] audit: type=1400 audit(1732195795.815:1747): avc: denied { mount } for pid=16545 comm="syz.1.2275" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 864.180015][ T29] audit: type=1400 audit(1732195795.825:1748): avc: denied { unlink } for pid=16545 comm="syz.1.2275" name="#29" dev="tmpfs" ino=2807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 864.600526][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 864.955167][T16461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.972747][T16461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.210081][T16461] team0: Port device team_slave_0 added [ 865.219383][T16461] team0: Port device team_slave_1 added [ 865.280808][T16461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.288083][T16461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.314627][T16461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.314687][ T53] Bluetooth: hci3: command tx timeout [ 865.337915][T16461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.369595][T16461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.520643][T16461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.630490][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 865.762096][T16461] hsr_slave_0: entered promiscuous mode [ 865.780099][T16461] hsr_slave_1: entered promiscuous mode [ 865.797412][T16461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.045357][T16461] Cannot create hsr debugfs directory [ 866.670478][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 867.398045][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 867.398064][ T29] audit: type=1400 audit(1732195799.005:1759): avc: denied { getopt } for pid=16578 comm="syz.6.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 867.481200][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 867.591449][ T29] audit: type=1400 audit(1732195799.005:1760): avc: denied { name_connect } for pid=16578 comm="syz.6.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 867.710518][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 868.051232][ T29] audit: type=1400 audit(1732195799.575:1761): avc: denied { read } for pid=16599 comm="syz.1.2284" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 868.084177][ T29] audit: type=1400 audit(1732195799.575:1762): avc: denied { open } for pid=16599 comm="syz.1.2284" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 868.108421][ T29] audit: type=1400 audit(1732195799.585:1763): avc: denied { ioctl } for pid=16599 comm="syz.1.2284" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 868.134062][ T29] audit: type=1400 audit(1732195799.585:1764): avc: denied { set_context_mgr } for pid=16599 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 868.342086][T10778] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 868.750561][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 869.738919][T15500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 869.790468][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 870.032174][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.038565][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.052374][ T1286] lapb15 selects TX queue 0, but real number of TX queues is 0 [ 870.056163][ T29] audit: type=1400 audit(1732195801.755:1765): avc: denied { read write } for pid=16632 comm="syz.1.2291" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 870.091750][ T29] audit: type=1400 audit(1732195801.755:1766): avc: denied { open } for pid=16632 comm="syz.1.2291" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 870.177660][ T29] audit: type=1400 audit(1732195801.805:1767): avc: denied { write } for pid=16630 comm="-" name="ip_tables_targets" dev="proc" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 870.202804][ T29] audit: type=1400 audit(1732195801.865:1768): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 870.720574][T15486] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 870.839769][T16461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.846804][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 870.889379][T16461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.896579][T15486] usb 2-1: Using ep0 maxpacket: 32 [ 870.911746][T15486] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 870.936180][T16461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.950619][T15486] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 870.985840][T16461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 870.992468][T15486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 871.022518][T15486] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 871.045540][T16653] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2293'. [ 871.066264][T15486] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 27 [ 871.107739][T15486] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 871.158349][T15486] usb 2-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 871.185837][T15486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.211201][T15486] usb 2-1: Product: syz [ 871.215442][T15486] usb 2-1: Manufacturer: syz [ 871.235416][T15486] usb 2-1: SerialNumber: syz [ 871.259469][T15486] usb 2-1: config 0 descriptor?? [ 871.271628][T16644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 871.278892][T16644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 871.345394][T16461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.376167][T15486] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 871.388994][T16461] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.437605][T15503] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.444817][T15503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.528074][T15486] usb 2-1: USB disconnect, device number 98 [ 871.543127][T15503] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.550244][T15503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.609828][T16461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 871.870615][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 872.330809][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 872.337338][T16461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.365348][T16461] veth0_vlan: entered promiscuous mode [ 872.920639][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 873.466752][T16461] veth1_vlan: entered promiscuous mode [ 873.492977][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 873.492993][ T29] audit: type=1400 audit(1732195805.185:1772): avc: denied { ioctl } for pid=16681 comm="syz.3.2298" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0x4807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 873.524526][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.596897][ T29] audit: type=1400 audit(1732195805.265:1773): avc: denied { create } for pid=16681 comm="syz.3.