last executing test programs: 7m29.785288114s ago: executing program 32 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'sit0\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970204982b00fe8000000000000000000000000000aaff020000000000000000000000000001e38c"], 0xffe) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0xb7b5d000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'macsec0\x00', 0x400}) 6m50.326020833s ago: executing program 33 (id=1067): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r5, 0x6e7fc000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='[&{\\(\\\x00', &(0x7f0000000440)='}\x00', 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x4) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='source\x88\xb2\xa3\xff\x05m\xc9\x0el\xe4\xa3\xe1\xf8\xb38~\a\x8e\xc2\x12\xc61\xf5%\x1c\xb3er\r\x86\xe2\xce\x95\x19\x14I\'w\x87t@\x94\xa0\xbe(\x8b\xc1\xa4T\x9e\xda\x97!Y\xfc`\xde\x04O<\xd9V\x82/2s=x\v\xd8WPRiv\xfa\x97e\xdd\x84\xb5\x91\x1b\x17U#\\)\x81@\x0f\x91\xff6\x9c\xa8rL\xf2Q\x92\xef\x8c\x9dH \xfc>\x8f\x82\xfc\x98n\x96\xa8\x91\f\xb1:;\xfeN_d\x82\xf6\x06\xf5u\xdc{{\x89\x15!\xb0{\x9d89\xfb{\x03=\xb2cR\x81\xbeZ\x9cl\x0eS\x83\xf9wDv\x1a\xa6\x86\x95\xe1\x84\xc9T\x9ap\xed\x18\x12zDK5\x11,Y\x8c\xe1s\x02\xbf\x18\x90*H\xfaF\xeb\x8f\xafz\xa3\x19/\x1c\xe1\xfd\x8b\xa4\x18', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 4m41.48762455s ago: executing program 34 (id=1780): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000400), 0x4, 0x2002) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x3) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000140)={r8, 0x0, 0x0, 0x4000}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='devfreq_frequency\x00', r4}, 0x18) write$selinux_access(r2, &(0x7f0000000100)={'system_u:object_r:udev_var_run_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x20000000000}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) 4m39.450044068s ago: executing program 35 (id=1788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0xfb8, "6302ac9e5a9a22abed3a3a4ebe17c110654ea91f70488437ce6d54d4d25d372a", 0x2, 0xcb, 0x0, 0x40, 0x8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x121500) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x3) 4m13.069276465s ago: executing program 36 (id=1938): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7ff) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000000c0), 0x1, 0x4c8d0) 3m8.223133762s ago: executing program 37 (id=2292): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x9, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0xf3}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40080700090007003d7dba2915"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m43.523471624s ago: executing program 7 (id=2566): ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[{}], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], r0, 0x0, '\x00', 0x5, 0x7}) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xf, @null, @bpq0, 0x2, [@default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) r2 = accept4(r1, 0x0, &(0x7f0000000400), 0x80000) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000440)=0x10) syz_open_dev$dri(&(0x7f0000000480), 0x7fff, 0x900) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000500)={0xaa, "0b69b47c0cef60b8653ad683dd2ec3a7d7e93a2a078660caf4a24233c8a0bdf3"}) syz_io_uring_setup(0x2531, &(0x7f0000000540)={0x0, 0x15e9, 0x2, 0x1, 0xf9, 0x0, r3}, &(0x7f00000005c0), &(0x7f0000000600)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x1, 0x1, [0xce0]}, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000006c0)=0x1, 0xa, 0x3) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x2088, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000007c0)=""/203) syz_usb_connect(0x3, 0x351, &(0x7f00000008c0)={{0x12, 0x1, 0x100, 0x8c, 0xf7, 0xa2, 0xff, 0x1370, 0x6828, 0x110, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33f, 0x3, 0x2, 0x1, 0x10, 0x40, [{{0x9, 0x4, 0xe2, 0x1, 0x0, 0xe3, 0xb3, 0x5, 0x80, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "784a9c366432"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x4, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x80, 0x1}]}]}}, {{0x9, 0x4, 0xe6, 0x8, 0x6, 0x4e, 0x92, 0xe9, 0xff, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x6, 0x4, 0x3}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xfb, 0x7, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xf, 0x8, 0x5}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x4, 0xff, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x98, 0x4}]}}, {{0x9, 0x5, 0xf, 0x14, 0x8, 0xc0, 0x8, 0x1e, [@generic={0x9b, 0x23, "fe7334d94a347ad7c84d6664cc90e8ad2171ac8c5c08cd7d601bf5d064ca159797cfbb5b915edae66101921b6984db5e4600920874071688905ede65ca99fdba018fe47e7ca8a5d22a6b723ba471a86e7ae29bd68ccdca545f15b284610c3facaa6550a24de8cae0f35753250bd6176f28a758df0403588c5828577751a2b53e87f9d52297633b1c851531268891cbbaaeb3bf1716021a12bc"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xe1}]}}]}}, {{0x9, 0x4, 0xcf, 0xb, 0x2, 0x2b, 0xc3, 0x7, 0x10, [], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0xdf, 0xff, 0x9d, [@generic={0xb1, 0x2, "e86372b5bccb3d1cb4504448bece4277970977fffdcd016a15c1586c70b3cadded1d8f809e660fcb04873acba21ad8669207c9fc2d4042c9c162d94abcf9686f243a06ac624fbef447d99fe85f2e1231d2624841bbf01c65e7aec3e0099bcf51b701ce0b206ec8d8446803132e98c36e13e57c971f074d9174a6b16c9daf66e9eec63f1492a26627bdb359ca16adca3963fb70a88095e89a0028fa763aa71d54d4bfa79a2037bb032188a5157f8ec7"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x1, 0x9, 0xea, [@generic={0x95, 0x22, "953ee8ad96e89c51c50ef2c4e21cb6c330fa7dfc38af3616a12ac3c3b09a538061510f61cd4d8662a08fc2f733af2ce4b8a56472c18ebc9c61b10933969fde17f159fce4b311d419964f0f749d980a6e89d7f6029a4fa80784fc2a92e97abd90543e9a117689573290d56864bad822b035782f2d2ea048f8c37227fb9a1d53566995b7c11c9cc5c25ecac5e17eb0402e25f5b0"}, @generic={0x9e, 0xe, "48e97c2d921a55354d358074498e94d3defa142eeec3a822d28197ce9f42825273a19e5a93356e9bc4cae25b748b3003fcf92baa10796716a9cecda0a51a59f94568151402d29190ee52fa7595404b7f6de0eb9a7402fb3f1f2426778642f1a82f5a798bc83adc1c52e0007d48f28c57b06a336ff2bcb7d54be8b26db183ec96848f9ccb6a82471080174a6c42f6f165f99cf251557b088c3d73125b"}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x110, 0xfc, 0x81, 0x2b, 0x20, 0x2}, 0x3a, &(0x7f0000000c80)={0x5, 0xf, 0x3a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xd5, "b9c29106d2f35c8fcd75e6acd69ab057"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xc, 0x75, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1a, 0xf8, 0x4, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8, 0x5, 0x81}]}, 0x2, [{0x53, &(0x7f0000000cc0)=@string={0x53, 0x3, "0677a2f08bc2d6de6f31b7e844ec1bf1f0f78f761df7ad47815687c859eac8578cbde0d0c2235a8b0657ac3e1eb0d4866ea4d0b59597d933605792a5e8aca4ab48b362d2c1a2022622e539ab45d4e7df9e"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x84c8}}]}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000dc0)) r5 = syz_usbip_server_init(0x3) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000e80)={{r2}, 0x1, &(0x7f0000000e40)=[0xae99], 0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)=0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000f80), 0x800, 0x101002) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x2) r7 = openat(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x400140, 0x88) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001000)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001100)={'gretap0\x00', &(0x7f0000001040)={'syztnl1\x00', r9, 0x8, 0x80, 0x4, 0x80000000, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xac, 0x0, 0x2, [0x9, 0x7, 0xdf8, 0x2]}, @lsrr={0x83, 0x17, 0x73, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0x1c, 0x1, 0x9, [{@multicast2, 0xff}, {@multicast2, 0xe}, {@private=0xa010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x572}]}, @generic={0x86, 0x4, "d7c3"}, @generic={0x44, 0x5, "ba78be"}, @rr={0x7, 0x17, 0xf3, [@remote, @multicast1, @empty, @multicast1, @loopback]}]}}}}}) recvmsg$kcm(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001140)=""/163, 0xa3}], 0x1, &(0x7f0000001240)=""/135, 0x87}, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000001340), 0x1d9000, 0x0) 2m40.439414244s ago: executing program 7 (id=2586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=p=\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',k']) 2m40.365371233s ago: executing program 7 (id=2587): mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0xb3) bpf$MAP_CREATE_TAIL_CALL(0x24, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private1, @mcast1, @loopback, 0x0, 0x0, 0x1, 0x0, 0xa, 0x4440047, r1}) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x64, 0x5d, 0xc7, 0x20, 0x403, 0xf850, 0xa45d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0xc1, 0x6, 0x0, 0xf2, 0x28, 0xb3}}]}}]}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="a4"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000840)={0x44, 0xfffffffffffffffc, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x10}, 0x0, &(0x7f0000000740)={0x20, 0x82, 0x2, "897b"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "44fa"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, "91a2"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "688ff4"}}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@xino_off}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_auto}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') 2m36.689667141s ago: executing program 2 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="181114e4", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ba0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095000000000000008510000002000000"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x8c, &(0x7f0000000380)=""/140, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r0, r0, r0], &(0x7f0000000480)=[{0x4, 0x1, 0xd, 0x5}, {0x5, 0x3, 0x4, 0x6}, {0x4, 0x5, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) r2 = dup3(r1, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x18) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000002300)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902950003010800030904000000010100000a24010f000102010000240606030607000500090007000a0004000a092403"], &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r1, 0x0, 0x1000, 0x55, &(0x7f0000000700)="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", &(0x7f0000000580)=""/85, 0x4, 0x0, 0xf9, 0x74, &(0x7f0000001700)="8a960b8ab0aeff04a89915603d96cc37b0a4f19fbfa2a55ef9bab1ec45dd8a14a5ce8b56f45d78976631e3afb9eb969bac716bf84feb213ff050ee6e1a8728828a625c573f257621f4a7ead9c36b5820f6d038ab2a16e86fca24eee0dffdb2056f610652a9c50323bccb668b341b312ba350263bc03d984f0e94477f3a1d975b587c745b01e18017c22753120e90bd46579caeff6715091019691171ef6e254388bc608c0fa745c4283f651e2e1b36877c75e0a103c3d1449cc43920703d62a804ed96abbb59799b804c3da929c70119780e12e4585ea54262d0b30975d9b878ba6474fa35af2532fcf7a71cee3398e6d08e5467d5cff08543", &(0x7f0000000600)="ef1bdb7e1616d525e0923ec7420e253fb8282674baf0a1bd995fc5b65c68f170884116dcdd0df2ed8bdad46ac78b0026712054073158a3a49aefb3035556c98b9ac4e18d642aec6cfb608415269417579a9deed102018387ef0cdfbb112f81391eaa21ca51d76245f7ad06c8045e6aa68cd7c8c7", 0x6, 0x0, 0xdac1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 2m36.689307205s ago: executing program 7 (id=2604): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x1f, 0x5e, 0x7f, 0x8, 0x4dd, 0x9050, 0x3ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x5e, 0x4, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x132, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000010fc60107b0634127680010203010902200101000000000904f800025253540009050402100000080009058202"], 0x0) shmctl$IPC_RMID(0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 2m34.51774243s ago: executing program 2 (id=2618): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x10001, 0x83, 0x7}}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x591b, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$notify(r3, 0x402, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) socket$nl_route(0x10, 0x3, 0x0) 2m34.144944705s ago: executing program 2 (id=2619): pipe2$9p(&(0x7f0000000080), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x2, 0x5a0, 0x4d0, 0x1e0, 0xffffffff, 0x0, 0xf0, 0x4d0, 0x4d0, 0xffffffff, 0x4d0, 0x4d0, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @port, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key=0xd, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0xe}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x600) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = gettid() iopl(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2d, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = socket(0x2a, 0x80000, 0x0) syz_io_uring_setup(0x72e3, &(0x7f0000000b40)={0x0, 0xd808, 0x20, 0x2, 0x10c, 0x0, r3}, &(0x7f0000000880), &(0x7f0000000bc0)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=@delchain={0x7c, 0x65, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xc}, {0x9, 0xffff}, {0xa, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xea}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0xf}}, @TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xa}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}]}}]}, 0x7c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000008c0)={0xc0}) creat(&(0x7f0000000080)='./bus\x00', 0xa) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) sendmmsg(r7, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @multicast2}, 0x1, 0x4, 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)="35c0e72b25ed5401b571df087ff7c347df2bd2ce8dccf4c7ef8e258980bec81d5bf51e80b3c5fc3faea3b52a3f79c9f0d1898ed01844dd543e37e5e7fbef3b0a4a8ade8d0fc303e77a3a0ffeb5e2b0cc4f8e83565e5a136d8cd4c61d6a0aea941756503230de4bfebfe9f2012d7b196f319fd3a11092fb1676478bac738d5d3c449650bb41c0010d302dd0fbd98883305aa27bbbb780", 0xffffffffffffffa3}, {&(0x7f0000000780)="ce0c896dd6859c04118cb952eb9fbe05b0f163b4ec80a1bde6e497671b44fa0b07d897f51d3db8046187ab26c2c6d4de3bf4e4b0a7cdeb3c96dfeb21158c1da8a09377daa4bce4ce153c635812f2b840b946fb402585db6954882601f7fcee68a05d710fea65fa3bffa9ad12eb44fb93309f99c0b6d2796d4e289eef4d421d953df29a3be7fb69c73cd961cef174b4c17452bfa66f0f87", 0x97}, {&(0x7f0000000840)="f20417548845a07cb137b2ddbd17d74688", 0x11}, {&(0x7f0000000900)="e34d7da26af199a0d6c447a4372472f3af5b59eb032251fde4d81649a6aae87518942db60c6d8d5aa4b3ab6ca9acf67a90055fc39ac4c4997d0a7df0dc01fb261dc0ee1aea3a6211736fa6f8c59a199de40e162cc400aced6b9adc133c57a163dd6d7df7a18dd7", 0x67}, {&(0x7f0000000980)="e35646af5cab08ae58753e39751693eb5d9820917b6a9e7c2afb2c8f6b9c77cda395f6d48c286f167ca730d3da7cd76904516e3cad0e764812d5b0812f974932e93b1151b7c75242fa53e282158954b44bcfb63bd1ffbd00b1d7e2c34a1755c5bbea0b70c37595c0264de3f774cfb8eef79d16c39f97e719ce25fdc0e0b8b796a4f0213db080c41929466d4c9d320750908b360c0790afab0cabcb91431b34ba8a3d9d90f65ca830af8765c24c30d597ab73c9257873a9213a616afbe699dd0faae5", 0xc2}], 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="10100000000000001501000037000000206fa8352934bb8a02148eb46a86994e0820de506454a5d516d9756d5cfe4e3407889d00181e1e15e1a7b1783cfa1d3372966b0ff0b1349b62ac776ca32c12158724fb5b6af1a15aa3b952e54732bffea8b28c91e0e508d76fb9eca7e00e1d5ed6b7d59a599ce67881b8560bd679e4c05abfa28efdf176cc02345e07ce02b7473a98e336d27fcb0ac5d849cc0001031cb74c6710cd379753d0b50bfd8ac55f0b4fcee2bf2b4fbc4088ad45ffa17dc586cdd20749333069c07e60248692d2789b5cd9b68c2d08f6f950087ebbb6f63d563464375089d4f2efd9cf49471c95c59e23c04a6217689609e713d59d52f6506019e90cb3c8e85371d8f9795da5dabe16d5aac53138c4317bc9b06dc2b4f14ccb42cd215dee88c29de1f70fc7af794c31a3a285587a7c4d5b7109213833a495505343c4de5a0c83a41d674009ef061b204f98bcc17e9f8b61cab43b1e67524ff0c4239b00a3d8aa52ce00f211d1cb60178706e2f8f055b9a86fc9ab782da5c2a5b38c2017ab529138233cf6281a12dc8e7eb10551eaa8f925257873977de496a2a4d3b875b23c1d4735c104d8389c79d0bf4c433c9df6a7aecf78e5ded8069cc910a03c1e6d39c605525e5dc62f39c6f77009e45901fa82acbad242a79b1c262de72b8ff15d2cc6f6ab27eb4106cd4c03121e6fa813fe69b31626b241bbeb4db495c1d60e02af4fb0d70d10957d0aaee6040a0a4a6449ad6d9b1e66c6fad7e20ea661e0d139c973dc88757bfe05cf2606557f6bb1544a30f24d685dd213e04ee3dc176cabd1ed266e96d3741c1fcc82a5fb381a387d0a702a5ed39e0c3f9abbb5f27cb92c6ab3c8c01c55b750ad1bbdd689122cbcdff33cfff8a416cb873e275e65bb0e6b96f06dd8c685aa5229a5e1bdc3e6ffb782ba42426dbf9ea29f86b608a094382a4c4613ebc77f1b2dea622cc862a37b6b01431c034f0c30bec5e07d87ee1e23fa11374f439447f99d35e4dd15aed0a92bd238df0b5aeda1e4cdfbd420b61297e14a77c785e018da10aa536361c5ca62627029378ccef4f4eb4309ea034f7a2e3cdfab513a6821243d061bf79d827781025dbfefd85d1c0db21242917bb90c543d7acd092ccdbfa5f99973723ee75cee0eda2fc2c4e5063132f543265a6a8dcff586463a0ac297b07967d87e72a42779841367f60e826b70c6136f2d9b8f07ece320d17c4823d83143e7feb09160b7aef2f09c2f917089176c42f9e7ffa4ab6f1a44a1911ef6086bc645d36fcb01eb1388e7e34cdfe1e8bddef7bff6340187c459c3065f5faaaec98ea85743751b5d56b7c9d8a7de9f039e82803a52f1ecfda31f44ac95eb03421d018926f7048ed0171350cae0bf0d3fc02742f78a90a2cee7547d637103485015bbf7a98953d1bb64828a449dedfd54b057f540f508347e3f149e8e706d4dd2cd2c88bcdaaa4f93b6cc32865921b24dfffd43a2e5073dbf96ee3b23c44136bae33cebd83901849d655538fc79c4fe0f664116bfa05a6a764d4c3ba0256eebd04837ff41463978da36e3f3eff9503175d86b65b58c14347a357c336317ce1b9300edd1c15631a59952502ccd3e17678a9f2b1bc90c57f34188e7bb6379b707ec871d3b68003c7f105dc3657594de8753da7fa693b74ce26e96e5760e51e2b35605dcaa7a65f26c1cbf42643430be3348ba0829647199825a89c06b9198c43357534b9e3d11dc0318ba821381ab8d8f190ea540b1855cbf9c3bad03bda3a644b892e9cd24b54d77a2866a0fbfa6dec3e7f2b542adb129e70ae6b1c89d2f646d19819bba210857abb0ea4158bb91c0797e90920c0543c8c8738ec70381caee69acea34e121b893d7e6eb69261b2f1e2fd79fb037c0f8ef141b7fb0cd00815addd82010947a206524cdd9be75732df362e0bc8b41ea4596b3a716168f4529617155b2de875c520f8cb57c933b233b75eb28451230633d103ef9d7cc1e36f90bd60c84389e8e08f3b3e15063167e275ebe381e7c6162c26bca4f05e30a9f7f577637cd425825065b745cf3a94d6d1cd34d231c184cd715f4fa59ffe013e07c5496648ca106d9f6d151304c795d9a23094d4bc39545853db5877333ff24a59fa195fbe05378af7d8647d38ee2252390509d858f02968aa9c459b6d53cfb4a706e1f508c8c759a71e9b453863dc1af8a707ccf670b9c01d50c12f4554ed02eeeeea6940397801ab80309d199df86de92e340d72d29d42d2c6bb25b61bf3b68cc971f776e44939659c013caab799e0af46aed7fae8d2f1550898255e464e2774de6e07ac62f0c44471b94942a6a73499de867dcae7152f6816c6490ce22a3b8b60065722fce6531eb6964c1ada34f10c897faf81b3d4d9bf73ee8726a012d8b033cec132f06701ebea89c3b450033f8d203f0b1cc4ea332f8e5393ad6a9d8260c653b37674e11eddaa309bb8d4ca92cae51f7e4df358fa86a1331e913da1708ddd6522bf5d568fffd45c2bdc6e5379875b98427f5707a87e730fc5ff5ddb99c32e23250db94de40040eb6c6d2947e5f7ea12c529946959efee28336ad0ffe2c412334af26ba573a3fe6e9160d10d1e4af997b36ae113cc0cc3d60c96ed58d8a9b358a8590c013a152e1b829fde8294a287376e35f61fad6440beafad4912b66a824cf5a982f28e93759e12d06cea63a33dea65af957c2194a8be45c08b83277cb68d6d08999a5341739ff3b76ba8ccad4e61f9449cf7f9cf1e45979dd2d531c104af2d8d03b4ee11518a40d4043c0a2fe302f4ff3eb91b108033f4fe35c17c23efc6461067e2d2b8f4af4c5ef533d144948da2660ac61425117b347b46518c762a85ccef0646e2d367306e4ca633d2e86053410641352c961c0b18c0dcbc84138f510fa5fc3b2d3aced8b70bce88706094fb68074f7ad2b181902b01fd2749140fbf5c3b625e79c78f5b4d567fa895bc7652c81fae9509dbf7d9c718a400ff6894f3b11328e65b57049c4a79d94f91eda39ba1987264abc65ac988d65f9329ab947c3026fd5fb6cc0f85e70389641b6d624f437653431fef64a4e377cd6fd9428da73a9f179727b1d535c7d3c8e96c45a0c4004fa5dc7d29fc99561fbb2225962f45e8ed9dd65d85d05ae05f37b374887fdc9a06600519f6b986e897222bb0d88dfabf67f0030d8cc9c9869ba56a5b4aba5d913d25975ae97f3dac3e8930bf415aeba0af5c5de4cabb5d860eb0375e15f5da0770c3eff666c1fe571e6f8ee416a73186316d4321072fdfcf68d40c49b4528a6dd4803f5aab8e528621a950f946b45861dce86e587ce22d490fdc9ff23e238dfd5f945cd52afa9dec8af7f0366311990225763e84de2823a6256c2d984af0d773182ad154ce56ca9ba8556302b000c8995ae66674ecb1c726b22e459b03be69a5d480574fa4f432f0c8036c382d90bd31af2bd6e71e4df615c474dbbac2ea41121bb2d393eb97e1dcb52ca1832fae591d0c40dff1ab458f3924925fc4bccd8d7bdefd3b3aae447ff83971fe2df6d575761d08fea88f94dc67457185ceeec2f39a44d411a7a63b1f9a021ecce701c827563ad788d8de8962f517d745ee0da354304d97462cf31052fb68e3f20852b513571b35b20157f102c25b5a69bed729ac20c4fa8853a14b14ddf52a5020297aa8aac5b762e84f5acab18b557aa58dc456ce7ca30c8369e816a89f5159062cb3f06d039677304c5b68ea92bedad8a6b662af436a92d4a0e940e482d1