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 873.644638][ T29] audit: type=1400 audit(1732195805.305:1774): avc: denied { create } for pid=16701 comm="syz.1.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 873.688851][T16683] syzkaller0: entered promiscuous mode [ 873.699223][T16683] syzkaller0: entered allmulticast mode [ 873.705498][ T29] audit: type=1400 audit(1732195805.315:1775): avc: denied { getopt } for pid=16701 comm="syz.1.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 873.725828][ T29] audit: type=1400 audit(1732195805.315:1776): avc: denied { write } for pid=16681 comm="syz.3.2298" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 873.758359][T16683] syzkaller0: tun_net_xmit 1280 [ 873.760714][T15504] syzkaller0: tun_net_xmit 48 [ 873.766014][T16683] syzkaller0: create flow: hash 3270692390 index 1 [ 873.778304][ T29] audit: type=1400 audit(1732195805.315:1777): avc: denied { open } for pid=16681 comm="syz.3.2298" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 873.802487][ T29] audit: type=1400 audit(1732195805.315:1778): avc: denied { ioctl } for pid=16681 comm="syz.3.2298" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 873.806326][T16461] veth0_macvtap: entered promiscuous mode [ 873.856985][ T29] audit: type=1400 audit(1732195805.435:1779): avc: denied { relabelfrom } for pid=16681 comm="syz.3.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 873.877984][ T29] audit: type=1400 audit(1732195805.435:1780): avc: denied { relabelto } for pid=16681 comm="syz.3.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 873.911443][ T8] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 873.960486][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 873.965554][T16461] veth1_macvtap: entered promiscuous mode [ 873.979284][T16681] syzkaller0: delete flow: hash 3270692390 index 1 [ 874.074738][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 874.088190][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 874.100273][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 874.114533][ T29] audit: type=1400 audit(1732195805.805:1781): avc: denied { bind } for pid=16716 comm="syz.4.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 874.119317][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 874.172646][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.198599][ T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 874.213711][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.223738][ T8] usb 2-1: Product: syz [ 874.227924][ T8] usb 2-1: Manufacturer: syz [ 874.236333][ T8] usb 2-1: SerialNumber: syz [ 874.276035][ T8] usb 2-1: config 0 descriptor?? [ 874.363673][ T8] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 874.521926][T16705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.535764][T16725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.536879][T16705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.576219][T16725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.650951][T10778] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 874.665594][T10778] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 874.670125][ T8] imon:send_packet: packet tx failed (-71) [ 874.734879][ T8] imon 2-1:0.0: panel buttons/knobs setup failed [ 874.863814][ T8] rc_core: IR keymap rc-imon-pad not found [ 874.870160][ T8] Registered IR keymap rc-empty [ 874.880444][ T8] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 874.899000][ T8] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 874.910140][ T8] imon:send_packet: packet tx failed (-71) [ 874.940598][ T8] imon 2-1:0.0: remote input dev register failed [ 874.955720][ T8] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 875.000479][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 875.032144][ T8] imon 2-1:0.0: unable to initialize intf0, err 0 [ 875.038688][ T8] imon:imon_probe: failed to initialize context! [ 875.046106][ T8] imon 2-1:0.0: unable to register, err -19 [ 875.079798][ T8] usb 2-1: USB disconnect, device number 99 [ 875.160859][T15502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 876.030508][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 876.960501][T15486] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 877.070478][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 877.287597][T15486] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.298717][T15486] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.308753][T15486] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.325650][T15486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 877.332437][T15486] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 877.341551][T15486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.367268][T15486] usb 2-1: config 0 descriptor?? [ 878.110482][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 879.160490][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 879.244138][T15486] hid (null): report_id 0 is invalid [ 