e041179c007d6f43480c23a71dd65a20c5c3a7ab78dfe8d5b917f68cecd923e977599ac30a9508230a1ecef0319960709918ae8068dce04425a2eee8151ec9c564444fc69b543b020e2aa887e25ba5f4be8f36bb5ff18f60fca65c64ce6598b7cbfb69390da4792eb3f74a243b8371ad9d5b903618ebd95018de0d34884424b54ad84c85fd92a1ec0bd38cec02e362fb7b0297c5c8670c0754a2d577df82a04a0cec0d438c31ce13e4dc0d5e00b2332c588a782f4f29b7104fa8baeed999e4870b423cd1d90410d7f8152d7ac1a0736f759ada771be5c06d124c578d07093abc14bbf07974f61ada97d74ec77e2558d6af6f0c06bb7130e39cde023ab2875a11a2e18fd84ca41c868ba9f480a8a9c88f1b9493a1f9d50d9e9df38a863d3f7fab1a1c78001d55c8473e25fa23d5eca5b3dba58d18b06a39650825096cdccc9160a70c3a47828e431ec8f3db029e3a7ae76dbf352739a37f0c66cc8163138ab118f77e800f54bae7f5d5e968238b8083de52dfa9c36ce6be506e58fb8d150396edd5baec4d77b807b047272c035a4cb900601db29d981945858ff76b6eb8b800047e9ab0e0d2c4b7ec08fff854a10424f01ec9a99acf6b2f095e83107d463a24214a5f5ffda56c22a5b8df4d97462f1b7a45fa05306c2de8328f9e503d14d3bf4046876301dd46bd5945e0c5ca722ee080aa126f44a9b28d61079ae791c2d7095aeef2142f5dd6a6e2e4f4cf150d1dd1c3c08a0b2c09119e94ea3ce5095eadc428bf451f4c4ccf9c6086ed5e5537b884fa40a7e0dece99f8c4caa81e00cc754dfeca08698d85b3f0b0a5548072577f7b6c394dc29cf6d5e8d5e379ed1bf7111c5b38854b45a498e6c7188a739f397dbb86ec9f1a08df3d80910ddc6644fcaf6a0b37ed92b467e7053edf3d493d1685742ff6844b451a680c2d53361f311214122d44bfd44de1d31b43b0287f4dca6eacce83a55600e26235a4925554c6ca49cbe0eb77f2a74f3889d30098b75c00c7e7b17cda8568d98ecc4b83c603c5db7ad46642927002d31e19e4060c7a531077cf3a52de4d3b68d95e120c1b68a55d2268ed6cb765fb8667d6723d04e8e853f5f361d55721634914e6e69bafd3a8bef194ed060d5be43019f996aa07a7b6a9d20d49c399bc2b221d3caebcde7a556e7264a9a6411155c4e96480ac097f8c26254bfd6dc60f24feb6a78020000002f9a1812e4dc9261f41036c748fe7fa95b5cfa037ffcc27451ab23784ca9300a0dea918d59354af375e9774cec6f7f04c31926345a0c506531ea14c0d63e8aa25f9a7e62b3c30dbddd35d86d5213e38ad7b9d0b7fdc89d70df160ef8210318b92d87b77a43d13a4aabbca580b8dfa88e0474e181eb0954ad17973f8f83bfc15dc5f95d457a5cd7c69280d20d13f0372afd95e02947b4473f520181c18a399db717b331b208c4dc503bf200020c55701f47009a9721277b716422556a57135055d822f2278274db13544d6cf6bcaafb5d93719c7ca6bead71b4dc812285c7924fa44cc9a692243d1269b9971df76729f82a8ec844f031ecc1595cb18524a7c1b83ab32633f702aff81e56cfba5a98c725dcc9c50cb6551b858f52f30dfa846a164e1593389e85f7d0f187414a722be7218f8485963a3697d74336dc1576c3f66d508bcb17f912d5e1a428c071f51f161f45af19575042f78fecdd2a3bc336a4f1e4a2fce87e833f527cf8ba6e837f80c93c0c50083f26443472c83d84c5b65e7f43f759fb1495ffc5349a2b87eb2c83585293c61c3c7ac41c7ae32653d0e923981e0fb6214b1c004484311fb276c53b25abf35a1c7ef0ff31b14a19235c557bc66bb3a4365530dffb9bd815de08871ddbca982f70a39942846ae2e559bb74e75c99f1284ac30ae7d571e10e62c0c5285af5d5534599375222e520472cff1729df837f60eed3c7fc622011c32fec47771047bff386691558210f53e71d29c353c56067b8df5a87b5f144d25492a66525e592b9b3b40d3abe9393a3a914155df9cec6e56cace0d59ba928000000000000000201000006000000ee20d7cfef35d3f4142aeace098f13754a326900000000005000000000000000840000006d010000fff6ecfd8002c6cea3dee6cf28b1d34af7e295995c8e28e7b1b4d1b225dd8306107f306fa1502a66844048c26a0efab12d447fef3dd2d95819fec023fd0723f540000000000000008400000000000000af98c854ded97b1296c2c23a7b5c06bfa48c46df398f92aacd7b607e8ffd85000000000000000000000000000000000010010000000000000c010000050000000a4a3ad6f2a2989b5e7c3f0e26885c0a76878e15e52253826f3771e01d1682164e386085757c1a433d9d50333ae675fa4429ad6f7b4aa4c82421e736fce45e9d08f869cec5f4d95a39b4c9315b6045d94b4d274d2ac1a07c3f56235d8f2a5cddcc96f4069e25a91a2039bd418c46e52386c80e8ba2ae6ec3b2f3e658d882008785bbaedbe4eee8e56d2283382e799d7be3ce718a07191509cef0b83559e0311c2d719fc504fc2878c72076694f1e0a9105504578ebd87a5f5fe2b0be14087e87767f2aaf0394dd356414e2aa1fde470a199b629570d1cbac2b6105602ee1ba38dbf73402b9e1cc750294781bae6b3d1cb8076eced43b5c81f1e49872ffacce00d0000000000000000301000000000000f4a89c668dff4fce6cf5a5195ed78428326843074d09a838d82e097fa9fd36a22585546cb2f549d3399a5484a1601967e962ab8a0f3cc8939055d50519b081bad85f47a76985dd694bdc27b59e8294aa9e85a1f97c2b6d33489456c0b7a51fd9a3be7dfd23d92fb605c9ce12f19230807c3412affb7ba8d76173c0d7321777544d10b8dd883d76ff802f77954d0a53b43debe287d83a776114331c2f72039db79da105c006b3d65e3f4a775ba8fc558689576ff6d9813e233a8c16c248000000200000000000000000000000613400009d6497e96a87ae22a915ca000104000000000000000000000b010000000100004f5810775494691f1cb46db27e9bdf187e2c2d9badbd0831d55314841fecffdf4aa0442bbe62647033d22a50e3e074adb3bd2f75000000000cf424291752ab1888fc53feae50326f55e580a744c47509d1cf02d385109d30bbd22562c48cd5d3986ec927fa46c8fee38c9ca8dcfd64f3927be1ba9712d03d927ca18fc6ae13fca6694a4e57878c8d138d2f8929a4c5332e2319dce67a9e1149679d36bfa1fe03801dadcd74e3019cbef3531ecba13d8c1474c7af5fb4f7c21fcd91043a8e4ad432750380cf7c122c8d90e368b2b5c04447dd77aa63af29553c397e8b28c4b55bf7c6c20771b4f581b252a349320a9d4acaf96141328cd766913c854b27f38a962f744f8006857169f5ccc666eeba49bdb8b96c28b131397d0dd60e98dad8dac2eaf221ec2aa75363ad720bb197ade74058aa58e3958b3e8ea2cab8c4c522bdbb53ada6cb77e524ab00"/5156], 0x1310}}], 0x1, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) 2m33.605282926s ago: executing program 7 (id=2628): ioperm(0x0, 0x9, 0x5) setreuid(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904008000ff"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000095000000000000009500001000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x118, 0x2}, 0x0, 0x0, 0x3, 0x9c84, 0x1, 0x0, 0x7, 0x2, 0x1b, 0x5d}) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000100000000000000000008000200", @ANYRES32=r7, @ANYBLOB="10000200000000002000000000000000"], 0x87, 0x0) setgroups(0x1a, &(0x7f00000000c0)=[r7, r6]) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) exit(0x7) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, 0xffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a118290ee902978ad850a408760e71d90ae77623fcb"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x5}, 0x0}) 2m33.061288765s ago: executing program 5 (id=2631): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x10001, 0x83, 0x7}}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000080ce0000000000950000000000000048a3c933927a9bca3d2d25f702326693df2155c2a408ce5f8f02"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd66) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x300, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r6, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x17) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$notify(r5, 0x402, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) socket$nl_route(0x10, 0x3, 0x0) 2m33.058046634s ago: executing program 2 (id=2632): syz_usb_connect(0x3, 0x60, &(0x7f0000000000)={{0x12, 0x1, 0xc9, 0x37, 0xc, 0x90, 0x20, 0x2013, 0x258, 0x804e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0xfc, 0x7, 0x1, 0xbb, 0x48, 0x9, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f0b0a911"}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xc49, 0xf7}, {0x6, 0x24, 0x1a, 0x401}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0x9}]}, @hid_hid={0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x838}}], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x3, 0x8, 0x4}}]}}]}}]}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r1, 0x1) 2m32.739658434s ago: executing program 0 (id=2633): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x10001, 0x83, 0x7}}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x1, 0x1, 0x1}) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000006c0)={0x5, 0x300, 0x240, &(0x7f00000002c0)=[0x4, 0x401, 0xe, 0x8, 0x8, 0x401, 0x7f, 0x3, 0x9, 0x7, 0x1000, 0x8, 0x0, 0x0, 0x2c65, 0x81, 0x4, 0x75, 0x1, 0xffffffffffffffff, 0x1, 0xb82, 0x3, 0x99, 0x6, 0x8, 0x9, 0x0, 0x0, 0x0, 0x100000000, 0x4ca, 0x3, 0x3, 0x0, 0x3, 0x1, 0x80000000, 0x80000000, 0xb, 0x8001, 0x6, 0xee, 0x9, 0x5, 0x6, 0x60, 0xd63, 0x3f, 0xffffffff, 0x10001, 0x7, 0x9, 0xfffffffffffffffd, 0x81, 0x4, 0x5, 0x1000, 0x7ff, 0x2, 0x5, 0x3ff, 0x5, 0x3, 0x2f, 0x8, 0x9, 0x0, 0x1ff, 0x7, 0x1, 0x2, 0x0, 0xd, 0x7, 0x1, 0x268d, 0x1, 0x100000000, 0x3, 0x6, 0x4, 0x9, 0x100000001, 0x6, 0xd, 0x1, 0x9, 0x7b, 0x4, 0x3b7, 0x1, 0xf, 0x7, 0xfffffffffffffffb, 0x8, 0x3, 0x87, 0x1, 0x2, 0x4, 0xffffffffffff8001, 0x4, 0x7, 0x87b, 0xffffffffffffff00, 0x8, 0xfffffffffffffff7, 0x2, 0x9, 0x8, 0x4, 0x288, 0x200000000, 0x8000, 0x8000000000000001, 0x6, 0x7, 0x9, 0x3, 0x0, 0x75, 0xf1, 0x700000000000, 0x9, 0x80000000, 0x1, 0x1000]}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$notify(r5, 0x402, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) 2m32.737998698s ago: executing program 5 (id=2634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x1010, r0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 2m32.640938059s ago: executing program 5 (id=2636): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x4}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000940)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x3, {0x10001, 0x86, 0x7}}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd66) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @remote, 0x5}}, 0x24) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x20000050) recvfrom$rxrpc(r6, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x17) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$notify(r5, 0x402, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2m30.911633633s ago: executing program 0 (id=2645): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x10001, 0x83, 0x7}}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000080ce0000000000950000000000000048a3c933927a9bca3d2d25f702326693df2155c2a408ce5f8f02"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd66) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x584, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r6, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x17) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$notify(r5, 0x402, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) socket$nl_route(0x10, 0x3, 0x0) 2m30.857841034s ago: executing program 5 (id=2646): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d72658161746976653a31"]) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x66ac00, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x100) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) (async) kexec_load(0x4, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10, 0xfffffffffffffffc}], 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r3], 0x38}}, 0x0) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) tkill(r4, 0x19) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000000900020073797a300000000005000100070000003e5ccbd033888fd8517ab620bcd8356f3daf5884e0a32b861711c35111db9cfd33112dfc2547886eac35279a12e88aceb07b1fab4e6e20649a8f6987b7a8fda1b8e3884d52fda23d51fb2c4414568b9753d0b348902e28fcebedf9c2161e1104d148af5031c87798ff88c6139e1046554b4060d0840a7966f357304c393daa3998c9d91c99467b78da"], 0x28}}, 0x0) renameat2(r0, &(0x7f00000000c0)='.\x00', r1, &(0x7f0000000140)='./cgroup\x00', 0x0) 2m30.805125909s ago: executing program 2 (id=2647): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x33) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r3) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, @printk={@i}, @exit, @call={0x85, 0x0, 0x0, 0x56}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xc1, &(0x7f00000002c0)=""/193, 0x0, 0x6, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xbb, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0xd0, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x1, 0x3, 0xb, 0x8}, {0x5, 0x3, 0x8, 0x2}, {0x2, 0x3, 0x7, 0xb}, {0x0, 0x4, 0x10, 0x3}, {0x0, 0x800, 0x7, 0x1}], 0x10, 0x432, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m30.523538089s ago: executing program 5 (id=2649): bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = getpid() syz_pidfd_open(r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) sendmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)='579xG', 0x5}, {&(0x7f0000000340)="2b3f44f7bac1c6500783bf6db3291be9f4f6d429413233eda1e7ef3e7c01e377d398905ca04df284cd7b7afde2e270f2522ab2c665fbe943da851523b5b9228e51a74e99b3da1ea4e396f20c12ef299d4924385a728e6e90f37a48b1c7c47aba56fdacbf058c1ca790e5342ebfa09a828048cea7ec330eca042d122440c5a64c428e9b16a7ab5182d659c5831c3fee635ef683a976a6f68cc62d9d0b4d8b9feb35b482e25b5d36f4963fe3591d1e09c67fe09ef150008776381c922c46cacfbef5192da20c0d9d4b9751adf480d72b954ff06eef56", 0xd5}, {&(0x7f0000000440)="f0b78be0b5d75bfe8663fd457af2f04bdae8e1e6b443fd400c7467a99794ba99109fccc35e737415c02b7fe241d2a5daae2b5b14ff41874a187c50a02381ababb104f03f93b983", 0x47}, {&(0x7f0000000800)="0871781291aef25b8bf17f208b84b6df8da7d280087a377067c3e4de21b558a6512ac28e98a088085308e877ca2b02632195839dc2591cbf8a48cfc3b5c985603afbc28246ef78e281c019414ec479bf739ddc16534fd64584b0d48f9600ede38f808a4afdb3393e107353cf3444dcc3e348e5415fa0c3077e554bfa76c97634ba382bf78046f9dd7dd39fe120183909e78072b3fc7fbc836fcbca04b60ed8db45e93eaf"}, {&(0x7f00000008c0)="8deaeda3c3f2d09f6983f0b0510bbce3d6b6d502644d431900c4abc26499b991e2aedb8032cd95e6d1150fd4de212e3aaa1a5efeb3b09bb2f569f7bae90f03747c5318a2b0099f11a02a840dc944c00d481dd245c4ca0a95b2dd2fe679376cf607b3547607c2e942a69a5e23daf7d12f6da5b2609a001695724a51a93657bfefb22b6e456538f3210155a0c53d5bf934b7b8fba00b588b25b437e6945e14b8f379063b9ff15a94"}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0xe}}], 0x30, 0x4}}], 0x1, 0x4040080) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$sock(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="be97f7b9a3d1b79efe444f7fb0f0e3", 0xf}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x20000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x204, 0x1, 0x101, r8}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) capget(0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r9, r10, 0x0) 2m30.429251433s ago: executing program 7 (id=2650): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40880, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0x6, 0x8, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x4, 0x0, 0x0, 0x2, 0xff, 0x8, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb5, 0x0, 0x3, 0xfe, 0x80, 0x1, 0x7}], 0x5}) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x9, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 2m30.073544704s ago: executing program 0 (id=2651): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x3, {"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", 0x1000}}, 0x1006) accept(r1, 0x0, &(0x7f00000000c0)) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000000)={"af950e598406785d306eae5da0b5868904d854ee41c47c8c75a0f484ad7b", 0x64ef, 0x2, 0x401, 0x9, 0xfff, 0x0, 0xfa, 0x1, [0xe2, 0x3927, 0x907000, 0x5, 0x9f4c, 0x752, 0x6, 0xf7, 0x1, 0x1, 0x3, 0x8, 0x6998, 0x80000000, 0x5, 0x5, 0x400, 0x569, 0x80]}) 2m30.042244353s ago: executing program 2 (id=2652): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x60000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) socket$inet(0x2b, 0x801, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000003200)='net/llc/socket\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3000000}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002140)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x5, 0x8, 0x402, 0x5e, @private2, @loopback={0x0, 0xffff8881114a4aa8}, 0x700, 0x20, 0x1, 0x4}}) 2m29.930004926s ago: executing program 0 (id=2653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000f8ff"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) (async, rerun: 64) fsopen(&(0x7f0000000000)='nilfs2\x00', 0x1) (rerun: 64) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r12, r12}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r12, r12}, 0x4) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r14, r14}, &(0x7f0000000600), &(0x7f0000000640)=r13}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="297bbe55ab7748c60000000000200400230000001601d4963d1f9ae06171e0369d451019a3c498c6eb8f66e78759bda2f9e3f86dc5ed6078c269c39c7f727f579448435e973a7abd26d495c7ea1f51c19078cd2ee6823a72e1d42e2597451e40c37d11ada29322a0cd47322b9b40bcbb0a2ebe2da6d6eda17f5596e3ddf7abe7b6323ea8d78f8f453f1535e94ed2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (rerun: 64) 2m29.829340028s ago: executing program 0 (id=2654): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x10001, 0x83, 0x7}}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x1, 0x1b590000}}], 0x18, 0x4c00}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$notify(r3, 0x402, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf) socket$nl_route(0x10, 0x3, 0x0) 2m29.529579843s ago: executing program 0 (id=2656): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102389, 0xfffffffffffffce0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='()\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000dcdf25250000000a0001007770616e3000000005002a0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c001943", @ANYRES16=r3, @ANYBLOB="00022cbd7000fcdbdf25130000000500030005000000050003000900000006000800a3aa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x9, 0x83, 0x7, 0x400}}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0xca9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x8, 0x100008a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102393, 0xffffffb0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m29.433152155s ago: executing program 5 (id=2657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000ecbf9d3a82142223eebf430001000000000000000000000000000b000800767863616e310000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x55) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x80045439, 0x800000400002) execve(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), &(0x7f0000001c40)={[&(0x7f0000001b40)='setgroups\x00', &(0x7f0000001b80)='\x00', &(0x7f0000001bc0)='vcan0\x00', &(0x7f0000001c00)='-](#/\x00']}) r4 = socket(0x1d, 0xa, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000001c80), 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="f379", 0x2}], 0x1}, 0x48814) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg$inet(r5, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)="04ddddef1e4e100eb3fc14c7f093b4a4a4a31a69037e59c12c63665ac29f5509726e091584551ac6fc1ca905be91b1723fc4e880d757bd36e0bc9715486d181c7ed7c174cad3955fd8360e33fa5bf483d4eacb671d3620ea297d0c5aecf7aa5d5a44b18835f10f02293b1830a21aed", 0x6f}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="ce5372eb6cba08a35f1b6cbb711901a76d98616591b47ec16fb96d149352d95ace76368e1b56eac4a340623a1e4d7cb2dbea4b2aca38f39a56bdae4ee6783c1e8467e28b7e6f447b98d76795904b39f8a6dbfe51c8514404e7b5b5cddf2fbe9edb887c15a97b6e75bfcc85b657fa2ec69e9d5f258f1a25d93ee8fa01b21fe9077d5139f391f7", 0x86}, {&(0x7f00000012c0)="2fd690cdf254584c1f1dacfd975f2ddf1eae9e96b6992d1a24d9fdd0e84ae34a5c5e554dea202194f021e75c3bbc62c3d3ae5f5976bf7bbff0f538eec38c267bd3c6eace0718917e85eeb124c4a73d6b58236875f5147bb9832954caece410ae37def4c92490a50e7552f5fd94e2d07b074605700afc33a482c11d23968584deb4d0ae5384ffb56884a8f205e505ffa66f26fde7170afb5fe2f74e93dfe938f08a3b36edb14a906cbc9b8f6dd3b1b3ecd69d10583dad868ab3a1fa5c6b222fae425c50b95075c44dc042810543e74c20c0a9acf66aa70b058347e05243406e2c247f09dde2563ea494cfed", 0xeb}, {&(0x7f0000000100)="ada6226c29a7cc32f9fd487d2a20e369b10a7af1c5114d7c3cffa26ae523976c07b57bcbf549dc7aa2a4c5b067ef086ac456115733df638e4423d1ba1775c0d744eac41895449e347014b5db46dc87777f56656dbb71dfef8624322a9c1cae6ee8910945176b3cf6f8dcb1", 0x6b}, {&(0x7f00000013c0)="4c3351134eb5d16b1a03ff820a897775f3041956d3a020a318aa7ae1b23f5410a3995a742b490ed7b1134dca5c09c6ae4284f02fd24c15f8e30aabc3e18f4a6c7dcad68f2812880042ed7cc8e8f55fddef789de3e4311cc8035bf421227ccbe5", 0x60}, {&(0x7f0000001440)="a19895951b166e740df01f7820dfca75159039e5b986d74417bfabae3c0de647678c", 0x22}, {&(0x7f0000001580)="f81214a466e9d994d104af279a38125bb63c25b4db23eb437c550eee095d8a76237f0de449734862137dc06fb8c9d83e4d6b01a3e12de855671205df1c115c4182d4207da31678b9340d52790bdf36629d016acc9fe76393e33596116f7a6f907364d20d74db6b610261b668516720da5be76dd75e26bc93e9445917679a1209bf954318fa5ebd97bf79136fc1ed4c8804481d235b075960c0d74f76b428ed0ac3393f6a029a9c90cd065d2d238ba384972dd23dbf95f8893b6900c3f6bc1a1d11748831b292", 0xc6}, {&(0x7f0000001480)="bb352eb390887e14bda700f23dbf4bc1ff27d4c2", 0x14}, {&(0x7f00000014c0)="59a969697318795fc8bdc22ae79e06a0174a12f6ce0d420fa664a829e63f8c69b93b3fc9bfb1b194420d8cb68e896332d0f471f69bb57cb87d09f43a63d026c3a5", 0x41}], 0xa, &(0x7f0000001740)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xbd, 0x0, 0x1, [0x4, 0x3, 0xb057]}, @lsrr={0x83, 0x13, 0x6, [@multicast1, @rand_addr=0x64010100, @local, @rand_addr=0x64010100]}, @noop, @end]}}}], 0x38}}, {{&(0x7f0000001780)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001940)=[{&(0x7f00000017c0)="5917796d5797e6104144495300f1f9d5e35de4ee84613908c8624ec50283cf24c6f5ccaf16496beedd737d1a3805c213", 0x30}, {&(0x7f0000001800)="8c3e344ef446497623084c5cc39bdffc82741d5205685cb2a6f823fa0a080e28571309513af0b2f2004366ce84e484fba3811440b1896ab2b350db56fa74e27d13ebd48b1ca9c8291df92231ed74f575b8b365146f0094bc859396947a75fc386f7464ff21580a1e2e5f189db4", 0x6d}, {&(0x7f0000001880)="a6204cbc5aecfa936b301aedd96c80992a1e9969cc5e1b507d0517d0d97b2135cb3798b8fadffe64af7efa58bd3cb0c20800f82a786c95a04111841cbf41a48f00d9fc32418d9e183ac0a9cbd5ae0b707355df90812287cff5490e80e516081046bacf50ab8ed4000ecc8b2223f93155c6d8583bc83d2a99b06605d016e7409e67c3a4dfdd1f401b82", 0x89}], 0x3, &(0x7f0000001980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x36}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xab}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x78}}], 0x2, 0x1) sendmmsg$sock(r4, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="72b1ceafb91f37", 0x7}], 0x1}}], 0x1, 0x0) 1m51.831658254s ago: executing program 38 (id=2655): ioperm(0x0, 0x444, 0xb1f) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {r2, r3+60000000}}, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 1m51.777028835s ago: executing program 39 (id=2652): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x60000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) socket$inet(0x2b, 0x801, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000003200)='net/llc/socket\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3000000}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002140)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x5, 0x8, 0x402, 0x5e, @private2, @loopback={0x0, 0xffff8881114a4aa8}, 0x700, 0x20, 0x1, 0x4}}) 1m51.716484721s ago: executing program 40 (id=2650): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40880, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0x6, 0x8, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x4, 0x0, 0x0, 0x2, 0xff, 0x8, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb5, 0x0, 0x3, 0xfe, 0x80, 0x1, 0x7}], 0x5}) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x9, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 1m51.642145834s ago: executing program 41 (id=2656): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102389, 0xfffffffffffffce0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='()\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000dcdf25250000000a0001007770616e3000000005002a0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c001943", @ANYRES16=r3, @ANYBLOB="00022cbd7000fcdbdf25130000000500030005000000050003000900000006000800a3aa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x3, {0x9, 0x83, 0x7, 0x400}}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0xca9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x8, 0x100008a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102393, 0xffffffb0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1m51.57082366s ago: executing program 42 (id=2657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000ecbf9d3a82142223eebf430001000000000000000000000000000b000800767863616e310000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x55) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x80045439, 0x800000400002) execve(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), &(0x7f0000001c40)={[&(0x7f0000001b40)='setgroups\x00', &(0x7f0000001b80)='\x00', &(0x7f0000001bc0)='vcan0\x00', &(0x7f0000001c00)='-](#/\x00']}) r4 = socket(0x1d, 0xa, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000001c80), 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="f379", 0x2}], 0x1}, 0x48814) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg$inet(r5, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)="04ddddef1e4e100eb3fc14c7f093b4a4a4a31a69037e59c12c63665ac29f5509726e091584551ac6fc1ca905be91b1723fc4e880d757bd36e0bc9715486d181c7ed7c174cad3955fd8360e33fa5bf483d4eacb671d3620ea297d0c5aecf7aa5d5a44b18835f10f02293b1830a21aed", 0x6f}, {&(0x7f0000000200)="7e424833ce85cded4520786941bd19b6c2465ddabc2ce2ce694e602bb0521e729de123349134d40d50d140e04377a990d0c44178d3e8d57ee18c2a4fcb3ae24d8f7a1822a2d52021b9e63e252cbc62e38db38789a6f85a6c906fe29efc59af931756cee753ba11202c48f269cf544585bf0b91715f037849e3a426e8c83aea56b511561daed6da140d48fb0bbee11b5b1d7099b07eb22d04effb7e1572f04d3e452935bd6a9eae3546f58bd6f59b2c9f62f3441560a68158c57c16e3b4e73acf29c7477be0e105c4d057147e1f02d52c5824f5f13cf828e9adccdeaacc52a28a50e6dd201da390c25b4a389e4ab241084c37ed91b137d0bb7a81a3d54c6c9dd0cd0f5960a2a2a82e1130b14c39788f43e7c3a7fef20de7496839860b8c1a63e1f62029c7defa17512897f51ae329dfe1a6a543216e1174a881945aac102bfefaf6ac7a04216b01120f0fc0af41e1f6b72abae83ec294786768e942916789592e429756325baa09047eed19982e85c38b8bc3ac53f1cd87216b891400d2216b8bc718ca9a014dbb3af825f6de85512df1d8e9fab8097523e2ea1b49e60a71a386f07f3f0f4483403c14ee1163f249132145c70441181ff3ba840628f3a016283335aa0e9e4c848261acaf85da472d90ebb073552a385d07a59a3b28eb59c66f5cf2fae33a34baf509f2cdf26e19d12f7f7a6f34ed2ed09fa48a4bddec42ef565b714fb64752dd9a37163d21f9dfbfdaa6e5526473269fbe5134cfc262bf783c78c3be1b6435d2c97e5eb1a79e280af22555c0f3be26b631258523f3e99eb814aa49c3dc630c978e81026d8b040a6b70af832b9e8a064aa71943b229ae0c3b8274f972edb6c39081bd87e152844f813f1b75a071135f3e797352de18caea4df7616daff83d88c5dbd7f2ac6a58787cb13c4f09909e83d6cc9cc62375c218689ebc6cf00b9c8e2996dcc9294176a26d5530397709e6079eefd1acf68c0ebca2dc2a7714af58fb293f1f02776ff748e69ce73fc61c6ea1c4cd6606d3974d15318345fd07900400127115ee9547e7cd75218ccc8cab62ed62bee40470e2645e671074a9af2c9e8cdd06e59a1522d3876f8fb84fb56416eed4355fb32c20d5e01a8e046d2cce44552c638ea9484de26594a4949db8b0575c5dbc774a3c5b74f0ca95420b33e01162b7798c70bdc23e9cdfc060e137558d9adc530902a542d871a73b3ebfdd8b402caf78b84af4fe62269c7e6a37a170dfc3aad9eaf70decdf9fb362363c9e67500e7790a20b47f8fcf3c92e9d07b0d0674efc6d5c6c4c597a847677a7e9ca0db10a84e9dcac87d3b6a30e20c876542ece310690ffc50cbba900fb9b98c790aa659011a36ebec58fbb93802d67ed2467a025824aaba917774219b37163000a611ebb5cffc68cfcb11d9e42235c2ef7c09a7a24f55c31387c525970fb120c0c9bf0e52e9ed3d316d3d5ad7189563caef045bd80978bebc209c2e9b0a3c4635e53b19a7035e20e3807670270053f77c35706a25dd1fecad233a6a8d5f1978f80f3e4125266ae443daa7546204a0fb23f210fe1015b03d84daa042ef33b32af977ea86a34136946249e21984c4d20912350b2dfeb01ad870d57bedb631442285205a6b28d28389c9fab15e991d8b8f72f5d8e073f9c15c5fe3196b407747861e313dcfedd7d6fcaf75163e5f526fad3875514fcb19d2c8ed535e0f225821a3b640bf25eb3c417e118900a2a4017113839a40aa30984f54cd79079088be19a17e661f066005a3d58136fefbecbf0c06d90a8e4f588f9c6e901bec9863dff904d3a944ec31001bf8572ae1ebfafa1348a15f2a38ed5ff4ac9602490778a9c006aeb06eb6efd9f9a025bba52a88598e28b80ccf57668d73bb5a6861c9986b6024708c757191472c09311b9011bca61be233ae2e046d1376b1e27a109dd5695f3bfdedeadede8e6f519fa213274bdac8be713ae6c7ca094c69567f97f3c2750ba4d5f68a6de4379abf5d5efbd537ff8b2fad8aa62036e047374f7139cdf7fd4e3ebd740bf4580cc0dd3873cce76756755afb770aeb952e680150cd0c20b2033e5d85ec881c37569e8218d385c7d708fbabbac44cf9c389dbc25cdf830be8c7653af9f89b28134ab8f3d44d483433728e84be74db0edd45cc68ab28df4663572d98b7a42b268de65a54dbcb861d8a60675e47c08c5545310c7cb401bae195b4768c5357a83b43243be10581bb710a5f28a25d18c2c6eb9a949b1799ed4051ae998eced9e8852762e633866c3255ebde3e5fa07a2427c0e70a3f80f63137117dd6dcabf2bc80ee5a40a81f2fc4f7b66acd1a2af249c2d8573d2b822bd0ae217820fe93bc549ddb182a2ff9ccffcf04166c77ea4650b03b041447d297c989244168732eebdbdb46a1c49b01f6c5abc298e86230ce722c0a184a45a7d8c6ac1b1a717ed2e5fdbe3ccbb2da4b42e690e5841c4092911a76dc422f1f5784c13c091b3b80dc052f65dc570395bd1e3e1c196456d820d2e91f21e49718e6edb888bb7b08acb5fc44c8d6b4426bedb1573e98c304660e08f3e63060bf47b839daa875bc042daf06e6778196bf1e05c4b46ee306c7fa2693f1e8d39278f95a0d22442f13f097086c2f32cc8f6025c21695c9ff6db562994d294114c3c1765f6304a635e4d301f8e5565527dcdf615a62e23c2124b6783bd62b99d0e2f6e6aa58274da176716bda89b929acd1f752e7374668f7bf90e90b5313cb1b5ec374886b86983a644aecf46fc7e1f7570d556372a9763f3033ac215ce038eebd53b71522949b0511d4d6502bad40aa7969d9f7baf00286e3c8f2b9b9adb7b779350959e336a905f138f2471cfefebe76f17c7e536a093b844ad91b82255656238e5316f6dc261957a3045c3cc7311be2c1cf9ca3d51fef30d60423c0d7d9e74ec59338f9e21941d7108a5286252b4cdee2d81b3e01a1b17157bee1ebf0b9f16d591bfd88c09d265831c1f2c1cc15239c865d46924165c6bd98af1bd37afc7898f81b4ea15cf9212cf66d16b473a7276f18ad41d5808f069d432ac2853aab9634499363155477e097b119cfd4017ece0cc40c6865c9219cca18ce84ad4094c4316d1efcc487a807913e6fb2e3d83b2e018259d0cab1726668b3eb57288788d8f1969e5b94a9baf4061cdf9eddddde833f5562d6da1a4b05d23bffd899ee7597d794fc05d869218aa7e25cbf0e5788dfd1992ed649a23acf6269133897cd3a02c2bed40437dc8e5a93f769b4e75d7c082abe9059ec92aecef1c9e3d2ce68d14966386998635fe03a60afa8ea117f04a59a2900e62f8ad7ad6e27a31b6d0cf17d6bfe4a6cec7a0accecf233c41151cd110503062a2ba4da017d206294dbd0ee09baa57d3aff2b0ce0cf6a5e9b50ac51a0bb04e5cca5dff5cc258304760aaab417e6a6d0e71c8e063b0acae221b8fccc3255524f582774478ea881e7adc1bce50137061e199ab9f8358d51113aa3e01d2434572f35828e7705bcf3d7acdc34ecfeff77e1ccd560e757496abcc0bd7dbf65b852f1013dc0daefba8e58b5ca77beb18a160fcafe27bbb1774e168991c38b579f3a8c335c3160d11b80edbfc2c962d7a346219a5cd1dcaf0a5f6d830089c49110181246adbe1bce8e4028c6a5203c295bd1c3b2ee87a7b093d81a0f701f134ab33030249875e6d3f353596297d9267ddaa372f41cd880c8d6506ec01a6bbb687ee86c9dc6e5a58f07c60db5f977a7e0af581a0d0651be31b4817caf5c0cfcd0cb8a4221100f1a3dc6d38e1f733a83a0665e4ddfbebf21ccecbfe59a9b35f7830abec21ee8be3f7792c9acce2262fe399b614fd828b4aa9fc07a74a979e6d07197844cb05b0070a5de3c6cf4a5a058a62c4f95d0928bbf940c2a1a9c20836c5c17acc9b74d6477849a642d420b6913e3af5bc61655b5b162a0c44e2cc73935cb85868e65841fb485da35c2c3da3687ccb4be2740bb0448f21f7b43d1980df76469fd26fc4bdf483562e5a6860a8962b627ae63b6f068a221eb6ddf06a483a37b8ecea8adcd398d79fc93b0a3fdf5b6faefbf46089db9f08eb6501267ba10b908170979cca65797f321f998f69d446e8e1742fc947a45303986717af503657fc2af3fb2069fa510bffba8544b082d4653093522a57100397aed6fbd9f9e87d01dc977346d6a865c8fe49fdb42979ca35381452bbe88f37b2c79d68dce1fef83f33c919b7b7cf2c627b0230f408a57f09b1704cf4beb57e140002cd7cd91075113bb120c4bb08847e52700902536d49b42f2e883e63553af725f7c95e63ec7ab6935fea3ed8aad3469f488721fe9ac4a7cc19390191f7c5541d6fb7076a3e76abc23e3e3b9cf321a05f5e7281006750cf6ec4bba0c6d332681a01fa66403b9ef1b1918afa187cb585ca03413a97e53353d818e89a6c588eaf4b8032d4267894d56256be29239fe8b1c0f941fd5312cf85c5e4893d69e72f692429f7c998051d58ea63989aa428613be89bf3820154f9ecb9462e2908e4765b49805b7d45a1b7809933969bb1b57d43cde46d24578c4f5aab14c7b5145fb4f32e0435fe5ae52f5124bedd2e2942e7282e2878c7735b7d0234b56aea1cd2b347ab93cd26b5d8738cc156925df4af595a8138e4c5af814a7c761f8f1bafad24524950cab3b5b3e579601c4f77c9474db323c0c4ab8592d0136da85c6cca2354d04d47931ebf6ca1dd2011e53fb299022238e33e02626fc9d86fbc9b476358ed61620007348a362d11493b5f30760d4c7c0f5dd51b1cd279d9e66df2f0557393df910fe60dae2b42ebab40ff41dc68a0ec53a8ac70778ef4602045cacad9672e0aa974365a7e3289152597544efa5d6b85987f9257722e3180d2d09e08a02e4b7ff1c58b5dca3c8bb2d9a4d10bfca1bb1525848b9a5ca010657b8d93207650be68a9ce0ae9c6621cd1cb42b0911b8ddee713c7949fd3a1ce11c6538825d37d46808f46d7c9feca58a7f62fd5d3e56ddeb20130d77da98a3ea4201480ea6df84607317d12ddad2d832713ea6665c31476239c4705f32c80e91e8eb2d7380701f914508c9ca6aa7dd103dd865f133cf786d0d27e3c9cc33e75534d6c05a4f530ae0324065f1812d781058990805750e8d63fd26c025ba1d3eb5c40d279c385b0057174d9bb390797880d39d1accb9a29b932271830e4a872d20e05e5429139a1bcbe5b0aaf16afee3ab79e5f8067befa078d691bf636c2ce01f8d9e0371a212dc6868793e5d2931120e2125dcbb68455b4158333002343fe8f64cbc13f3e648b5007965759b113f17573bc3ab7b7bf5f017f61eacc5dfc96e8e1b6548019794af703100a902ca5f1f9b8745fed2d4d34b92e1b82c8d91ef7b711ed2459deb75bc927335cae1d1f600ad7d8b6af32a0ea3c13eb9fa26a69fd882f3bdb9f7ac47808a427d24560d95bd20ddd6ce1017aee29273cc9530f02278006b947707ce6f03e3163a0a4f17437ca37aae0cafa534e8b303b09cb0f9a5d53f72419ab2f05753b1f909c1fb80f874d4b79904a420bd3642931388440ccd7aaf5b6953e77efeff90779bb37ef504a4ff320eb25f42b3bc3f4a29a0c128678c7a9733aa7e4bfab5c6a8e7150806defdf4b333911ae276ea9d5e35dae02a40dea0750054d2129183545246941ae4e85ea3ba4ca021ba60578a4af42c7d140085196b88705911fee6aaaf497454a8f85ab0d790aa27a77e5d09082a262035ad671cc8813678e5c99b4abf4a6e09216a9aa90b6bf30567f7371eeacbef70bbe30c686656cd626835e52e6e2f688", 0x1000}, {&(0x7f0000001200)="ce5372eb6cba08a35f1b6cbb711901a76d98616591b47ec16fb96d149352d95ace76368e1b56eac4a340623a1e4d7cb2dbea4b2aca38f39a56bdae4ee6783c1e8467e28b7e6f447b98d76795904b39f8a6dbfe51c8514404e7b5b5cddf2fbe9edb887c15a97b6e75bfcc85b657fa2ec69e9d5f258f1a25d93ee8fa01b21fe9077d5139f391f7", 0x86}, {&(0x7f00000012c0)="2fd690cdf254584c1f1dacfd975f2ddf1eae9e96b6992d1a24d9fdd0e84ae34a5c5e554dea202194f021e75c3bbc62c3d3ae5f5976bf7bbff0f538eec38c267bd3c6eace0718917e85eeb124c4a73d6b58236875f5147bb9832954caece410ae37def4c92490a50e7552f5fd94e2d07b074605700afc33a482c11d23968584deb4d0ae5384ffb56884a8f205e505ffa66f26fde7170afb5fe2f74e93dfe938f08a3b36edb14a906cbc9b8f6dd3b1b3ecd69d10583dad868ab3a1fa5c6b222fae425c50b95075c44dc042810543e74c20c0a9acf66aa70b058347e05243406e2c247f09dde2563ea494cfed", 0xeb}, {&(0x7f0000000100)="ada6226c29a7cc32f9fd487d2a20e369b10a7af1c5114d7c3cffa26ae523976c07b57bcbf549dc7aa2a4c5b067ef086ac456115733df638e4423d1ba1775c0d744eac41895449e347014b5db46dc87777f56656dbb71dfef8624322a9c1cae6ee8910945176b3cf6f8dcb1", 0x6b}, {&(0x7f00000013c0)="4c3351134eb5d16b1a03ff820a897775f3041956d3a020a318aa7ae1b23f5410a3995a742b490ed7b1134dca5c09c6ae4284f02fd24c15f8e30aabc3e18f4a6c7dcad68f2812880042ed7cc8e8f55fddef789de3e4311cc8035bf421227ccbe5", 0x60}, {&(0x7f0000001440)="a19895951b166e740df01f7820dfca75159039e5b986d74417bfabae3c0de647678c", 0x22}, {&(0x7f0000001580)="f81214a466e9d994d104af279a38125bb63c25b4db23eb437c550eee095d8a76237f0de449734862137dc06fb8c9d83e4d6b01a3e12de855671205df1c115c4182d4207da31678b9340d52790bdf36629d016acc9fe76393e33596116f7a6f907364d20d74db6b610261b668516720da5be76dd75e26bc93e9445917679a1209bf954318fa5ebd97bf79136fc1ed4c8804481d235b075960c0d74f76b428ed0ac3393f6a029a9c90cd065d2d238ba384972dd23dbf95f8893b6900c3f6bc1a1d11748831b292", 0xc6}, {&(0x7f0000001480)="bb352eb390887e14bda700f23dbf4bc1ff27d4c2", 0x14}, {&(0x7f00000014c0)="59a969697318795fc8bdc22ae79e06a0174a12f6ce0d420fa664a829e63f8c69b93b3fc9bfb1b194420d8cb68e896332d0f471f69bb57cb87d09f43a63d026c3a5", 0x41}], 0xa, &(0x7f0000001740)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xbd, 0x0, 0x1, [0x4, 0x3, 0xb057]}, @lsrr={0x83, 0x13, 0x6, [@multicast1, @rand_addr=0x64010100, @local, @rand_addr=0x64010100]}, @noop, @end]}}}], 0x38}}, {{&(0x7f0000001780)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001940)=[{&(0x7f00000017c0)="5917796d5797e6104144495300f1f9d5e35de4ee84613908c8624ec50283cf24c6f5ccaf16496beedd737d1a3805c213", 0x30}, {&(0x7f0000001800)="8c3e344ef446497623084c5cc39bdffc82741d5205685cb2a6f823fa0a080e28571309513af0b2f2004366ce84e484fba3811440b1896ab2b350db56fa74e27d13ebd48b1ca9c8291df92231ed74f575b8b365146f0094bc859396947a75fc386f7464ff21580a1e2e5f189db4", 0x6d}, {&(0x7f0000001880)="a6204cbc5aecfa936b301aedd96c80992a1e9969cc5e1b507d0517d0d97b2135cb3798b8fadffe64af7efa58bd3cb0c20800f82a786c95a04111841cbf41a48f00d9fc32418d9e183ac0a9cbd5ae0b707355df90812287cff5490e80e516081046bacf50ab8ed4000ecc8b2223f93155c6d8583bc83d2a99b06605d016e7409e67c3a4dfdd1f401b82", 0x89}], 0x3, &(0x7f0000001980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x36}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xab}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x78}}], 0x2, 0x1) sendmmsg$sock(r4, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="72b1ceafb91f37", 0x7}], 0x1}}], 0x1, 0x0) 39.749576466s ago: executing program 9 (id=2945): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80582, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = dup(r0) getsockname$inet6(r1, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x400b, 0x88100) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f00000000c0)={0x9a0000, 0xfffffffd, 0xe, 0xffffffffffffffff, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newchain={0x2c, 0x64, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xfff1, 0x9}, {0xfff3, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2aa000, 0x0) 38.758380486s ago: executing program 9 (id=2948): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640), 0x40000000000033a, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="a78700008dab132a1b000b"], 0x14}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="0174df"], 0x20}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 38.159096638s ago: executing program 9 (id=2953): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) listen(0xffffffffffffffff, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x0, 0x6, 0x6, 0xfffffeef}, {0x9, 0x1, 0xf, 0x8}, {0x400, 0x9, 0x7, 0x100}, {0x0, 0x6, 0x6, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r10, @ANYBLOB="30002f800c0002000203aaaaaaaaaaaa20000380140003800800020003eeffff0500010003000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r11, 0xc040565e, &(0x7f0000000000)={0xa, 0x2, 0x2, {0xd, 0x5, 0x400, 0xbf5}}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 37.158700651s ago: executing program 9 (id=2960): syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) time(0xfffffffffffffffc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x4, "000000000000de6bd7e000000009000000f01800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000300)={0x4, "a9780d4dc37a1d5c99c42eafb2723b49e4ed00a0172578e35bde00010000ff00", 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000003240)={0x2020}, 0x2020) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"bab0f85254d4c7f4ad5e8ba99afbd30a1fcfd9e5205901c46fef939368b7fa4e"}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20030, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000000280)='./file0\x00', 0x800, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) 36.709294057s ago: executing program 9 (id=2962): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa4) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18}, 0x0) getdents(r1, 0x0, 0x0) lseek(r1, 0xfffffffc, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r3}) io_setup(0x9, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x20, r7, 0x2, 0x3) ptrace$cont(0x9, r7, 0x7fffffff, 0x0) 35.256504884s ago: executing program 9 (id=2964): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0xfffffffffffffd28, 0xa, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x35, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)=ANY=[]) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r4, 0x200, 0x70bd30, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000064}, 0x48820) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9b, 0x71, 0x40, 0x2201, 0x12c, 0x60d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0x4, 0x3a, 0x1e}}]}}]}}, 0x0) 20.171370107s ago: executing program 43 (id=2964): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0xfffffffffffffd28, 0xa, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x35, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)=ANY=[]) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r4, 0x200, 0x70bd30, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000064}, 0x48820) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9b, 0x71, 0x40, 0x2201, 0x12c, 0x60d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0x4, 0x3a, 0x1e}}]}}]}}, 0x0) 6.553449196s ago: executing program 8 (id=3072): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x5de00, 0x2, [0x0, 0x0], [0x100, 0x5, 0x1, 0xcf], [0x3, 0x8, 0x9, 0x5], [0x9, 0x9, 0x2, 0x5]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) close_range(r2, r2, 0x2) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400000) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000340)={0x0, 0x0, r5}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x8010) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) socket$inet6(0xa, 0x80000, 0x4c2) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) sysfs$2(0x2, 0x1f598282, &(0x7f0000000600)=""/35) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000640)={0x2, {0x2, 