879.252439][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.259296][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.266677][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.273833][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.283385][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.291989][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.298818][T15486] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 879.306436][T15486] asus 0003:0B05:1ABE.001A: report_id 0 is invalid [ 879.313766][T15486] asus 0003:0B05:1ABE.001A: item 0 1 1 8 parsing failed [ 879.321702][T15486] asus 0003:0B05:1ABE.001A: Asus hid parse failed: -22 [ 879.328648][T15486] asus 0003:0B05:1ABE.001A: probe with driver asus failed with error -22 [ 880.122349][ T4947] usb 2-1: USB disconnect, device number 100 [ 880.150285][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.166369][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.178478][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.189259][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.199216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 880.206375][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.216968][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.227128][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.238368][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.249729][T16461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.310314][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.335472][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.345854][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.356519][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.366502][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.377006][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.386893][T16461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.397445][T16461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.437640][T16461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.453118][T16461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.557703][T16461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.570420][T16461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.584423][T16461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.025590][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 881.025625][ T29] audit: type=1400 audit(1732195812.365:1797): avc: denied { write } for pid=16794 comm="syz.3.2312" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 881.054543][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.148909][T15503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.220642][ T4947] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 881.230542][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 881.315752][T15505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.324598][T15467] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 881.337014][T15505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.363091][T15505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.371180][T15505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.403958][ T4947] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 881.412603][ T4947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.423044][ T4947] usb 7-1: config 0 has no interface number 0 [ 881.429162][ T4947] usb 7-1: config 0 interface 52 has no altsetting 0 [ 881.454144][ T4947] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 881.463604][ T4947] usb 7-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 881.477425][ T4947] usb 7-1: Product: syz [ 881.480978][T16808] nbd1: detected capacity change from 0 to 8 [ 881.483475][ T4947] usb 7-1: Manufacturer: syz [ 881.491953][T15467] usb 4-1: Using ep0 maxpacket: 16 [ 881.493825][ T4947] usb 7-1: SerialNumber: syz [ 881.498882][T15467] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 881.511082][ T4947] usb 7-1: config 0 descriptor?? [ 881.521691][T16812] block nbd1: shutting down sockets [ 881.530939][T15467] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 881.551190][T15467] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 881.582907][T15467] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.582967][T10449] blk_print_req_error: 60 callbacks suppressed [ 881.582980][T10449] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.603313][T15467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.610602][T10449] buffer_io_error: 60 callbacks suppressed [ 881.610622][T10449] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.642105][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.653169][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.661204][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.665519][T15467] usb 4-1: Product: syz [ 881.670807][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.680820][ T29] audit: type=1400 audit(1732195813.375:1798): avc: denied { read } for pid=16807 comm="syz.1.2313" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 881.683511][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.705254][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.720838][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.722572][T15467] usb 4-1: Manufacturer: syz [ 881.728752][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.742492][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.752347][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.761768][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.769644][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.780247][T15467] usb 4-1: SerialNumber: syz [ 881.796157][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.810431][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.819493][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.827777][ T5849] ldm_validate_partition_table(): Disk read failed. [ 881.834848][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.843957][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.853621][ T5849] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 881.866265][ T5849] Buffer I/O error on dev nbd1, logical block 0, async page read [ 881.874749][ T5849] Dev nbd1: unable to read RDB block 0 [ 881.880764][ T5849] nbd1: unable to read partition table [ 881.886457][ T5849] nbd1: partition table beyond EOD, truncated [ 881.906861][ T5849] ldm_validate_partition_table(): Disk read failed. [ 881.931026][ T5849] Dev nbd1: unable to read RDB block 0 [ 881.936784][ T5849] nbd1: unable to read partition table [ 881.961982][ T5849] nbd1: partition table beyond EOD, truncated [ 882.270721][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 882.300154][T16796] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 882.346119][ T29] audit: type=1400 audit(1732195814.025:1799): avc: denied { ioctl } for pid=16829 comm="syz.1.2314" path="socket:[57532]" dev="sockfs" ino=57532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 883.320534][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 884.350583][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 885.119823][T15505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.326798][T15467] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 885.359973][T15467] usb 4-1: USB disconnect, device number 73 [ 885.390712][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 885.433441][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 885.451954][T15480] usb 7-1: USB disconnect, device number 19 [ 885.528751][T15505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.555577][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.699174][T15505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.766132][T15505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.883475][T15505] bridge_slave_1: left allmulticast mode [ 885.889161][T15505] bridge_slave_1: left promiscuous mode [ 885.895109][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.908679][T15505] bridge_slave_0: left allmulticast mode [ 885.917062][T15505] bridge_slave_0: left promiscuous mode [ 885.922915][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.360648][T15505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.372471][T15505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.382990][T15505] bond0 (unregistering): Released all slaves [ 886.430494][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 886.700918][ T3414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 886.819243][ T29] audit: type=1326 audit(1732195818.515:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16870 comm="syz.3.2318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846a37e819 code=0x0 [ 887.470484][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 887.650453][ T8] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 888.064117][T15505] hsr_slave_0: left promiscuous mode [ 888.070129][T15505] hsr_slave_1: left promiscuous mode [ 888.076477][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.092988][T15505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.120275][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.131175][T15505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.140494][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 888.149811][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 888.169459][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 888.180520][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 888.180528][ T8] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 888.198758][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 888.206738][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 888.214953][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.250551][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.258566][ T8] usb 7-1: Product: syz [ 888.300612][ T5882] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 888.315853][T15505] veth1_macvtap: left promiscuous mode [ 888.326625][ T8] usb 7-1: Manufacturer: syz [ 888.330835][T15505] veth0_macvtap: left promiscuous mode [ 888.337152][T15505] veth1_vlan: left promiscuous mode [ 888.342657][T15505] veth0_vlan: left promiscuous mode [ 888.358359][ T8] usb 7-1: SerialNumber: syz [ 888.372514][ T29] audit: type=1400 audit(1732195820.075:1801): avc: denied { accept } for pid=16890 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 888.387602][ T8] usb 7-1: config 0 descriptor?? [ 888.407115][ T29] audit: type=1400 audit(1732195820.095:1802): avc: denied { write } for pid=16890 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 888.431068][ T29] audit: type=1400 audit(1732195820.105:1803): avc: denied { read } for pid=16890 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 888.460480][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 888.479227][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 888.489638][ T5882] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 888.510497][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 888.518390][ T5882] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 888.563144][ T5882] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 888.578321][ T5882] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 888.588688][ T5882] usb 2-1: config 1 interface 0 has no altsetting 0 [ 888.595737][ T5882] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 888.605057][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.626906][ T8] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 888.635330][ T8] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 888.662532][ T8] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 888.672054][ T8] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 888.702081][ T5882] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 888.710282][ T8] usb 7-1: USB disconnect, device number 20 [ 889.070445][ T5882] scsi host1: usb-storage 2-1:1.0 [ 889.368402][ T29] audit: type=1400 audit(1732195821.065:1804): avc: denied { getopt } for pid=16902 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 889.490687][ T29] audit: type=1400 audit(1732195821.075:1805): avc: denied { ioctl } for pid=16902 comm="syz.4.2323" path="socket:[57316]" dev="sockfs" ino=57316 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 889.560494][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 889.708774][ T29] audit: type=1400 audit(1732195821.315:1806): avc: denied { create } for pid=16885 comm="syz.1.