0x4, 0x2, 0xe, 0x7}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x12c, r8, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TESTDATA={0xb8, 0x45, "98277eaf6ea566a46fdb50674ea80de96b3f8dfe2f1df7315125e13334dd5c2960733b50217a579c286b62f134cffc2484f2e984cf691ba2564c5c14fe7857a1bc4c9f10bb4ce1a0061951344604dd4d419939bcfa981d67f8b64129450f631673e034821c9b24ec350dd11d4be75b370d50f196d6e89af42f3cb47bea3eba1ecb4a88f08121e966d7f6f03caaa5a6cd0f9e4731448a1834d406531746713fa0d70d5b2a82e51bc38913206b79f1046c0429e958"}, @NL80211_ATTR_TESTDATA={0x1b, 0x45, "2d7933ae07cf40044970f354e8087caa935b98b3da3e78"}, @NL80211_ATTR_TESTDATA={0x37, 0x45, "e1215f79c96bc0b0190efac9470b74e272dde323fa4bf1115ea8c283def7e3abacd8161977dce2793865bbe7f63c6b55f380ed"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000008c0)={0x2, {0x2, 0x8, 0x8ee, 0x8a, 0x6, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0xe, 0x5, {{0x16, 0x4, 0x0, 0xe, 0x58, 0x65, 0x0, 0xe8, 0x4, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "d4dcddee39adc06672cc9481e5ac"}]}, @noop, @rr={0x7, 0x2b, 0x80, [@broadcast, @broadcast, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000ac0)={'gre0\x00', &(0x7f00000009c0)={'gretap0\x00', r9, 0x7800, 0x40, 0x8, 0x7ff, {{0x38, 0x4, 0x1, 0x3, 0xe0, 0x66, 0x0, 0x77, 0x29, 0x0, @local, @local, {[@generic={0x82, 0xa, "3af409b98a3a1a3d"}, @lsrr={0x83, 0x17, 0xd8, [@rand_addr=0x64010101, @private=0xa010101, @broadcast, @rand_addr=0x64010100, @remote]}, @ra={0x94, 0x4}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x5, 0x2}, {0x1, 0xa, "90227e9e8843ddab"}, {0x6, 0x11, "1f7e4979edd222f702ce1895523d1a"}, {0x2, 0x3, "a7"}, {0x6, 0xa, "e8115e99de505b13"}, {0x7, 0x5, "1c9791"}]}, @timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x1, [{@loopback, 0x1}]}, @timestamp_prespec={0x44, 0x54, 0x7c, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x1ff}, {@rand_addr=0x64010101, 0x15}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@remote, 0xfffffffd}, {@remote, 0x7}, {@broadcast, 0x4}, {@empty, 0x7}, {@multicast1, 0x7445}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x400}]}, @generic={0x94, 0xf, "a844f99117d396328d2dcb1365"}]}}}}}) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b00), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x9, 0xe62, 0x7f, 0x40000, r11, 0x4, '\x00', r10, r5, 0x1, 0x3, 0x1, 0x5, @void, @value, @void, @value}, 0x50) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r12, 0x5411, &(0x7f0000000bc0)) 6.446755649s ago: executing program 8 (id=3074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)={0xe, 0x7, 0x6, 0xffff}) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) r2 = dup2(r1, r0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) listen(r4, 0xb) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) (async, rerun: 32) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) (async, rerun: 32) getresuid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000000)) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x2, 0x2, 0x3ff, 0x8, 0x8]}, &(0x7f0000000080)=0x54) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x2, 0x6, 0xeeee0001, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) capset(0x0, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffe, 0x10081, 0xfffffff7}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000000240)) 5.649036615s ago: executing program 8 (id=3078): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000400)={0x40, 0x23, 0x9d, {0x9d, 0x23, "bd6c051b42c6996e1e3c74677fc4dfcd5298ef8ae228668604c27fbb8358913c287a1fa31f206caa8c652bc9b931e49b389f672a2a80ac2e6cd2972843876807984e5aafb3d78683828c86d35f52413d738ca86af0d71eb4888975d2244fd7bef642d8e5068b270fc11d5890a62a2d831050b2f6d082e27414b85188c51e74d62c4db999be29cd61d203b420c9d6a632650a9c4df85226bd5af0cf"}}, &(0x7f0000000180)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "d9ff6a0c398a31c00946d46fbeeff57edba208f21da1c4a1766dbe4c94df81d5a65fcbb6d1b8db9b2b62a06859a3f7a2c9a7239877fff0b991a1c15ec3"}}}, &(0x7f0000000740)={0x34, &(0x7f0000000500)={0x20, 0x14, 0xb6, "49dce75b4392bac0b83e5be1ea1a7c0b232414e5d5eef43232f81701c304a52dcfed8e3252b67b14386b5d40f2c2c54cdc7161e629889c293b3c8558f3ebe73a0ab742fa68425a26c3c778ba6141bcc7b933ee493b7a84a6e33764657c2afa00b5eccb138d90d14a70f3ac27e935f37feac5efbbf852bd5b477834f2ca5f7fcacd8f671ecb0893d191f17682c7ba938ec83d62fcbf61467327afb7e624ad392950c59bb44fece33402d6fcfaea859899ac3a8a4a3197"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x3d, {0x3b, "d0a00b33eabd87a00ea571d024fbfb62acc4499930c04572deadd84b3e8fbb7b4e844f639fcda7d7aa2a5c8422af88b942877c08b6c212b8033cef"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0xf8}, &(0x7f0000000700)={0x20, 0x0, 0x1}}) 5.46113156s ago: executing program 1 (id=3079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x81) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100f1ff000010ac05507358002100000109022400010009020000000120f804090581030000040000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newqdisc={0x70, 0x14, 0xf0b, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x9}, {0xffe3}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x5, 0xa, 0x0, 0x0, 0x7e, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x3ff]}}, {{0x1c, 0x1, {0x2, 0xc, 0x8, 0xd, 0x0, 0x44, 0x2}}, {0x4}}]}]}, 0x70}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.time\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0x0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x5b81, 0x5, 0x2, 0x6, 0x35a1, 0x0, 0x6, 0xde}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000180000000000000010400008510000009000000850000000b000000a7001d00000000001800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x21) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) 4.709431029s ago: executing program 6 (id=3082): r0 = syz_open_pts(0xffffffffffffffff, 0x105000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x17) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xffffffffffff4f0e) 4.648764958s ago: executing program 6 (id=3083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000010000000006311a400000000008510000002000000850000000800000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xd, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004000)={0x2020, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x2004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.726636848s ago: executing program 6 (id=3087): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000380)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb807c70000020000000000d3a2d975", 0x2, 0x4}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) 3.584826197s ago: executing program 3 (id=3088): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf9, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "56013f96"}]}}, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x802) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$setperm(0x5, r7, 0x604310a) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x14, 0x29, 0x8, 0x70bd26, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2004000c}, 0x8004) 3.552684686s ago: executing program 6 (id=3090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x81) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000000100)=0x6e, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r8, &(0x7f0000001f40)=""/72, 0x48) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x801) 3.462720827s ago: executing program 4 (id=3091): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440309050b02"], 0x0) mq_open(&(0x7f0000000040)='\'\x00', 0x1, 0x10, &(0x7f0000000080)={0x1, 0xfff, 0xfff, 0x5}) 2.873000646s ago: executing program 8 (id=3092): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = fsopen(&(0x7f0000000140)='ceph\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x34, r6, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x201}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) fsmount(r4, 0x0, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7a, 0x725, 0x4, 0xf, 0x7ff}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 2.871039751s ago: executing program 8 (id=3093): syz_usb_connect(0x0, 0x2d, &(0x7f0000000d80)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d18000905", @ANYBLOB="87e295"], 0x0) r0 = socket(0x10, 0x80002, 0x4) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000340)={0x2, 0x6, {r2}, {r3}, 0x296, 0xe3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x94, 0x13, 0x53b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_sample={0x50, 0x0, 0x0, 0x0, {{0xffffffffffffff4d}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xfffffffffffffe9c, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @val=0xffff}, @IFE_META_SKBMARK={0x0, 0x1, @void}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x6}]}, @TCA_IFE_SMAC, @TCA_IFE_DMAC={0x0, 0x3, @link_local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) 2.325356257s ago: executing program 1 (id=3094): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x69}]}}}]}, 0x3c}}, 0x24008040) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.213341233s ago: executing program 1 (id=3095): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x1019, &(0x7f0000000980)={@multicast, @link_local, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x4, 0x1, 0x2}}, {@x25={0x805, {0x3, 0x74, 0x6, "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"}}}}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2140, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x2020}, {r0, 0x2000}, {r1, 0x27}, {0xffffffffffffffff, 0x1a}], 0x4, &(0x7f00000000c0), &(0x7f0000000100)={[0xcf3]}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'pim6reg\x00', @local}) 2.186642084s ago: executing program 1 (id=3096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r1, 0x400, 0x70bd1e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000050) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x9c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc011}, 0x1) futex(&(0x7f0000000080)=0x1, 0xc, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getdents64(r2, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601010000000000000000eb7af834050005000a000000050004000000000014000780080006400000000008000840000000f00900020073797a3000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) chroot(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x60, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x3, 0x8, 0x8, 0x100000000}, @timestamp={0x8, 0xa, 0x9, 0x7}, @mss={0x2, 0x4, 0x8}, @md5sig={0x13, 0x12, "363428c850b91884dcd34366d6727cc6"}, @exp_fastopen={0xfe, 0x10, 0xf989, "f6a53406c1dfaab3a41b50bc"}, @generic={0x22, 0xb, "57def6609799a311d4"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2.117299471s ago: executing program 4 (id=3097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() mmap(&(0x7f000045f000/0x3000)=nil, 0x3000, 0xa, 0x810, r0, 0xb35ef000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) recvfrom(r8, &(0x7f0000000240)=""/52, 0x3c, 0x40000041, 0x0, 0xfffffffffffffe12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffff8) 2.030671229s ago: executing program 1 (id=3098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) io_submit(r6, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r9, &(0x7f0000001840)=""/4088, 0xff8) r10 = getpid() prlimit64(r10, 0x2, &(0x7f0000000240)={0x10000000000009, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000005700)=[{{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000280)}, {&(0x7f0000000300)="b26fdd902b0a6112425c5ae57f042d2c965496dd462e6b6d55a942f0a2ed295aafe8592f3d0fa08418961df0747b7e", 0x2f}, {&(0x7f0000002840)="a015ad3647ca3459bc09a192c6236a8e64b97f9a9f15a1b76bb6761971b0fa468e4b4bbfe2130aeecb2bcb96b1fd5a2de044146445e94115c2d6437caf0552c1cd10024f94379b6da768de19f3e604e806c397f3f6fd2fa9cf8d7b87b159800245efe8b07dfd138ef3ee1a288b05ee28f7a6a1f90d30d9dcda7492d7b143f271d328a2245c62ac22b96b987e46db19283722a97aba06f8b29494242f38a4f9b9ce8d538ac6eb82ce8785f8b403a60cce8b824d972ef5878e54e4d19d9538caeae306fe77e08a4a94f90c0e452306697e9c47fd212c6e4f30e70045d786b20060554ea4e38d5cf0d0ba8533498855248913168d2bb01167202006230faf6608dc1dc9a2f6c7c46ea933a4884e7f79085379dccef7c88d52104d7979fc5af6604fafdec75c360d17eadd77716ab3ba7d7062ca3aaa19cbe3b44eeb9476b30a3e0d5524a89d65aa713b1d9ac89a5590ee1e78440767baf248877574db07b65da11673f5210ca35bea4db5ef80e8fa371a01a22fe2fcd07dc00bbd68d2e2ccf9b9aef1f8b5664049a656bab090993e3acd4bc0bf6b441fe8581810ffe6cf8657c6398d909e3a08b95d8a7382f13838ba40d9b654d9d689a7acf3d70f28004057559487b6addd23f6113993fffe1b5c885810bab2b2d27370ba6f370206e6a0ffca6f772d9efba956bdb9bef126be6f8d50b09d1ecad18fd04cb77737dee50f638f3876ffd0624b4c9dc622c9b4afad05eb29138910035710dca4fee2f22bb62a3c9a891bb18c9cbcc0349843f8712c0d653ee0dae8296f796a72cf5d7c9e964a0f134da9f9a5176e7526a5f0d9bdd163f2973c923348227d418e2b9116468e63e58e34267b4f32ee4c04911707a12a21ec06cff290c021451356032c08f199f47da94dedefc510db6c8b3789fe84e0262699f2055dfa50815f692cfd2d3f9f90fb9a5bc30e007cbb550080ee19dab58b40ccfd2584943737632c17ee0aa391b9bd85c99f0456d39c35a0e2f138b3062f804d3a29b0bb0dfdd2ecad26d7af5f4ef92c395dd70f341f9273dbd0804cc1ba28019121a85801a209524ee2205e6269471e3ef1a891bc129fd33c70ece18c1c321abac497ff58d3daf2abf4664ae877efcf2f1200f18da2a4d5b00d2816321fa9d9e1863dddfbeceda835de1a7f232d6dbb8d84be76855f4924f703a704f3bad32229dbd4aab67f8f962cc8ff8824d93f1060de89fb0c90277432b3df96bf96b75e6b021d43dc84ff997e0b1461978b709be4974ec7ce392ff0cd7496bcac1664e07388980990f490ba77cb00b28e1e337cbe9aa3c2a5c1bd7c03f49782d08daf74df632bc9f2c543cb755cf6cf3857a1b3c21e3128f02284181b97d704daacbb5fb5ab9bd5d494a8f208b4d404adbfdd7145ef8ff005b4548d9d3dbf15ea2c99baeba4a1f7f78d38a373c19f07a488f3b5912f5cb0125e2c7cd4401b5819a243fe7217c83238690676e365702c39e2b0b9d168a1bbf56a0c6ef1aa0fc3d24088aa81e2e474614811dcd7b7f3c916fc8e21078081e733b9a6ac995b9c8a0d74dd0bd957554d47d117c05cd5e8b76783f34a22f93e20f65445b15fe177ac8d0f03539971e1e00be835255725df96c0fc30407a1c8fb9009db997dd777c406efdc95076cdc0bd4038acff4d49122c06bc29b2896c2daf77061a35aa5089d11581b66f0ff1e3c540e750e80d1a3a25e5b51ce39a5ab25eb73ec9d4e27cfd21f0245e71a553df536d03788845248970f85755094ca570acb0411fdf7c0738b42ad459cf76a3eae072641d808aca7d5ea6e5c7f47efaa41eb34c8db8928c9c5493e454f1db15c393e8758a446adee3ac12d6280c9d776e9cce6d09e8681b18765bb92febe38123afb9c856ba94c95a6f11cc6cc10759f21994f4bbedac5803b4833efd2043b0d983893c0bf58eb9bafff355931cfc82e81260e6a5543048b774d39a9dae0ebaf896f3d146f1a5c52b60247dde33659a626f82b0bee633803b12b66ad612c7b8f98aa6ed45ef76f8f6a06edcb956d53444461d895da402f54d06e7dadf528d5d16e42f079c46fdaad9adab5592174e98edef56685b839bedb0fabb9c1387e6b89d8fe2b6d848dff7dd95ac61c04308f31aae8d9cf346fcdbe035865d37c991e5ae01a040fb97ab7cb9c7d35d50176a1a6690a12fe02175214c4dec555aa657a9c397e3f6180214885cd4ac349717100d3db4b66d8ea5dc41e3bd58cd36ddb7394d43307760129c3c1fc636382b75db727228630d55f3f853df449cab865865a950e9a6cc982eae4b5fa83d77f48f4f9f61ece1b6b9df35a912d4a137530533c4b4217c665d88b9a175f05683536f16b075ee00003f379bb588fea0ac2760164a0ec4b7948d969d2649510f448bdd92499f2d434c99de4b128203144be793ae2a828b18354aba7aebacb58adb24014ccb7d0d3874b8fb27755766bcafa92b883079f9d88b8db3a87b8371f7ebdd8ea375729d2c9c4eb5bf5c384c9375b23610c8b15ae7399b418f0f08e7f2b010c136bf942607ba76a6e8344ece4989cd5f094de0a678f218ed3bb04732030839f5010a077ad5adcafb7e12a94df80aa63c6aef60aab72ef5d3c966b2dc15aed6828328e5fd845056dc19d4f14a9a9008a218c652e48c818ee0bd75b2852a63a005520ac7033634852abb4ba0f28c9168cfa5133349626cfb23be185624abca43f07da261838e864ec5a4d218d1aa866e36f0395f2eb756bad401f5249aca0d6d2eb90863a3b8738139eea1dbcd900c64cf8d6bcc296a4e41289805117658a768e315963de372bd897a0331607f4f278932bc456171de7f665ec153d57be49be20ec6eb9ffbaa9771c133e48d39dbcdfda4469dff188b718bc4adb5fca6284dcc876b550fcfe345de9e37dd16f0c1d1029d1e4da3c32da3017451c1e1fa24dba11cf7f63d370ed475b3dbecab02cf179020ad9f99ea31adf5aaf25ca856aeb84dae30859eee47ab74f2afaa9c38394d7768673129853e80e70259d29cc4a7eaa773bc7e56f4146da203020ac39eda840af8ae16a1aafa4e379ab3171f4c2724a878dce2c7e9b7f012d865a1d5aff2e1a8fb29cae591faef98eb02c3984e0ad5fb49a96262c23c0d49b228e039c0455166d3d70af10a6f50a130844e491844849cb46eee57aee0232e76d2aadab3adacad9ba8c9b8b949cf46421c7821b603a3969fe2323462721eb701144a5176280bfbf959d5af5790372d0fe77d369c7e67ab90eee6cb43652450d6d730b910f10fe07ab2eee127042dff5889e393a1cbe5d34f689c5adc38e69f29eaa8289ea9cd07294c70f016c29c871e2f5e5da3eeaca534951f3cc5878063b5062aa93ccc61ef5e77e2df8527e3ed0402b8918ee84a0ead27fc57313fb527d036a7a1e54e754ab1c19c24cee72c5bddb3493cc7a714790b02b6917757c549b6ac5d641857cd6113683d8d7f17adc4dc3e177dea5dc9642b230fc86ae151ccb1c0f30e33de1277130ffc46ef44caed0728da656324e556b9de9e0e273ef47b5d7c2540d6a9ad5341c7a238b91bdb47ec8f28cf867df19d2b3d0a4c46409895eb14344acb3c71da87d94161ebb82cf2b8f739e41b849539b401bd7868ca12701cb0c24ac6a9e33638fbba103591a64ce9dce8a712b859f3f511efd153e58da80289e963e3c955178f95ca0e395b9e45607cc0240c398cdccd14ec6c9aae345dbb03bd983971ec51ecd19538c8371244116b03d0d28998e85bb386b1c3ca068224e119a8525febe72dfbcbc084d54029789118a1c6c1ef9242a8ffd333a25de036c95f4c0cde373427aa9ba0c2254c6f3b1355b313d1a47b9298072bd52a8ca07486da50b738d531cc5c4d9407eac95325845cb8b51e8686339166f15b5ce6ceef11eb7940e82fdd04cf80490876768e2e749b7268fa52252f248f8bf0aa2db3ac8e64d8c16726ecc6f5239b4736d88497afad8354a138bb84e93b049df902df1a9830fa2a6cea6911bef2c7e7b86c43f56afada8e4a4697a5275369f058bf1d1e93b79c55be66f59cbec9a91b232bd0c47baba0668760f4fac1c92c805812a059aacd364c17348536a3c343fdd1db4445383a5916a11c7c3fd39dd89dec88e91b422413c2e269139b4a94adb5f1ca5e0b0874ba7437323b50c955a8f96b74691320b9b74a93c819deb2981696d02a7c0f9527023bb8846bc946e760274389017666bc917f74c103f374788c53b91890a32c18683901468358c9b37fd3bc11998acc2542072b683748cfb635d887b8c481394eb22054623be0bb60f7a0cdc02c3b8cd9b4ca365c668e6cb10ea39d6f09f2c40c4f358bcc5110d6be8d7d98028a448abde06267184bca81302a4867e70908f5fe941e10c2a447b0cd1a06dc34c9bf1babd0843c9e875f47600d84cba0acac47633d1a465b9133a60b10e9b4b817e5f9c577ddd761e7ce3c22b5e5ad4acb97928fe9bbe151e986f31b2c0e0f42f8f407830103f9d85578fae3d26a443971c604e936cc1cd65e258a1ce8924399cde8f56b5783c94fc2d01bd88f0498b0d5e6d344c5f0d770962dca1f32c4cb2ee57fcc2d6073270a713d5f7fb0983a879a6c79368f1a185d1cb679253b56593b3c71bdd56ac825e9737e2489385414e6892aa36eeb03f7bdaadf47a3ead83568ee8ee0855a91578889e67b5b231ded3cfb3f903fec856eb2eefe959887392f3de390cc15c4870bbc98ae5e6ac57846ec280fa04373ffe8ed4bdd31728b872f35d71bf46e3e7d4eeec773c7f9d5917c6b623d5b8d13cbd761ceabeed350b8b27f4d3a111f25a54033228657425247c2384fc6927c1a181592e6d00a40bfaee78d6563c88cb956a64b62a879ba03e57a523762eee2124b49917d7dcc64d32b2a6158057da13ff53212721def34380bbe135e489395d1dee4be49839a4758e71738097fb40a90dd255ca639f10e1d04a00f731eba2643028fa34a44da381c9c2024a3dc918df971832cf8664b26db2c21b74645e67749a2fb60393dd4cc83a3c97efaaae45ab97fcb109c5d785d39ba02b17784b5e3c11316c352d0cddc8366a6efb362fc21bf614671a5627622eb4051bfe110a8354ec5cd8e156162dd3e828adf76f534e24a9e6820351b93664b133ff3b7106aa78e93df89ce82d4bf99a251a9a6ee170f574a273ef03a5dfd76ed28bb7111476055b0719244f845e5bfeb494d7cda8373de8131615d670134892796f1955b625dabca194a92127594c1df194311520dbf674eead1f0c5dddae89fcbd60ea068babb8550c3451929ff1eecc4d5f9580e0b73a940cb8c85a64f2d0532e2d09b0f9dc6722e0fe399541d1c2c4698047ba1bb2a3ddae51c4428ada260d691eaa8c6c8591547e251838234b91fc6ee9f3cb03efb12f1bd31551563d01b539e64cdefaa4b90ef623e677dab2204e9e83144b11656e81d8701b24f7e74beee415c2c998b3bd8be63281e88b279447b8e319ee513fd73af410c39eb9a325369140a196320e5415c12007dbe7e3f807b2e829896c538e61c696f49def7dd86df4de8362e0395c6fc163c86d2e436a52b0b4c3e260be7616d0a40a2630b5d05d7725c1d1df673c76e7c3e8eda8dbcb95d6d0d89c9a0daf9b8e1be5a0b4a253d4a7c816ce0218a3fb0b87ddf982d929a1e18111fc08d5ffcb9734a9c5b7c46e125149b8bd52923883c279c96c666fe159397459828c9f36cbe91b75d545702977f7efbf35eb30773ce5862e8a9fbd8cdc22e96684a05bd8b27baff40b7ba407833253733d1811ddfd13b41cb", 0x1000}, {&(0x7f0000001600)="e7545d1e18d8808771ed969b30769aafc2145d07eb6bf519e68c67ccdcea6c1a95e2921eedba92fcbf04b6ca744564df9afcc2d317162eb6f8d4e97ee0066f3efbd163beee741ca0b152", 0x4a}, {&(0x7f0000001680)="dbf7394132f3b2387b57d84eaa6e393d26625e837593afe558ee64dc38a179b3a8be2488650c1cf57375d1b5ef826ca27fa18de7e54e6791006895dbe7a498d2f525a0fcad157d77305833ba838663921aa5ed77e7f16b987c386bb27da0f3dadc0f1bba568f2a587f163dd18efd6c8f811a67902fa2ee1f", 0x78}, {&(0x7f0000001700)="54e9998f9dcb508e940628f3a8f5d3930db750a42cf115371cda90d009b2c602f145be1d3fc2929aa4a3d0ceff22058b0e4f6dd42940d5a7044d2c7d463e452b5eab5ec1e71aca747cc925f92db69ef3b680d12ff04e92c6f55b18d8a8a69532f3cba8acf48a8dccf126cd3ae4b613a744a155394ca8fe84a5889bfe83561241a7b6053e9444d68a929a3631ae98c0ad8f139161ed23fdfc222a6438644fd240f6d6ab2189bb9a204cc4", 0xaa}], 0x7, &(0x7f0000003e80)=[@rights={{0x34, 0x1, 0x1, [r12, r5, r12, r13, r5, r12, r5, r13, r9]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0xd0, 0x4054}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000003f80)="3007b7b3f48ab7c202eb6420997f6d04d7445fbdfd5f9f4ebf6a6d54e88a07fe5feebc588a7682ee3dd3cbd6c6aeecc4e449050d1531d19d71a4dfeaa6760b8704e8e605a822d6b16d569f0f6a4ec81b2858daf7388b5c84750b961299c1c756d019c7758d82b2f52113567d04ebeb449a616e04d3726620c1a8092299510e47fc8b69779d95e2ab8d4d4b84fb4baba03d4842b7fcac0c8e95dfe6ec91c53540741fbc25154f232e98c945d5f18683b1b1ffe5a0b2afb51464ea9faed1651fc3f5f635cfa61f9d3b4be0c14a5234e8b0e6af93c74c54ccad42a39492bd8131520a9b9d908be8", 0xe6}, {&(0x7f0000004080)="7a625b8e7acfd626173972d71c742e5fe3bdc36b6b4d19712f131e2a823289df297d0f49e1c7aef9e2c40084c1d6a637ae9bdb37ed010660d4f589fb0311", 0x3e}, {&(0x7f00000040c0)="20daa91643c5b34f7e49da8cbb05884702705c7e7b05ae9d9b7470e39857e4662c2c03857e1f97c209deafb3d31ee99cdae76194943c71349037a4418ca8b106618675f450e714069eb2e92d52b097b7045e667ba3b60469317378c585", 0x5d}, {&(0x7f0000004140)="830cb05731fe004b959898ce31085a4f24d357bb5c2bd28deb9b1fb4796a311debdcc2c1c8142333999793691afd386ecfac1aad85e59c60c0155f1d6c1f8941ad66297f2b797ed4d31d223e1b8899acdd0fd3c90df88e4ed900dd043d8b0a739a397b392391c6c01b26917a1f08fcac49e63e299523b9be5800a7f483a276d0032eeb3271db838fef88c978e5f0f3da470c", 0x92}, {&(0x7f0000004200)="c92e84c5d97d0e11a8f83f74f13fc6287509554edf20eb8764e5add8e663b99a8cadc2be23132e1dfef3b1d34d7e7464ea0cb755a28d279a996cc9270408b06bae274f76fe686775d6094dbc7467ce996c81d0f28d9644904c121f5a4a117df2b0d6d15e28286c1c8f83628dcb0d533f88ff097747a54a62f7eef77c2982bcdf35e6e7503dba6e809e5ef95f8f2220d68584ac8423277b39", 0x98}, {&(0x7f00000042c0)="30859e8a18992deaa9271a455e3c118fecd39806f21f460a659488c63e2ec7936346b838c62805e74b70b304e9a9d5e530d85b7f6a4a40d105d5ace993d36bf15f2cffb07997b183e53075b5a8b8d241823b6dc1db46239e5f0bb05d09e78c167ed4930af566d1b95f95a766b330d0b4249a40c37e7e78c24c112d49bc534b8dd2327271193310a7e6dac81ea5c5de480866613390c1a4e734963f885d7ce1b1743fb8cb8dd61a20d57f24c0b07ac2e9d970e6d05f6590eb4ffabf3e0dad84a528f46169d4fa4077", 0xc8}, {&(0x7f00000043c0)="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", 0x1000}, {&(0x7f00000053c0)="e402242bd64ce454d2526930ac34127547794d80e40df22a357ccf14f7d4e025f3c035e5e3f6d49c045ae8317db0acb5842a8a2b0aaf3d5e8e49c62f3373ac4d98dcfc5c83f23981c1480ffbda869554154fbeb1acb02629db8e7972174f40d8afab3520d5fbe599a0d6a93012beefc4264d04908985d433f48f838d30382709b9a220af42666492c707f3f23903f0a8d1ed7e47698735c0e398ad96dc92f71d993a85dd28b1dc83a2eb26e80c96508596ef65385aa73691b79eab16", 0xbc}], 0x8, &(0x7f00000055c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x34, 0x1, 0x1, [r7, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r9, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r9, r2]}}], 0x130, 0x10}}], 0x2, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r15}, 0x2d) userfaultfd(0x0) 1.280156947s ago: executing program 3 (id=3099): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/dev\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)="fefbbb89dee362987b681f460200"/28, 0x1c) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x1040, 0x0) 1.189383709s ago: executing program 3 (id=3100): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0) (async) getresuid(&(0x7f0000004f80), &(0x7f0000004fc0), &(0x7f0000005000)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.134750262s ago: executing program 4 (id=3101): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8001, 0x1, 0x68b34ddb, 0x800, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8001, 0x1, 0x68b34ddb, 0x800, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) semtimedop(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xb}, 0x0) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4480}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000180)=@abs, 0x6e) 1.130111996s ago: executing program 3 (id=3102): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socket$inet(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$swradio(&(0x7f0000001e40), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001e80)={0xb, @vbi={0x101, 0x101, 0x7, 0x3447504d, [0x1, 0x7], [0x7, 0xd], 0x2}}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c5, 0x3000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 872.781235ms ago: executing program 1 (id=3103): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pselect6(0x40, &(0x7f0000000400)={0x8, 0x6, 0xe95, 0x101, 0xffffffffffffffff, 0xc0c, 0xd6f, 0x8000}, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010005240e000005"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES16=0x0, @ANYBLOB="000000006368657461673d140002000000000000000000c6c13676cf129e530000"]) 445.334098ms ago: executing program 8 (id=3104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f010000000000000000000424020009058103400000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$watch_queue(r4, &(0x7f0000000400)=""/123, 0x7b) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)="c021", 0x2}, {&(0x7f00000000c0)="d86f831ad73c0b32d28612933c6d878c312c2a48b9a0a82e829c701b68e5c598eff3ebea5ac056f16c72542609d119b2bb9361c210645cdb", 0x38}, {&(0x7f0000000480)="6a7af7f33345a3a6d14d42516b8d6ec84991d8b7fec0a4d29a498ff8dd81497ebb0f9b9f58f75aed5cb2be38cbe1980914657bd9bac83ffa372e4523d27dd4aa3b640a7e8bdc6105deed885d0e260c74389cee195152c38005ec4149a31ec0a205184646bef5ce67259d571d5be40fa85633fc089352e7741493e79ab035ac1b7cabb5abdf9c481071e63405efe926af0295c1fccee155feed16ca4072b88cab99f6dd024de397e4ab9533e581e54f8e6bf055ee18f803cd3efe467c5bce08178fb9c3747cf4bf94d4d3d667c8d4febbd48442f41a80217aecd378618225d58c6b73b9ba069c6ce9", 0xe8}, {&(0x7f0000000580)="e52bd454961baea97572f6af9719bef969cd43688d9b29a3e0e4e7983414f286b21584892f2b855e134ce02d6f592d13bfb6578501bd2efc48834547a50b7b86590985431bbc8fa8a55d464a6176d9758fe9715ea8bdee8052ad20acf5f90d2541b97e0d61c8ccbb64e6e8f008ec8205e45897c5b5874cbccf1fc3a2adc73457d9c6bded819dd18c1cf3fba9b1dd784c99813cf8315f6a61751466bb7686320090ba6374553c9cc09cb17758b0c368ce0a0626f517a588de5af430a7f8ae102f6660cdb20686a859a77d12bce476e3b6a1035fd223c8b225a8d4f4e799", 0xdd}], 0x4) 345.46211ms ago: executing program 4 (id=3105): syz_emit_ethernet(0x72, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @private1, [@hopopts={0x2b}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) shutdown(r2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 344.693403ms ago: executing program 6 (id=3106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x69}]}}}]}, 0x3c}}, 0x24008040) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 340.919795ms ago: executing program 4 (id=3107): mmap(&(0x7f00007af000/0x12000)=nil, 0x12000, 0x200000f, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3}) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000093, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xa9, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x361840, 0x1d2) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x2, 0x86) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1440}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f00000004c0)) 193.63329ms ago: executing program 3 (id=3108): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltclass={0x74, 0x29, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {0x1, 0x4}, {0x4, 0x4}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x7670, 0x100, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffffd, 0x3, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x4, 0x459}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) 53.370924ms ago: executing program 4 (id=3109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x305002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r5, &(0x7f0000000040), 0x373) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') read$FUSE(r7, &(0x7f00000082c0)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x6, &(0x7f0000000180)=[{0x1000, 0x0, 0x3, 0x1}, {0x8000, 0xc, 0x8, 0x5}, {0x8, 0xb6, 0x2, 0x7}, {0x7, 0x9, 0xf, 0xfffffffb}, {0x7, 0x0, 0x4, 0xa1}, {0x9ddc, 0x1, 0x1, 0x9}]}) syz_open_procfs$namespace(0x0, 0x0) shutdown(r6, 0x1) 30.956114ms ago: executing program 3 (id=3110): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x9, 0x1, 0x0, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, 0x3}) (rerun: 64) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0xf2081, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x80105, "ea040000000000000010e0ff0000001b322100", 0xffffffffffffffff}) (async) close(r3) ioctl$SYNC_IOC_MERGE(r4, 0x40103e05, &(0x7f0000000180)={"df0045002aab0000000000000000000000000000562900"}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x40000) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x744b, &(0x7f00000000c0)={0x0, 0xfdc8, 0x800, 0xffdffffd, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async, rerun: 64) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) (async) add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) semget$private(0x0, 0x5, 0x10) 0s ago: executing program 6 (id=3111): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x0, 0xc010) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0xfffffffffffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x420004008d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xd0080, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b2319333260e10998974805be5cf48334ebe4dc734f89b56906187f8fa2e1a2a052d141634663115476a2838530b516be3249c93c1100a01c9a60e3d4dffdf2b93b3e8167fbf2fbd70df89b5ee5a972537", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44041) creat(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 571.781051][T24182] netlink: 'syz.4.2722': attribute type 20 has an invalid length. [ 571.790774][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.805356][ T5929] usb 10-1: Product: syz [ 571.809656][ T5929] usb 10-1: Manufacturer: Ȭ탠糖Բ≩䃍㻳箷뛸騪셆 [ 571.816161][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 571.817375][ T5929] usb 10-1: SerialNumber: syz [ 571.835943][T24161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 571.841527][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 571.898860][T24182] netlink: 'syz.4.2722': attribute type 20 has an invalid length. [ 571.917503][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 571.939931][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 571.943547][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 571.955222][ T24] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 571.964208][T24182] netlink: 'syz.4.2722': attribute type 20 has an invalid length. [ 571.964804][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.990033][ T24] usb 9-1: config 0 descriptor?? [ 571.997350][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 572.005639][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 572.034342][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 572.055748][T24182] netlink: 'syz.4.2722': attribute type 20 has an invalid length. [ 572.069108][T24182] netlink: 'syz.4.2722': attribute type 20 has an invalid length. [ 572.086803][T24182] netlink: 'syz.4.2722': attribute type 20 has an invalid length. [ 572.092148][ T5929] usbhid 10-1:1.0: can't add hid device: -71 [ 572.129008][ T5929] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 572.155418][ T5929] usb 10-1: USB disconnect, device number 23 [ 572.328759][ T5827] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 572.478819][ T5867] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 572.510191][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0 [ 572.516934][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 572.531609][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.548913][ T5827] usb 4-1: config 0 descriptor?? [ 572.628813][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 572.640429][ T5867] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 572.653065][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.661958][ T5867] usb 5-1: Product: syz [ 572.666359][ T5867] usb 5-1: Manufacturer: syz [ 572.673941][ T5867] usb 5-1: SerialNumber: syz [ 572.692490][ T5867] usb 5-1: config 0 descriptor?? [ 572.701202][ T5867] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 572.806034][ T24] gspca_vc032x: reg_w err -71 [ 572.814295][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.921916][ T5929] IPVS: starting estimator thread 0... [ 572.939521][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.956689][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.976011][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.981439][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.018815][T24222] IPVS: using max 42 ests per chain, 100800 per kthread [ 573.417877][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.424013][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.429429][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.430989][ T5827] usbhid 4-1:0.0: can't add hid device: -71 [ 573.440777][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.446136][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.446230][ T5827] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 573.459252][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.464625][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.470155][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.475524][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.480860][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.486185][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.491559][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.496921][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 573.502328][ T24] gspca_vc032x: Unknown sensor... [ 573.507400][ T24] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 573.521292][ T24] usb 9-1: USB disconnect, device number 9 [ 573.534222][ T5827] usb 4-1: USB disconnect, device number 80 [ 573.668435][T24234] No control pipe specified [ 573.688754][ T30] audit: type=1400 audit(1743029837.365:2595): avc: denied { setopt } for pid=24203 comm="syz.4.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 574.229812][ T30] audit: type=1400 audit(1743029837.915:2596): avc: denied { read } for pid=24241 comm="syz.9.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.729382][ T30] audit: type=1400 audit(1743029838.405:2597): avc: denied { write } for pid=24247 comm="syz.9.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 575.005990][ T30] audit: type=1400 audit(1743029838.685:2598): avc: denied { read } for pid=24270 comm="syz.1.2735" path="socket:[68223]" dev="sockfs" ino=68223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 575.029204][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.044958][ T30] audit: type=1400 audit(1743029838.685:2599): avc: denied { ioctl } for pid=24270 comm="syz.1.2735" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 575.245407][ T5869] usb 5-1: USB disconnect, device number 80 [ 575.419329][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 575.466260][ T30] audit: type=1400 audit(1743029839.145:2600): avc: denied { map } for pid=24290 comm="syz.4.2739" path="socket:[68259]" dev="sockfs" ino=68259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 575.599245][ T10] usb 9-1: device descriptor read/64, error -71 [ 575.885079][ T30] audit: type=1400 audit(1743029839.565:2601): avc: denied { bind } for pid=24303 comm="syz.9.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 575.914292][ T30] audit: type=1400 audit(1743029839.565:2602): avc: denied { name_bind } for pid=24303 comm="syz.9.2742" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 575.935757][ T30] audit: type=1400 audit(1743029839.565:2603): avc: denied { node_bind } for pid=24303 comm="syz.9.2742" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 575.988941][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 576.128786][ T10] usb 9-1: device descriptor read/64, error -71 [ 576.168284][ T30] audit: type=1400 audit(1743029839.835:2604): avc: denied { getopt } for pid=24303 comm="syz.9.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.219004][ T5869] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 576.251880][ T10] usb usb9-port1: attempt power cycle [ 576.503965][ T30] audit: type=1400 audit(1743029839.835:2605): avc: denied { connect } for pid=24303 comm="syz.9.2742" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 576.528254][ T30] audit: type=1400 audit(1743029839.835:2606): avc: denied { name_connect } for pid=24303 comm="syz.9.2742" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 576.529883][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.559941][ T5869] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 576.570011][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.579705][ T5869] usb 2-1: config 0 descriptor?? [ 576.586684][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 576.916419][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 576.949216][ T10] usb 9-1: device descriptor read/8, error -71 [ 577.127764][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 577.145513][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 577.159975][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 577.161481][T24334] __nla_validate_parse: 7 callbacks suppressed [ 577.161492][T24334] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2748'. [ 577.167057][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 577.195679][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 577.203285][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 577.210832][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 577.222952][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 577.230120][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 577.237083][ T5869] pwc: recv_control_msg error -32 req 02 val 2100 [ 577.245320][ T30] audit: type=1326 audit(1743029840.925:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24333 comm="syz.9.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b698d169 code=0x7ffc0000 [ 577.247625][ T5869] pwc: recv_control_msg error -32 req 04 val 1500 [ 577.274526][T24336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'. [ 577.284171][ T30] audit: type=1326 audit(1743029840.925:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24333 comm="syz.9.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b698d169 code=0x7ffc0000 [ 577.289412][ T5869] pwc: recv_control_msg error -32 req 02 val 2500 [ 577.315151][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 577.322395][ T30] audit: type=1400 audit(1743029840.955:2609): avc: denied { ioctl } for pid=24335 comm="syz.3.2749" path="socket:[68394]" dev="sockfs" ino=68394 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 577.324126][ T10] usb 9-1: device descriptor read/8, error -71 [ 577.348648][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.351618][T24336] netlink: 'syz.3.2749': attribute type 14 has an invalid length. [ 577.355438][ T5869] pwc: recv_control_msg error -32 req 02 val 2400 [ 577.431030][ T5869] pwc: recv_control_msg error -32 req 02 val 2600 [ 577.454520][T24342] IPv6: NLM_F_REPLACE set, but no existing node found! [ 577.474451][ T30] audit: type=1400 audit(1743029841.155:2610): avc: denied { create } for pid=24343 comm="syz.9.