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 889.790576][T16886] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 889.838528][ T29] audit: type=1400 audit(1732195821.485:1807): avc: denied { ioctl } for pid=16885 comm="syz.1.2320" path="socket:[57605]" dev="sockfs" ino=57605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 890.081265][T16909] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 890.153243][ T29] audit: type=1400 audit(1732195821.775:1808): avc: denied { bind } for pid=16905 comm="syz.6.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.230262][ T29] audit: type=1400 audit(1732195821.785:1809): avc: denied { write } for pid=16905 comm="syz.6.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.285070][ T53] Bluetooth: hci3: command tx timeout [ 890.370254][T15507] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 890.590473][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 890.969780][T15507] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 891.212721][T15505] team0 (unregistering): Port device team_slave_1 removed [ 891.351249][T15505] team0 (unregistering): Port device team_slave_0 removed [ 891.630535][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 892.350581][ T53] Bluetooth: hci3: command tx timeout [ 892.364107][T16893] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 892.372691][T16893] macvlan2: entered allmulticast mode [ 892.378117][T16893] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 892.399589][T16893] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 892.430820][T15507] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 892.448709][T16906] team0: entered promiscuous mode [ 892.453913][T16906] team_slave_0: entered promiscuous mode [ 892.459820][T16906] team_slave_1: entered promiscuous mode [ 892.466130][T16906] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 892.474697][T16906] team0: left promiscuous mode [ 892.479502][T16906] team_slave_0: left promiscuous mode [ 892.488354][T16906] team_slave_1: left promiscuous mode [ 892.494033][T16906] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 892.670565][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 892.799844][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 892.799861][ T29] audit: type=1400 audit(1732195824.485:1815): avc: denied { append } for pid=16929 comm="syz.1.2329" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 892.867917][ T29] audit: type=1400 audit(1732195824.555:1816): avc: denied { name_bind } for pid=16929 comm="syz.1.2329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 893.077482][T16947] syz.3.2331: attempt to access beyond end of device [ 893.077482][T16947] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 893.457618][ T8] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 893.480552][ T4947] usb 2-1: USB disconnect, device number 101 [ 893.524556][T15500] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 893.535060][T15500] sd 1:0:0:0: [sdb] Sense not available. [ 893.541418][T15500] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 893.548738][T15500] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 893.554272][T16887] chnl_net:caif_netlink_parms(): no params data found [ 893.554863][T15500] sd 1:0:0:0: [sdb] Write Protect is off [ 893.568013][T15500] sd 1:0:0:0: [sdb] Asking for cache data failed [ 893.574448][T15500] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 893.583371][T15500] [ 893.585706][T15500] ====================================================== [ 893.592715][T15500] WARNING: possible circular locking dependency detected [ 893.599727][T15500] 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Not tainted [ 893.606483][T15500] ------------------------------------------------------ [ 893.613493][T15500] kworker/u8:17/15500 is trying to acquire lock: [ 893.619815][T15500] ffff8880288f0918 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 893.629450][T15500] [ 893.629450][T15500] but task is already holding lock: [ 893.636810][T15500] ffff8880288f00e0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 893.647356][T15500] [ 893.647356][T15500] which lock already depends on the new lock. [ 893.647356][T15500] [ 893.657744][T15500] [ 893.657744][T15500] the existing dependency chain (in reverse order) is: [ 893.666727][T15500] [ 893.666727][T15500] -> #5 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 893.675562][T15500] blk_queue_enter+0x50f/0x640 [ 893.680841][T15500] blk_mq_alloc_request+0x59b/0x950 [ 893.686544][T15500] scsi_execute_cmd+0x1eb/0xf40 [ 893.691907][T15500] read_capacity_10+0x1d4/0x6d0 [ 893.697280][T15500] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 893.703594][T15500] sd_probe+0x904/0x1000 [ 893.708358][T15500] really_probe+0x23e/0xa90 [ 893.713369][T15500] __driver_probe_device+0x1de/0x440 [ 893.719164][T15500] driver_probe_device+0x4c/0x1b0 [ 893.724688][T15500] __device_attach_driver+0x1df/0x310 [ 893.730560][T15500] bus_for_each_drv+0x157/0x1e0 [ 893.735905][T15500] __device_attach_async_helper+0x1d3/0x290 [ 893.740521][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 893.742291][T15500] async_run_entry_fn+0x9c/0x530 [ 893.753868][ T5171] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 893.754586][T15500] process_one_work+0x9c5/0x1ba0 [ 893.767552][T15500] worker_thread+0x6c8/0xf00 [ 893.772647][T15500] kthread+0x2c1/0x3a0 [ 893.777217][T15500] ret_from_fork+0x45/0x80 [ 893.782130][T15500] ret_from_fork_asm+0x1a/0x30 [ 893.787397][T15500] [ 893.787397][T15500] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 893.795016][T15500] __mutex_lock+0x19b/0xa60 [ 893.800019][T15500] __nbd_set_size+0x2c0/0x730 [ 893.805197][T15500] nbd_start_device+0x8fd/0xd70 [ 893.810542][T15500] nbd_ioctl+0x21a/0xfd0 [ 893.815281][T15500] blkdev_ioctl+0x276/0x6d0 [ 893.820281][T15500] __x64_sys_ioctl+0x190/0x200 [ 893.825538][T15500] do_syscall_64+0xcd/0x250 [ 893.830541][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.836932][T15500] [ 893.836932][T15500] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 893.845508][T15500] blk_mq_submit_bio+0x1fc4/0x24c0 [ 893.851114][T15500] __submit_bio+0x384/0x540 [ 893.856129][T15500] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 893.862267][T15500] submit_bio_noacct+0x93a/0x1e10 [ 893.867794][T15500] block_read_full_folio+0x812/0xa50 [ 893.873589][T15500] filemap_read_folio+0xc6/0x2a0 [ 893.879025][T15500] filemap_get_pages+0x1560/0x1be0 [ 893.884637][T15500] filemap_read+0x3ca/0xd70 [ 893.889635][T15500] blkdev_read_iter+0x187/0x480 [ 893.894983][T15500] vfs_read+0x87f/0xbe0 [ 893.899632][T15500] ksys_read+0x12b/0x250 [ 893.904367][T15500] do_syscall_64+0xcd/0x250 [ 893.909368][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.915774][T15500] [ 893.915774][T15500] -> #2 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 893.924260][T15500] down_read+0x9a/0x330 [ 893.928916][T15500] filemap_fault+0x62e/0x2820 [ 893.934108][T15500] __do_fault+0x10a/0x490 [ 893.938943][T15500] do_pte_missing+0x1a8/0x3e70 [ 893.944214][T15500] __handle_mm_fault+0x100a/0x2a10 [ 893.949828][T15500] handle_mm_fault+0x3fa/0xaa0 [ 893.955090][T15500] do_user_addr_fault+0x7a3/0x13f0 [ 893.960698][T15500] exc_page_fault+0x5c/0xc0 [ 893.965702][T15500] asm_exc_page_fault+0x26/0x30 [ 893.971050][T15500] __put_user_4+0x11/0x20 [ 893.975875][T15500] __sys_sendmmsg+0x235/0x420 [ 893.981064][T15500] __x64_sys_sendmmsg+0x9c/0x100 [ 893.986504][T15500] do_syscall_64+0xcd/0x250 [ 893.990656][ T5171] usb 4-1: Using ep0 maxpacket: 8 [ 893.991504][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.000061][ T5171] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 894.002879][T15500] [ 894.002879][T15500] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 894.002908][T15500] __might_fault+0x11b/0x190 [ 894.014659][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.019407][T15500] _copy_from_user+0x29/0xd0 [ 894.031098][ T5171] usb 4-1: config 0 descriptor?? [ 894.032424][T15500] __blk_trace_setup+0xa8/0x180 [ 894.047831][T15500] blk_trace_ioctl+0x163/0x290 [ 894.053123][T15500] blkdev_ioctl+0x109/0x6d0 [ 894.058153][T15500] __x64_sys_ioctl+0x190/0x200 [ 894.063432][T15500] do_syscall_64+0xcd/0x250 [ 894.068452][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.074861][T15500] [ 894.074861][T15500] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 894.082672][T15500] __lock_acquire+0x249e/0x3c40 [ 894.088037][T15500] lock_acquire.part.0+0x11b/0x380 [ 894.093665][T15500] __mutex_lock+0x19b/0xa60 [ 894.098688][T15500] blk_mq_init_sched+0x42b/0x640 [ 894.104141][T15500] elevator_init_mq+0x2cd/0x420 [ 894.109512][T15500] add_disk_fwnode+0x113/0x1300 [ 894.114865][T15500] sd_probe+0xa86/0x1000 [ 894.119621][T15500] really_probe+0x23e/0xa90 [ 894.124622][T15500] __driver_probe_device+0x1de/0x440 [ 894.130415][T15500] driver_probe_device+0x4c/0x1b0 [ 894.135949][T15500] __device_attach_driver+0x1df/0x310 [ 894.141842][T15500] bus_for_each_drv+0x157/0x1e0 [ 894.147238][T15500] __device_attach_async_helper+0x1d3/0x290 [ 894.153652][T15500] async_run_entry_fn+0x9c/0x530 [ 894.159100][T15500] process_one_work+0x9c5/0x1ba0 [ 894.164550][T15500] worker_thread+0x6c8/0xf00 [ 894.169655][T15500] kthread+0x2c1/0x3a0 [ 894.174228][T15500] ret_from_fork+0x45/0x80 [ 894.179150][T15500] ret_from_fork_asm+0x1a/0x30 [ 894.184416][T15500] [ 894.184416][T15500] other info that might help us debug this: [ 894.184416][T15500] [ 894.194627][T15500] Chain exists of: [ 894.194627][T15500] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 894.194627][T15500] [ 894.209040][T15500] Possible unsafe locking scenario: [ 894.209040][T15500] [ 894.216462][T15500] CPU0 CPU1 [ 894.221807][T15500] ---- ---- [ 894.227164][T15500] lock(&q->q_usage_counter(queue)#53); [ 894.232792][T15500] lock(&q->limits_lock); [ 894.239722][T15500] lock(&q->q_usage_counter(queue)#53); [ 894.247881][T15500] lock(&q->debugfs_mutex); [ 894.252451][T15500] [ 894.252451][T15500] *** DEADLOCK *** [ 894.252451][T15500] [ 894.260573][T15500] 4 locks held by kworker/u8:17/15500: [ 894.266008][T15500] #0: ffff88801bee6948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 894.276349][T15500] #1: ffffc90003c67d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 894.287560][T15500] #2: ffff888024958378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 894.297910][T15500] #3: ffff8880288f00e0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 894.308899][T15500] [ 894.308899][T15500] stack backtrace: [ 894.314779][T15500] CPU: 0 UID: 0 PID: 15500 Comm: kworker/u8:17 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 894.325441][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 894.335491][T15500] Workqueue: async async_run_entry_fn [ 894.340873][T15500] Call Trace: [ 894.344151][T15500] [ 894.347099][T15500] dump_stack_lvl+0x116/0x1f0 [ 894.351791][T15500] print_circular_bug+0x419/0x5d0 [ 894.356818][T15500] check_noncircular+0x31a/0x400 [ 894.361736][T15500] ? __pfx_check_noncircular+0x10/0x10 [ 894.367200][T15500] ? lockdep_lock+0xc6/0x200 [ 894.371780][T15500] ? __pfx_lockdep_lock+0x10/0x10 [ 894.376783][T15500] __lock_acquire+0x249e/0x3c40 [ 894.381620][T15500] ? __pfx___lock_acquire+0x10/0x10 [ 894.386815][T15500] lock_acquire.part.0+0x11b/0x380 [ 894.391917][T15500] ? blk_mq_init_sched+0x42b/0x640 [ 894.397037][T15500] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 894.402660][T15500] ? rcu_is_watching+0x12/0xc0 [ 894.407421][T15500] ? trace_lock_acquire+0x14a/0x1d0 [ 894.412596][T15500] ? blk_mq_init_sched+0x42b/0x640 [ 894.417713][T15500] ? lock_acquire+0x2f/0xb0 [ 894.422212][T15500] ? blk_mq_init_sched+0x42b/0x640 [ 894.427324][T15500] __mutex_lock+0x19b/0xa60 [ 894.431822][T15500] ? blk_mq_init_sched+0x42b/0x640 [ 894.436933][T15500] ? blk_mq_init_sched+0x42b/0x640 [ 894.442058][T15500] ? __pfx___mutex_lock+0x10/0x10 [ 894.447096][T15500] ? blk_queue_flag_set+0x29/0x40 [ 894.452133][T15500] ? blk_mq_init_sched+0x42b/0x640 [ 894.457233][T15500] blk_mq_init_sched+0x42b/0x640 [ 894.462160][T15500] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 894.467610][T15500] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 894.473594][T15500] ? lock_acquire+0x2f/0xb0 [ 894.478085][T15500] ? add_disk_fwnode+0x113/0x1300 [ 894.483088][T15500] elevator_init_mq+0x2cd/0x420 [ 894.487934][T15500] ? add_disk_fwnode+0x113/0x1300 [ 894.492941][T15500] add_disk_fwnode+0x113/0x1300 [ 894.497767][T15500] ? _raw_spin_unlock_irq+0x23/0x50 [ 894.502956][T15500] sd_probe+0xa86/0x1000 [ 894.507200][T15500] ? __pfx_sd_probe+0x10/0x10 [ 894.511868][T15500] really_probe+0x23e/0xa90 [ 894.516357][T15500] __driver_probe_device+0x1de/0x440 [ 894.521644][T15500] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 894.527454][T15500] driver_probe_device+0x4c/0x1b0 [ 894.532482][T15500] __device_attach_driver+0x1df/0x310 [ 894.537846][T15500] ? __pfx___device_attach_driver+0x10/0x10 [ 894.543741][T15500] bus_for_each_drv+0x157/0x1e0 [ 894.548585][T15500] ? __pfx_bus_for_each_drv+0x10/0x10 [ 894.553946][T15500] ? lockdep_hardirqs_on+0x7c/0x110 [ 894.559143][T15500] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 894.564937][T15500] ? __pfx___device_attach_async_helper+0x10/0x10 [ 894.571352][T15500] __device_attach_async_helper+0x1d3/0x290 [ 894.577241][T15500] ? __pfx___device_attach_async_helper+0x10/0x10 [ 894.583652][T15500] ? ktime_get+0x206/0x300 [ 894.588079][T15500] ? read_tsc+0x9/0x20 [ 894.592157][T15500] ? ktime_get+0x1ac/0x300 [ 894.596564][T15500] ? process_one_work+0x921/0x1ba0 [ 894.601659][T15500] async_run_entry_fn+0x9c/0x530 [ 894.606588][T15500] process_one_work+0x9c5/0x1ba0 [ 894.611514][T15500] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 894.617132][T15500] ? __pfx_process_one_work+0x10/0x10 [ 894.622514][T15500] ? assign_work+0x1a0/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 894.627090][T15500] worker_thread+0x6c8/0xf00 [ 894.631668][T15500] ? __pfx_worker_thread+0x10/0x10 [ 894.636763][T15500] kthread+0x2c1/0x3a0 [ 894.640820][T15500] ? _raw_spin_unlock_irq+0x23/0x50 [ 894.646006][T15500] ? __pfx_kthread+0x10/0x10 [ 894.650589][T15500] ret_from_fork+0x45/0x80 [ 894.654991][T15500] ? __pfx_kthread+0x10/0x10 [ 894.659569][T15500] ret_from_fork_asm+0x1a/0x30 [ 894.664325][T15500] [ 894.675920][ T29] audit: type=1400 audit(1732195826.375:1817): avc: denied { write } for pid=5820 comm="syz-executor" path="pipe:[4032]" dev="pipefs" ino=4032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 894.687121][T15500] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 894.701462][ T29] audit: type=1400 audit(1732195826.405:1818): avc: denied { recv } for pid=3414 comm="kworker/u8:6" saddr=10.128.0.169 src=45622 daddr=10.128.0.119 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 894.736732][ T53] Bluetooth: hci3: command tx timeout [ 894.750482][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 894.820611][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 895.256465][ T5171] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 895.280417][ T8] usb 7-1: device descriptor read/all, error -71 [ 895.293505][ T5171] asix 4-1:0.0: probe with driver asix failed with error -71 [ 895.378664][ T6092] udevd[6092]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 895.388538][ T5171] usb 4-1: USB disconnect, device number 74 [ 895.441275][T15507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.509739][T15507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.556384][T15507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.629953][T15507] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.762607][T15507] bridge_slave_1: left allmulticast mode [ 895.769123][T15507] bridge_slave_1: left promiscuous mode [ 895.776093][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.784818][T15507] bridge_slave_0: left allmulticast mode [ 895.790568][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 895.800202][T15507] bridge_slave_0: left promiscuous mode [ 895.806014][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.988361][T15507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.997940][T15507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.007482][T15507] bond0 (unregistering): Released all slaves [ 896.248223][T15507] hsr_slave_0: left promiscuous mode [ 896.254827][T15507] hsr_slave_1: left promiscuous mode [ 896.260756][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.268293][T15507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.277737][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.285196][T15507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.294178][T15507] veth1_macvtap: left promiscuous mode [ 896.299640][T15507] veth0_macvtap: left promiscuous mode [ 896.305209][T15507] veth1_vlan: left promiscuous mode [ 896.469874][T15507] team0 (unregistering): Port device team_slave_1 removed [ 896.497401][T15507] team0 (unregistering): Port device team_slave_0 removed [ 896.794118][T15507] IPVS: stop unused estimator thread 0... [ 896.827897][ T29] audit: type=1400 audit(1732195828.525:1819): avc: denied { sys_chroot } for pid=17020 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 896.849255][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 896.857237][ T29] audit: type=1400 audit(1732195828.525:1820): avc: denied { setgid } for pid=17020 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 896.880868][ T29] audit: type=1400 audit(1732195828.525:1821): avc: denied { setrlimit } for