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 577.488956][ T10] usb usb9-port1: unable to enumerate USB device [ 577.503656][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.513450][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.522770][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.531807][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.540765][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.549727][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.558736][T24344] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2751'. [ 577.653064][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 577.673378][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 577.683970][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 577.707419][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 577.729768][ T5869] pwc: Registered as video103. [ 577.742260][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 577.769566][ T5869] usb 2-1: USB disconnect, device number 16 [ 578.379949][ T2154] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 578.563426][ T2154] usb 5-1: Using ep0 maxpacket: 8 [ 578.598584][ T2154] usb 5-1: config 8 has an invalid interface number: 143 but max is 0 [ 578.644947][ T2154] usb 5-1: config 8 has no interface number 0 [ 578.673950][ T2154] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 578.743408][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.909068][ T2154] viperboard 5-1:8.143: version 0.00 found at bus 005 address 081 [ 578.988782][ T2154] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 579.047602][ T2154] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 579.062974][T24429] overlayfs: failed to resolve './file0': -2 [ 579.245855][ T2154] usb 5-1: USB disconnect, device number 81 [ 579.638819][ T5869] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 579.820767][ T5869] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.861733][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 579.904727][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.952262][ T5869] usb 4-1: Product: syz [ 579.977031][ T5869] usb 4-1: Manufacturer: syz [ 580.001812][ T5869] usb 4-1: SerialNumber: syz [ 580.251016][ T5869] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 580.582681][ T5869] usb 4-1: USB disconnect, device number 81 [ 580.602316][ T5869] usblp0: removed [ 582.893901][T24539] __nla_validate_parse: 29 callbacks suppressed [ 582.893917][T24539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2775'. [ 582.899172][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 583.048148][T24543] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2778'. [ 583.097326][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 583.097340][ T30] audit: type=1400 audit(1743029846.775:2614): avc: denied { write } for pid=24546 comm="syz.3.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 583.844157][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 584.558814][T24567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.613047][T24567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.444462][T24586] xt_CT: No such helper "syz1" [ 586.659983][ T5929] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 586.703670][ T24] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 586.879377][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.939907][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 587.003081][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.015246][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.022535][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 587.030809][ T5929] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 587.059139][ T24] usb 5-1: SerialNumber: syz [ 587.087991][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 587.094540][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 587.101967][ T24] usb 5-1: bad CDC descriptors [ 587.119069][ T5929] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 587.159717][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.175176][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.191626][ T5929] usb 4-1: Product: syz [ 587.197083][ T5929] usb 4-1: Manufacturer: syz [ 587.203180][ T5929] usb 4-1: SerialNumber: syz [ 587.408852][ T5869] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 587.416607][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 587.429503][ T30] audit: type=1400 audit(1743029851.115:2615): avc: denied { setopt } for pid=24584 comm="syz.3.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 587.471429][T24585] netlink: 'syz.3.2787': attribute type 4 has an invalid length. [ 587.499492][T24625] geneve2: entered promiscuous mode [ 587.504851][T24625] geneve2: entered allmulticast mode [ 587.592764][ T5869] usb 10-1: Using ep0 maxpacket: 8 [ 587.631646][ T5869] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 587.642180][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.664033][ T5929] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 587.675234][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 587.685655][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 587.696118][ T5869] usb 10-1: Product: syz [ 587.700535][ T5869] usb 10-1: Manufacturer: syz [ 587.705365][ T5869] usb 10-1: SerialNumber: syz [ 587.726057][ T5869] usb 10-1: config 0 descriptor?? [ 587.735452][ T10] usb 9-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 587.745425][ T5929] usb 4-1: USB disconnect, device number 82 [ 587.752550][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.769243][ T5869] gspca_main: se401-2.14.0 probing 047d:5003 [ 587.785507][ T10] usb 9-1: Product: syz [ 587.791428][ T10] usb 9-1: Manufacturer: syz [ 587.796080][ T10] usb 9-1: SerialNumber: syz [ 587.802315][ T10] usb 9-1: config 0 descriptor?? [ 587.808029][T24606] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 587.821304][T24606] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 587.830179][ T10] option 9-1:0.0: GSM modem (1-port) converter detected [ 587.843991][ T10] usb 9-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 587.970572][T24609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.981286][T24609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.039210][T24606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.048205][T24606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.064232][T24606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.077661][T24606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.087701][T24606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.100626][T24606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.111933][T24689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.120500][T24689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.141033][ T2154] usb 9-1: USB disconnect, device number 14 [ 588.149273][ T2154] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 588.158404][ T2154] option 9-1:0.0: device disconnected [ 588.370512][T24705] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 588.409105][ T5929] IPVS: starting estimator thread 0... [ 588.588856][T24707] IPVS: using max 39 ests per chain, 93600 per kthread [ 589.481411][ T5869] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input47 [ 589.834917][ T30] audit: type=1400 audit(1743029853.515:2616): avc: denied { read } for pid=24733 comm="syz.4.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 590.154776][ T5929] usb 10-1: USB disconnect, device number 24 [ 590.424609][T24761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2804'. [ 590.437647][ T24] usb 5-1: USB disconnect, device number 82 [ 590.519437][T24773] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2805'. [ 590.567770][ T30] audit: type=1400 audit(1743029854.245:2617): avc: denied { map } for pid=24772 comm="syz.9.2805" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 590.613138][ T30] audit: type=1400 audit(1743029854.245:2618): avc: denied { execute } for pid=24772 comm="syz.9.2805" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 590.621624][T24783] netlink: 'syz.8.2808': attribute type 1 has an invalid length. [ 590.660851][T24783] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2808'. [ 590.724320][T24782] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2801'. [ 590.768867][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 590.929213][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 590.940015][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 590.986680][ T24] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 591.008607][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.032820][ T24] usb 5-1: Product: syz [ 591.036987][ T24] usb 5-1: Manufacturer: syz [ 591.053098][ T24] usb 5-1: SerialNumber: syz [ 591.088219][ T30] audit: type=1400 audit(1743029854.765:2619): avc: denied { unmount } for pid=21825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 591.114992][ T24] usb 5-1: config 0 descriptor?? [ 591.130168][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 591.138796][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 591.156775][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 591.171764][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 591.184101][T24796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 591.194533][T24796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 591.204229][T24796] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 591.511595][ T30] audit: type=1400 audit(1743029855.155:2620): avc: denied { ioctl } for pid=24788 comm="syz.9.2810" path="socket:[69800]" dev="sockfs" ino=69800 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.811468][ T30] audit: type=1400 audit(1743029855.165:2621): avc: denied { execute } for pid=24788 comm="syz.9.2810" path="/sys/kernel/mm/ksm/run" dev="sysfs" ino=1826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 591.989034][ T30] audit: type=1400 audit(1743029855.635:2622): avc: denied { write } for pid=24733 comm="syz.4.2802" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 592.156461][ T30] audit: type=1400 audit(1743029855.815:2623): avc: denied { getopt } for pid=24812 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 592.305318][T24825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.368975][T24825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.573986][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 593.384298][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 593.503363][ T24] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 593.515384][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.540745][ T24] usb 10-1: Product: syz [ 593.545002][ T24] usb 10-1: Manufacturer: syz [ 593.565469][ T24] usb 10-1: SerialNumber: syz [ 593.599217][ T24] usb 10-1: config 0 descriptor?? [ 593.755592][T24874] netlink: 'syz.3.2825': attribute type 10 has an invalid length. [ 593.782944][T24874] team0: Device hsr_slave_0 failed to register rx_handler [ 593.929068][ T24] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 593.972390][ T24] usb 10-1: Detected FT-X [ 593.977361][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 593.984997][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 593.997525][ T24] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 594.029060][ T24] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 594.047114][ T24] usb 10-1: USB disconnect, device number 25 [ 594.067595][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 594.107405][ T24] ftdi_sio 10-1:0.0: device disconnected [ 594.516573][ T5868] usb 5-1: USB disconnect, device number 83 [ 595.060829][ T30] audit: type=1800 audit(1743029858.565:2624): pid=24916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2827" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 596.771915][ T30] audit: type=1400 audit(1743029860.445:2625): avc: denied { read } for pid=24937 comm="syz.3.2833" name="file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 597.060755][ T5929] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 597.328098][ T30] audit: type=1400 audit(1743029860.925:2626): avc: denied { read write } for pid=24963 comm="syz.3.2837" name="file1" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 597.562646][ T30] audit: type=1400 audit(1743029860.925:2627): avc: denied { open } for pid=24963 comm="syz.3.2837" path="/50/bus/file1" dev="overlay" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 597.621845][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.640261][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.663950][ T5929] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 597.763374][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 597.798849][ T5929] usb 5-1: Product: syz [ 597.809107][ T5929] usb 5-1: config 0 descriptor?? [ 597.831294][ T5929] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 597.918939][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 598.071068][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.082089][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 598.089044][ T5827] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 598.091989][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.109487][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.123973][T24970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 598.134260][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.207298][ T30] audit: type=1400 audit(1743029861.885:2628): avc: denied { setopt } for pid=25016 comm="syz.8.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 598.227879][ T5929] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 598.238965][ T30] audit: type=1400 audit(1743029861.895:2629): avc: denied { ioctl } for pid=25016 comm="syz.8.2846" path="socket:[69271]" dev="sockfs" ino=69271 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 598.268838][ T5827] usb 10-1: device descriptor read/64, error -71 [ 598.344616][T24970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.356878][T24970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.428830][ T5929] usb 2-1: device descriptor read/64, error -71 [ 598.508926][ T5827] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 598.561578][T25027] smc: net device bond0 applied user defined pnetid SYZ0 [ 598.569353][ T24] usb 4-1: USB disconnect, device number 83 [ 598.601403][ T55] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 598.610227][T25047] syz.8.2849: attempt to access beyond end of device [ 598.610227][T25047] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 598.623429][T25047] syz.8.2849: attempt to access beyond end of device [ 598.623429][T25047] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 598.637674][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 598.647311][T25047] syz.8.2849: attempt to access beyond end of device [ 598.647311][T25047] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 598.660273][ T5827] usb 10-1: device descriptor read/64, error -71 [ 598.662386][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 598.676231][T25047] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 598.678758][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 598.686247][T25047] UDF-fs: Scanning with blocksize 512 failed [ 598.697589][T25047] syz.8.2849: attempt to access beyond end of device [ 598.697589][T25047] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 598.711072][T25047] syz.8.2849: attempt to access beyond end of device [ 598.711072][T25047] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 598.724622][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 598.734964][T25047] syz.8.2849: attempt to access beyond end of device [ 598.734964][T25047] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 598.740230][T25050] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 598.747977][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 598.768948][ T5827] usb usb10-port1: attempt power cycle [ 598.775280][T25047] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 598.785807][T25047] UDF-fs: Scanning with blocksize 1024 failed [ 598.793958][T25047] syz.8.2849: attempt to access beyond end of device [ 598.793958][T25047] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 598.807630][T25047] syz.8.2849: attempt to access beyond end of device [ 598.807630][T25047] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 598.822319][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 598.832447][T25047] syz.8.2849: attempt to access beyond end of device [ 598.832447][T25047] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 598.846830][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 598.856546][T25047] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 598.864310][T25047] UDF-fs: Scanning with blocksize 2048 failed [ 598.875843][T25047] syz.8.2849: attempt to access beyond end of device [ 598.875843][T25047] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 598.889362][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 598.899519][T25047] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 598.909115][T25047] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 598.917122][T25047] UDF-fs: Scanning with blocksize 4096 failed [ 598.923389][T25047] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 598.934350][ T5929] usb 2-1: device descriptor read/64, error -71 [ 599.060765][ T5929] usb usb2-port1: attempt power cycle [ 599.264311][T25047] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2849'. [ 599.276136][ T30] audit: type=1400 audit(1743029862.955:2630): avc: denied { ioctl } for pid=25054 comm="syz.3.2850" path="socket:[69298]" dev="sockfs" ino=69298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 599.276559][T25055] xt_hashlimit: max too large, truncated to 1048576 [ 599.301957][ T5827] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 599.329127][ T5827] usb 10-1: device descriptor read/8, error -71 [ 599.349552][T25055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 599.358226][T25055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 599.508291][ T5929] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 599.529362][ T5929] usb 2-1: device descriptor read/8, error -71 [ 599.638785][ T5827] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 599.669243][ T5827] usb 10-1: device descriptor read/8, error -71 [ 599.778781][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 599.778835][ T5929] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 599.794126][ T5827] usb usb10-port1: unable to enumerate USB device [ 599.849209][ T5929] usb 2-1: device descriptor read/8, error -71 [ 599.958752][ T24] usb 9-1: device descriptor read/64, error -71 [ 599.970785][ T5929] usb usb2-port1: unable to enumerate USB device [ 599.993667][ T5867] usb 5-1: USB disconnect, device number 84 [ 600.198936][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 600.348770][ T24] usb 9-1: device descriptor read/64, error -71 [ 600.469130][ T24] usb usb9-port1: attempt power cycle [ 600.612513][T25135] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 600.633243][T25135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.646971][T25135] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 600.818785][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 600.839201][ T24] usb 9-1: device descriptor read/8, error -71 [ 600.891066][ T30] audit: type=1400 audit(1743029864.575:2631): avc: denied { getopt } for pid=25141 comm="syz.9.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 601.082476][ T30] audit: type=1400 audit(1743029864.755:2632): avc: denied { write } for pid=25145 comm="syz.9.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 601.111828][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 601.139166][ T24] usb 9-1: device descriptor read/8, error -71 [ 601.254607][ T24] usb usb9-port1: unable to enumerate USB device [ 602.606678][T25195] vxfs: unable to read disk superblock at 1 [ 602.639005][T25195] vxfs: unable to read disk superblock at 8 [ 602.644921][T25195] vxfs: can't find superblock. [ 602.680219][T25195] vxfs: unable to read disk superblock at 1 [ 602.700484][T25195] vxfs: unable to read disk superblock at 8 [ 602.718999][T25195] vxfs: can't find superblock. [ 602.739296][T25195] vxfs: unable to read disk superblock at 1 [ 602.758660][T25195] vxfs: unable to read disk superblock at 8 [ 602.766305][T25195] vxfs: can't find superblock. [ 602.782982][T25195] vxfs: unable to read disk superblock at 1 [ 602.789741][T25195] vxfs: unable to read disk superblock at 8 [ 602.798083][T25195] vxfs: can't find superblock. [ 602.829045][T25209] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 602.838460][T25195] vxfs: unable to read disk superblock at 1 [ 602.851085][T25209] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 602.865384][T25195] vxfs: unable to read disk superblock at 8 [ 602.889407][T25195] vxfs: can't find superblock. [ 603.270874][T25195] vxfs: unable to read disk superblock at 1 [ 603.283041][T25195] vxfs: unable to read disk superblock at 8 [ 603.289340][ T5868] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 603.298827][T25195] vxfs: can't find superblock. [ 603.319257][T25195] vxfs: unable to read disk superblock at 1 [ 603.326082][T25195] vxfs: unable to read disk superblock at 8 [ 603.332193][T25195] vxfs: can't find superblock. [ 603.337664][T25195] vxfs: unable to read disk superblock at 1 [ 603.345038][T25195] vxfs: unable to read disk superblock at 8 [ 603.351221][T25195] vxfs: can't find superblock. [ 603.463966][T25195] vxfs: unable to read disk superblock at 1 [ 603.470357][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 603.481092][ T5868] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 603.490443][T25195] vxfs: unable to read disk superblock at 8 [ 603.495131][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 603.499333][T25195] vxfs: can't find superblock. [ 603.509368][ T5868] usb 2-1: Product: syz [ 603.513544][ T5868] usb 2-1: Manufacturer: syz [ 603.518210][ T5868] usb 2-1: SerialNumber: syz [ 603.527853][T25195] vxfs: unable to read disk superblock at 1 [ 603.534585][ T5868] usb 2-1: config 0 descriptor?? [ 603.542194][T25195] vxfs: unable to read disk superblock at 8 [ 603.550630][T25195] vxfs: can't find superblock. [ 603.603688][ T30] audit: type=1400 audit(1743029867.285:2633): avc: denied { relabelfrom } for pid=25224 comm="syz.8.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 603.663373][T25231] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.668839][ T30] audit: type=1400 audit(1743029867.285:2634): avc: denied { relabelto } for pid=25224 comm="syz.8.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 603.671531][T25231] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.708986][T25231] bridge0: entered allmulticast mode [ 603.764297][T25231] bridge_slave_1: left allmulticast mode [ 603.770317][T25231] bridge_slave_1: left promiscuous mode [ 603.794181][T25204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.804093][T25204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.818600][T25231] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.824159][T25239] /dev/nullb0: Can't lookup blockdev [ 603.971291][T25231] bridge_slave_0: left allmulticast mode [ 603.995043][T25231] bridge_slave_0: left promiscuous mode [ 604.021206][T25231] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.074325][ T30] audit: type=1400 audit(1743029867.755:2635): avc: denied { bind } for pid=25243 comm="syz.3.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 604.147525][T25247] netem: change failed [ 604.174113][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2886'. [ 604.189730][T25246] openvswitch: netlink: Tunnel attr 0 has unexpected len 168 expected 8 [ 604.192353][ T30] audit: type=1326 audit(1743029867.875:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 604.257024][ T30] audit: type=1326 audit(1743029867.875:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 604.285658][ T30] audit: type=1326 audit(1743029867.875:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 604.313208][ T30] audit: type=1326 audit(1743029867.875:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 604.348246][ T30] audit: type=1326 audit(1743029867.875:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 604.387537][T25266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2888'. [ 604.401957][ T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 604.526925][T25293] block nbd9: not configured, cannot reconfigure [ 604.561588][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 604.571726][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 604.582939][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 604.593920][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 604.610408][ T24] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 604.633793][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.641925][ T24] usb 4-1: Product: syz [ 604.646141][ T24] usb 4-1: Manufacturer: syz [ 604.650844][ T24] usb 4-1: SerialNumber: syz [ 604.657557][ T24] usb 4-1: config 0 descriptor?? [ 604.666435][ T24] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 604.758823][ T5869] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 604.888746][ T5869] usb 9-1: device descriptor read/64, error -71 [ 604.928735][ T2154] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 605.018937][ T5827] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 605.078764][ T2154] usb 10-1: Using ep0 maxpacket: 16 [ 605.086381][ T2154] usb 10-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 605.095774][ T2154] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.104034][ T2154] usb 10-1: Product: syz [ 605.108307][ T2154] usb 10-1: Manufacturer: syz [ 605.113022][ T2154] usb 10-1: SerialNumber: syz [ 605.119048][ T2154] usb 10-1: config 0 descriptor?? [ 605.127534][ T2154] as10x_usb: device has been detected [ 605.133097][ T2154] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 605.138734][ T5869] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 605.149994][ T2154] usb 10-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 605.189985][ T5827] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.195657][ T2154] as10x_usb: error during firmware upload part1 [ 605.203023][ T5827] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 605.207588][ T2154] Registered device Sky IT Digital Key (green led) [ 605.218275][ T5827] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.234392][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.244111][T25316] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 605.290113][ T5869] usb 9-1: device descriptor read/64, error -71 [ 605.341162][ T10] usb 10-1: USB disconnect, device number 30 [ 605.357071][ T10] Unregistered device Sky IT Digital Key (green led) [ 605.357664][ T10] as10x_usb: device has been disconnected [ 605.401129][ T5869] usb usb9-port1: attempt power cycle [ 605.738884][ T5869] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 605.759324][ T5869] usb 9-1: device descriptor read/8, error -71 [ 605.832165][ T5827] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.833360][ T5868] usb 2-1: USB disconnect, device number 21 [ 605.911770][T25353] input: syz0 as /devices/virtual/input/input50 [ 606.307717][ T5827] usb 5-1: USB disconnect, device number 85 [ 606.324456][T25368] veth0_to_bond: entered promiscuous mode [ 606.332230][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 606.400995][T25368] veth0_to_bond (unregistering): left promiscuous mode [ 606.409557][ T5869] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 606.430870][T25389] SELinux: ebitmap: truncated map [ 606.452995][ T5869] usb 9-1: device descriptor read/8, error -71 [ 606.454900][T25368] bond0: (slave bond_slave_0): Releasing backup interface [ 606.461060][T25389] SELinux: failed to load policy [ 606.581638][ T5869] usb usb9-port1: unable to enumerate USB device [ 606.749569][ T971] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 606.879537][ T24] scsi host1: usb-storage 4-1:0.0 [ 606.915345][ T24] usb 4-1: USB disconnect, device number 84 [ 606.960797][ T971] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 606.976917][ T971] usb 10-1: can't read configurations, error -61 [ 607.139208][ T971] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 607.300572][ T971] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 607.309516][ T971] usb 10-1: can't read configurations, error -61 [ 607.316527][ T971] usb usb10-port1: attempt power cycle [ 607.428806][ T5869] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 607.552551][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 607.571067][ T5869] usb 4-1: device descriptor read/64, error -71 [ 607.669789][ T971] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 607.750955][ T971] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 607.757335][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 607.758607][ T971] usb 10-1: can't read configurations, error -61 [ 607.784257][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 607.798652][ T24] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 607.805923][ T24] usb 2-1: config 0 has no interface number 0 [ 607.816975][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 607.827701][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.829108][ T5869] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 607.835834][ T24] usb 2-1: Product: syz [ 607.847602][ T24] usb 2-1: Manufacturer: syz [ 607.856713][ T24] usb 2-1: SerialNumber: syz [ 607.863223][ T24] usb 2-1: config 0 descriptor?? [ 607.870290][ T24] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 607.879966][ T24] usb 2-1: No valid video chain found. [ 607.898895][ T971] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 607.922808][ T971] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 607.933007][ T971] usb 10-1: can't read configurations, error -61 [ 607.941213][ T971] usb usb10-port1: unable to enumerate USB device [ 607.999090][ T5869] usb 4-1: device descriptor read/64, error -71 [ 608.052049][T25468] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 608.069422][ T5827] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 608.085378][T25431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25431 comm=syz.1.2901 [ 608.101628][ T971] usb 2-1: USB disconnect, device number 22 [ 608.109998][ T5869] usb usb4-port1: attempt power cycle [ 608.150972][T25468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2906'. [ 608.165229][T25468] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 608.175070][T25468] macsec1: entered allmulticast mode [ 608.180852][T25468] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 608.189949][T25468] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 608.197229][T25468] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 608.229955][ T5827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.240534][ T5827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.249425][ T5827] usb 5-1: config 1 has no interface number 0 [ 608.255694][ T5827] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.270370][ T5827] usb 5-1: New USB device found, idVendor=0525, idProduct=a409, bcdDevice= 0.40 [ 608.280478][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.288481][ T5827] usb 5-1: Product: syz [ 608.292681][ T5827] usb 5-1: Manufacturer: syz [ 608.306265][ T5827] usb 5-1: SerialNumber: syz [ 608.323137][ T5827] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 608.332034][ T5827] cdc_ncm 5-1:1.1: bind() failure [ 608.336881][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 608.336894][ T30] audit: type=1400 audit(1743029872.015:2648): avc: denied { setopt } for pid=25483 comm="syz.8.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 608.459411][ T5869] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 608.491787][ T5869] usb 4-1: device descriptor read/8, error -71 [ 608.528048][ T971] usb 5-1: USB disconnect, device number 86 [ 608.739388][ T5869] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 608.773682][ T5869] usb 4-1: device descriptor read/8, error -71 [ 608.889068][ T5869] usb usb4-port1: unable to enumerate USB device [ 608.982723][T25498] usb usb7: usbfs: process 25498 (syz.1.2909) did not claim interface 0 before use [ 609.044928][T25484] syz.8.2907 (25484): drop_caches: 2 [ 609.060562][T25484] syz.8.2907 (25484): drop_caches: 2 [ 609.167591][T25510] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2912'. [ 609.220811][T25503] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 609.227414][T25503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 609.235769][T25503] vhci_hcd vhci_hcd.0: Device attached [ 609.382466][ T30] audit: type=1400 audit(1743029873.064:2649): avc: denied { mounton } for pid=25518 comm="syz.8.2914" path="/50/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 609.410360][ T971] vhci_hcd: vhci_device speed not set [ 609.632487][ T971] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 610.708898][ T30] audit: type=1800 audit(1743029874.384:2650): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2915" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 611.046964][ T30] audit: type=1800 audit(1743029874.714:2651): pid=25582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2916" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 611.068312][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.380009][ T5869] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 611.398756][ T5870] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 611.531649][ T5869] usb 10-1: device descriptor read/64, error -71 [ 611.559549][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 611.577428][ T5870] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 611.596092][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 611.610337][ T5870] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 611.623405][ T5870] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 611.636623][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 611.644860][ T5870] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 611.654016][ T5870] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 611.674465][ T5870] usb 5-1: Product: syz [ 611.688730][ T5870] usb 5-1: Manufacturer: syz [ 611.693328][ T5870] usb 5-1: SerialNumber: syz [ 611.702533][ T5870] usb 5-1: config 0 descriptor?? [ 611.709865][ T5870] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 611.728187][ T5870] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 611.781831][ T5869] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 611.790499][ T30] audit: type=1326 audit(1743029875.474:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.8.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cd38d169 code=0x7fc00000 [ 611.917071][T25599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.925833][ T5869] usb 10-1: device descriptor read/64, error -71 [ 611.934441][T25599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.950455][T25599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.966368][T25599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.992594][ T5827] usb 5-1: USB disconnect, device number 87 [ 611.999811][ T5827] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 612.037472][T25516] vhci_hcd: connection reset by peer [ 612.068988][T10518] vhci_hcd: stop threads [ 612.073326][ T5869] usb usb10-port1: attempt power cycle [ 612.082389][T10518] vhci_hcd: release socket [ 612.092506][T10518] vhci_hcd: disconnect device [ 612.268759][T25645] netlink: 'syz.3.2926': attribute type 10 has an invalid length. [ 612.314386][T25645] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.328941][ T5870] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 612.332436][T25645] bond0: (slave team0): Enslaving as an active interface with an up link [ 612.510540][ T5869] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 612.532393][ T30] audit: type=1326 audit(1743029876.204:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.8.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97cd38d169 code=0x7fc00000 [ 612.532914][ T5869] usb 10-1: device descriptor read/8, error -71 [ 612.591218][ T30] audit: type=1326 audit(1743029876.204:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.8.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cd38d169 code=0x7fc00000 [ 612.730900][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 612.745699][ T30] audit: type=1326 audit(1743029876.204:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.8.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cd38d169 code=0x7fc00000 [ 612.769669][ T30] audit: type=1326 audit(1743029876.204:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.8.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cd38d169 code=0x7fc00000 [ 612.793400][ T30] audit: type=1326 audit(1743029876.204:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.8.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cd38d169 code=0x7fc00000 [ 612.831275][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 612.855828][ T5870] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 612.877069][ T5870] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 132 [ 613.189613][ T5870] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=14.47 [ 613.203188][ T5870] usb 2-1: New USB device strings: Mfr=55, Product=172, SerialNumber=120 [ 613.212686][ T5870] usb 2-1: Product: syz [ 613.217891][ T5870] usb 2-1: Manufacturer: syz [ 613.224612][ T5870] usb 2-1: SerialNumber: syz [ 613.232504][ T5870] usb 2-1: config 0 descriptor?? [ 613.239062][T25639] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 613.239090][ T5869] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 613.268449][ T5870] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 613.274464][ T5870] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 613.283214][ T5870] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 613.290275][ T5869] usb 10-1: device descriptor read/8, error -71 [ 613.290328][ T5870] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 613.303258][ T5870] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 613.308732][ T5827] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 613.414041][ T5869] usb usb10-port1: unable to enumerate USB device [ 613.478798][ T5827] usb 9-1: Using ep0 maxpacket: 8 [ 613.496676][ T5827] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 613.512200][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.526740][ T5827] usb 9-1: Product: syz [ 613.531408][ T5827] usb 9-1: Manufacturer: syz [ 613.536016][ T5827] usb 9-1: SerialNumber: syz [ 613.542062][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 613.542075][ T30] audit: type=1400 audit(1743029877.224:2664): avc: denied { getopt } for pid=25677 comm="syz.4.