pid=17020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 896.907496][T15507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.944558][T15507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.995076][T15507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.055230][T15507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.133075][T15507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.211176][T15507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.254117][T15507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.304241][T15507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.384841][T15507] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.457208][T15507] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.516974][T15507] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.566896][T15507] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.628057][T15507] erspan0: left allmulticast mode [ 897.633487][T15507] erspan0: left promiscuous mode [ 897.638538][T15507] bridge0: port 3(erspan0) entered disabled state [ 897.647294][T15507] bridge_slave_1: left allmulticast mode [ 897.653047][T15507] bridge_slave_1: left promiscuous mode [ 897.658688][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.678308][T15507] bridge_slave_0: left allmulticast mode [ 897.685677][T15507] bridge_slave_0: left promiscuous mode [ 897.691615][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.709076][T15507] erspan0: left allmulticast mode [ 897.714633][T15507] erspan0: left promiscuous mode [ 897.719695][T15507] bridge0: port 4(erspan0) entered disabled state [ 897.728458][T15507] bridge_slave_1: left allmulticast mode [ 897.735371][T15507] bridge_slave_1: left promiscuous mode [ 897.741351][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.749386][T15507] bridge_slave_0: left allmulticast mode [ 897.757097][T15507] bridge_slave_0: left promiscuous mode [ 897.763088][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.771884][T15507] bridge_slave_1: left allmulticast mode [ 897.777524][T15507] bridge_slave_1: left promiscuous mode [ 897.784044][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.792290][T15507] bridge_slave_0: left allmulticast mode [ 897.797932][T15507] bridge_slave_0: left promiscuous mode [ 897.804324][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.870490][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 898.164984][T15507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.174512][T15507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.184286][T15507] bond0 (unregistering): Released all slaves [ 898.194066][T15507] bond1 (unregistering): Released all slaves [ 898.203475][T15507] bond0 (unregistering): Released all slaves [ 898.214753][T15507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.225334][T15507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.235115][T15507] bond0 (unregistering): Released all slaves [ 898.245821][T15507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.255725][T15507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.265532][T15507] bond0 (unregistering): Released all slaves [ 898.343237][T15507] tipc: Disabling bearer [ 898.348563][T15507] tipc: Left network mode [ 898.374615][T15507] tipc: Left network mode [ 898.400910][T15507] team0: Port device wlan1 removed [ 899.013012][T15507] hsr_slave_0: left promiscuous mode [ 899.018854][T15507] hsr_slave_1: left promiscuous mode [ 899.037278][T15507] batman_adv: batadv0: Removing interface: team0 [ 899.044389][T15507] batman_adv: batadv0: Interface deactivated: dummy0 [ 899.053779][T15507] batman_adv: batadv0: Removing interface: dummy0 [ 899.060798][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.068194][T15507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.078582][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.086241][T15507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.096023][T15507] hsr_slave_0: left promiscuous mode [ 899.103217][T15507] hsr_slave_1: left promiscuous mode [ 899.108943][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.118322][T15507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.126344][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.135061][T15507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.144747][T15507] hsr_slave_0: left promiscuous mode [ 899.151809][T15507] hsr_slave_1: left promiscuous mode [ 899.157485][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.166054][T15507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.175230][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.182782][T15507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.195339][T15507] veth1_macvtap: left promiscuous mode [ 899.202744][T15507] veth0_macvtap: left promiscuous mode [ 899.208272][T15507] veth1_vlan: left promiscuous mode [ 899.214319][T15507] veth0_vlan: left promiscuous mode [ 899.219891][T15507] veth1_macvtap: left promiscuous mode [ 899.225931][T15507] veth0_macvtap: left promiscuous mode [ 899.232517][T15507] veth1_macvtap: left promiscuous mode [ 899.237966][T15507] veth0_macvtap: left promiscuous mode [ 899.243493][T15507] veth1_vlan: left promiscuous mode [ 899.248697][T15507] veth0_vlan: left promiscuous mode [ 899.267204][T15507] infiniband syz2: set down [ 899.417434][T15507] team0 (unregistering): Port device team_slave_1 removed [ 899.426757][T15500] smc: removing ib device syz2 [ 899.452523][T15507] team0 (unregistering): Port device team_slave_0 removed [ 899.706638][T15507] team0 (unregistering): Port device team_slave_1 removed [ 899.747373][T15507] team0 (unregistering): Port device team_slave_0 removed [ 899.857353][T15507] pimreg (unregistering): left allmulticast mode [ 899.921630][T15507] team0 (unregistering): Port device team_slave_1 removed [ 899.949302][T15507] team0 (unregistering): Port device team_slave_0 removed [ 900.752017][T15507] IPVS: stop unused estimator thread 0... [ 900.759345][T15507] IPVS: stop unused estimator thread 0...