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 613.544351][ T5827] usb 9-1: config 0 descriptor?? [ 613.567482][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.758817][ T5870] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 613.783014][ T5827] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 613.921034][ T5870] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 613.932138][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.941523][ T5870] usb 4-1: config 0 descriptor?? [ 613.948306][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 614.779099][ T971] vhci_hcd: vhci_device speed not set [ 614.803402][ T30] audit: type=1400 audit(1743029878.484:2665): avc: denied { checkpoint_restore } for pid=25701 comm="syz.9.2936" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 615.077280][T10519] Bluetooth: hci4: Frame reassembly failed (-84) [ 615.112379][ T2154] usb 2-1: USB disconnect, device number 23 [ 615.119094][ T2154] mcba_usb 2-1:0.0 can0: device disconnected [ 615.164438][T25725] xt_TPROXY: Can be used only with -p tcp or -p udp [ 615.396053][ T30] audit: type=1326 audit(1743029879.074:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.421315][ T30] audit: type=1326 audit(1743029879.074:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.445250][ T30] audit: type=1326 audit(1743029879.074:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.469156][ T30] audit: type=1326 audit(1743029879.074:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.494028][ T30] audit: type=1326 audit(1743029879.074:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.525882][ T30] audit: type=1326 audit(1743029879.074:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.579983][ T30] audit: type=1326 audit(1743029879.124:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.728943][ T30] audit: type=1326 audit(1743029879.124:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd988b8d169 code=0x7ffc0000 [ 615.752403][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.311577][ T5827] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 616.359946][ T5870] gp8psk: usb out operation failed. [ 616.365223][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 616.377541][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 616.388244][ T5870] usb 4-1: USB disconnect, device number 89 [ 617.099980][ T5825] Bluetooth: hci4: command 0x1003 tx timeout [ 617.123091][ T55] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 617.133047][ T5870] usb 9-1: USB disconnect, device number 23 [ 617.515178][T25783] netlink: 'syz.9.2948': attribute type 1 has an invalid length. [ 617.962605][T25829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.000799][T25829] veth3: entered promiscuous mode [ 618.013926][T25829] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 618.027572][T25841] tipc: Started in network mode [ 618.033397][T25841] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 618.043408][T25841] tipc: Enabled bearer , priority 10 [ 618.056848][T25841] Bluetooth: MGMT ver 1.23 [ 618.080422][T25852] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 618.086938][T25852] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 618.095114][T25852] vhci_hcd vhci_hcd.0: Device attached [ 618.293741][T25859] netlink: 'syz.9.2953': attribute type 1 has an invalid length. [ 618.438366][ T5827] vhci_hcd: vhci_device speed not set [ 618.678318][ T5899] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 618.686443][ T5827] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 618.975458][T25907] infiniband syz1: set active [ 618.982301][T25907] infiniband syz1: added team_slave_0 [ 619.035222][T25907] RDS/IB: syz1: added [ 619.039732][T25907] smc: adding ib device syz1 with port count 1 [ 619.046014][T25907] smc: ib device syz1 port 1 has pnetid [ 619.060040][ T971] tipc: Node number set to 4269801491 [ 619.557759][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 619.557776][ T30] audit: type=1400 audit(1743029883.234:2684): avc: denied { mounton } for pid=25922 comm="syz.9.2962" path="/60/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 619.577588][T25925] loop7: detected capacity change from 0 to 4 [ 619.586567][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.614490][ T30] audit: type=1400 audit(1743029883.244:2685): avc: denied { read } for pid=25922 comm="syz.9.2962" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 619.636109][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.649101][ T5899] usb 2-1: config 0 has no interfaces? [ 619.654585][ T5899] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 619.718890][ T5929] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 619.737578][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.323598][ T30] audit: type=1400 audit(1743029883.244:2686): avc: denied { open } for pid=25922 comm="syz.9.2962" path="/60/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 620.418757][ T5929] usb 9-1: config 6 has an invalid interface number: 156 but max is 0 [ 620.448744][ T5899] usb 2-1: config 0 descriptor?? [ 620.449397][ T5929] usb 9-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 620.468011][ T5929] usb 9-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 620.479469][ T5929] usb 9-1: config 6 has no interface number 0 [ 620.505638][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 620.518723][ T30] audit: type=1400 audit(1743029884.194:2687): avc: denied { search } for pid=21851 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 621.037798][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0xC has invalid maxpacket 189, setting to 64 [ 621.058745][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 621.071432][ T30] audit: type=1400 audit(1743029884.714:2688): avc: denied { getattr } for pid=21851 comm="syz-executor" name="saved_tgids" dev="tracefs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 621.088708][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 621.106324][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 621.117408][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 621.128368][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 621.139406][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 621.150323][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 621.161122][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 621.172091][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 621.182795][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 621.193696][ T5929] usb 9-1: config 6 interface 156 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 621.204408][ T5929] usb 9-1: config 6 interface 156 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 621.215372][ T5929] usb 9-1: config 6 interface 156 has no altsetting 0 [ 621.223981][ T5929] usb 9-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=2c.a8 [ 621.233079][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.241421][ T5929] usb 9-1: Product: syz [ 621.245577][ T5929] usb 9-1: Manufacturer: syz [ 621.250185][ T5929] usb 9-1: SerialNumber: syz [ 621.289066][T25853] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 621.297256][T25908] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 621.376397][ T12] vhci_hcd: stop threads [ 621.388976][ T12] vhci_hcd: release socket [ 621.393566][ T12] vhci_hcd: disconnect device [ 622.288897][ T5870] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 622.311519][ T971] usb 2-1: USB disconnect, device number 24 [ 622.449941][ T5870] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 622.476111][ T5870] usb 4-1: config 0 has no interface number 0 [ 622.502072][ T5870] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.515612][T26004] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2968'. [ 622.545978][ T5870] usb 4-1: config 0 interface 132 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 622.576863][ T5870] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 622.603627][ T5870] usb 4-1: config 0 interface 132 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.653299][ T5929] ax88179_178a 9-1:6.156: probe with driver ax88179_178a failed with error -22 [ 622.670229][ T5870] usb 4-1: New USB device found, idVendor=20f4, idProduct=648b, bcdDevice= 3.67 [ 622.688731][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.693262][ T5929] usb 9-1: USB disconnect, device number 24 [ 622.696713][ T5870] usb 4-1: Product: syz [ 622.696729][ T5870] usb 4-1: Manufacturer: syz [ 622.696742][ T5870] usb 4-1: SerialNumber: syz [ 622.719290][ T5870] usb 4-1: config 0 descriptor?? [ 622.727303][T25976] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 622.943376][T25976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.955339][T26020] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.994072][T25976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.100226][ T5868] usb 4-1: USB disconnect, device number 90 [ 623.175020][T26020] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.288317][T26037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.302249][T26037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.329576][T26020] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.400647][T26020] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.509995][T26020] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.525528][T26020] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.528792][ T971] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 623.548094][T26020] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.567289][T26020] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.704092][ T971] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 623.715461][ T971] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 623.726172][ T971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.740810][ T971] usb 2-1: string descriptor 0 read error: -22 [ 623.762315][ T971] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.784181][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.825116][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.842395][ T971] usb 2-1: 0:2 : does not exist [ 624.320451][ T5929] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 624.340970][T26072] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 624.364972][ T24] usb 2-1: USB disconnect, device number 25 [ 624.388880][ T5827] vhci_hcd: vhci_device speed not set [ 624.481420][ T5929] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 624.495208][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.512120][ T5929] usb 9-1: Product: syz [ 624.520722][ T5929] usb 9-1: Manufacturer: syz [ 624.530291][ T5929] usb 9-1: SerialNumber: syz [ 624.548597][ T5929] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 624.565551][ T971] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 624.641777][T26091] netlink: 'syz.3.2974': attribute type 58 has an invalid length. [ 625.004968][ T5870] usb 9-1: USB disconnect, device number 25 [ 625.836206][ T971] usb 9-1: Service connection timeout for: 256 [ 625.905561][ T971] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 625.920290][ T971] ath9k_htc: Failed to initialize the device [ 625.926422][ T5870] usb 9-1: ath9k_htc: USB layer deinitialized [ 626.479086][ T971] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 626.604984][T26155] program syz.4.2984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.645377][ T971] usb 9-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 626.654568][ T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.673192][ T971] usb 9-1: Product: syz [ 626.686111][ T971] usb 9-1: Manufacturer: syz [ 626.702089][ T971] usb 9-1: SerialNumber: syz [ 626.709245][ T5827] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 626.734102][ T971] usb 9-1: config 0 descriptor?? [ 626.777819][ T55] Bluetooth: hci4: urb ffff88802985e100 submission failed (2) [ 626.873888][ T5827] usb 2-1: config 6 has an invalid interface number: 174 but max is 0 [ 626.882457][ T5827] usb 2-1: config 6 has no interface number 0 [ 626.898898][ T5827] usb 2-1: config 6 interface 174 has no altsetting 0 [ 626.910561][ T5827] usb 2-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=9c.1f [ 626.928958][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.947121][ T5827] usb 2-1: Product: syz [ 626.971375][ T5827] usb 2-1: Manufacturer: syz [ 626.990226][ T5827] usb 2-1: SerialNumber: syz [ 627.081048][ T971] usb 9-1: USB disconnect, device number 26 [ 627.172269][T26182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 627.274633][ T5827] rtl8150 2-1:6.174: couldn't find required endpoints [ 627.292351][ T5827] rtl8150 2-1:6.174: probe with driver rtl8150 failed with error -5 [ 627.305140][ T5827] usb 2-1: USB disconnect, device number 26 [ 627.458919][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 627.518817][ T5869] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 627.608905][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 627.620249][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 627.639233][ T24] usb 5-1: config 6 has an invalid interface number: 215 but max is 0 [ 627.647401][ T24] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 627.668774][ T24] usb 5-1: config 6 has no interface number 0 [ 627.674871][ T24] usb 5-1: config 6 interface 215 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.692251][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 627.702349][ T5869] usb 4-1: can't read configurations, error -61 [ 627.708401][ T24] usb 5-1: config 6 interface 215 has no altsetting 0 [ 627.732954][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0159, bcdDevice=98.c1 [ 627.742181][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.751180][ T24] usb 5-1: Product: syz [ 627.756905][ T24] usb 5-1: Manufacturer: syz [ 627.764027][ T24] usb 5-1: SerialNumber: syz [ 627.930969][ T5869] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 628.052387][T26185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.082265][T26185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.115049][ T24] hub 5-1:6.215: bad descriptor, ignoring hub [ 628.128809][ T24] hub 5-1:6.215: probe with driver hub failed with error -5 [ 628.189739][ T24] usb 5-1: USB disconnect, device number 88 [ 628.220205][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 628.232091][ T5869] usb 4-1: can't read configurations, error -61 [ 628.240578][ T5869] usb usb4-port1: attempt power cycle [ 628.501755][T26229] rdma_op ffff88804a2699f0 conn xmit_rdma 0000000000000000 [ 628.758890][ T5869] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 628.791277][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 628.805828][ T5869] usb 4-1: can't read configurations, error -61 [ 628.859035][T26264] cgroup: fork rejected by pids controller in /syz4 [ 628.910231][T26264] bio_check_eod: 22 callbacks suppressed [ 628.910292][T26264] syz.4.3001: attempt to access beyond end of device [ 628.910292][T26264] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 629.043620][ T5869] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 629.173233][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 629.181507][ T5869] usb 4-1: can't read configurations, error -61 [ 629.201847][ T5869] usb usb4-port1: unable to enumerate USB device [ 629.211250][T26267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.634093][ T30] audit: type=1400 audit(1743029893.314:2689): avc: denied { read } for pid=26283 comm="syz.1.3005" path="socket:[83352]" dev="sockfs" ino=83352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 629.737438][T26287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3005'. [ 630.114386][ T3577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.263082][ T3577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.401218][ T3577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.472558][T26308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3009'. [ 630.559165][ T5868] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 630.824412][ T3577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.876889][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 630.889426][ T5868] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.906037][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 630.915373][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 630.923132][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 630.930615][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 630.937778][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 630.962871][ T5868] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 630.993092][ T5868] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 631.005270][ T5868] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 631.014576][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.026802][T26300] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 631.109653][T26335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3011'. [ 631.234075][T26341] program syz.3.3011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.728370][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.741080][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.752032][ T3577] bond0 (unregistering): Released all slaves [ 631.804165][ T30] audit: type=1400 audit(1743029895.484:2690): avc: denied { append } for pid=26357 comm="syz.8.3013" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 631.883281][ T3577] tipc: Disabling bearer [ 631.895969][T26300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.933617][ T3577] tipc: Left network mode [ 631.935571][T26314] chnl_net:caif_netlink_parms(): no params data found [ 631.963913][T26300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.090284][ T5868] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 632.108846][ T5868] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input51 [ 632.175754][T26314] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.188841][T26314] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.196159][T26314] bridge_slave_0: entered allmulticast mode [ 632.203618][T26314] bridge_slave_0: entered promiscuous mode [ 632.215638][T26314] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.224900][T26314] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.232462][T26314] bridge_slave_1: entered allmulticast mode [ 632.269626][T26314] bridge_slave_1: entered promiscuous mode [ 632.278920][ T5870] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 632.443536][T26546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.456265][T26546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.477821][ T5870] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 632.510037][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.518090][ T5870] usb 4-1: Product: syz [ 632.527369][ T47] usb 2-1: USB disconnect, device number 27 [ 632.527408][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 632.554886][T26314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.566143][ T5870] usb 4-1: Manufacturer: syz [ 632.574717][ T5870] usb 4-1: SerialNumber: syz [ 632.584217][ T5870] usb 4-1: config 0 descriptor?? [ 632.592599][ T5870] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 095 [ 632.607620][ T30] audit: type=1400 audit(1743029896.284:2691): avc: denied { read write } for pid=26571 comm="syz.1.3017" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 632.631187][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.691087][ T30] audit: type=1400 audit(1743029896.284:2692): avc: denied { open } for pid=26571 comm="syz.1.3017" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 632.714548][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.728783][ T3577] hsr_slave_0: left promiscuous mode [ 632.764490][ T3577] hsr_slave_1: left promiscuous mode [ 632.779235][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.788997][ T971] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 632.799718][ T30] audit: type=1326 audit(1743029896.484:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0b8d169 code=0x7ffc0000 [ 633.088973][ T55] Bluetooth: hci3: command tx timeout [ 633.140116][ T5870] i2c i2c-1: failure reading functionality [ 633.146262][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.151109][ T5870] i2c i2c-1: connected i2c-tiny-usb device [ 633.153674][ T30] audit: type=1326 audit(1743029896.484:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0b8d169 code=0x7ffc0000 [ 633.182565][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.189927][ T5870] usb 4-1: USB disconnect, device number 95 [ 633.199676][ T30] audit: type=1326 audit(1743029896.484:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d0b8cd6b code=0x7ffc0000 [ 633.209478][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.282900][ T30] audit: type=1326 audit(1743029896.484:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d0b8cd6b code=0x7ffc0000 [ 633.309778][ T971] usb 9-1: Using ep0 maxpacket: 32 [ 633.365213][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.365258][ T971] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 633.380687][ T30] audit: type=1326 audit(1743029896.504:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0bbfa25 code=0x7ffc0000 [ 633.404366][ T971] usb 9-1: config 0 has no interface number 0 [ 633.404639][ T30] audit: type=1326 audit(1743029896.824:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0b8d169 code=0x7ffc0000 [ 633.443240][ T971] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 633.445986][ T3577] veth1_macvtap: left promiscuous mode [ 633.759951][T26597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'. [ 633.768931][T26597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3018'. [ 633.777942][T26597] netlink: 'syz.1.3018': attribute type 15 has an invalid length. [ 633.863970][ T3577] veth0_macvtap: left promiscuous mode [ 633.894687][ T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.903113][ T971] usb 9-1: Product: syz [ 633.907279][ T971] usb 9-1: Manufacturer: syz [ 633.911900][ T971] usb 9-1: SerialNumber: syz [ 633.917235][ T3577] veth1_vlan: left promiscuous mode [ 633.939179][ T971] usb 9-1: config 0 descriptor?? [ 633.958788][ T3577] veth0_vlan: left promiscuous mode [ 633.979477][ T971] smsc95xx v2.0.0 [ 634.109624][T26594] Falling back ldisc for ptm0. [ 634.311595][ T971] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 634.486051][ T971] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 634.539687][ T971] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 634.567446][ T971] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 634.588503][ T971] usb 9-1: USB disconnect, device number 27 [ 634.812365][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 634.846278][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 635.033454][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 635.033470][ T30] audit: type=1400 audit(1743029898.714:2700): avc: denied { write } for pid=26627 comm="syz.3.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 635.101279][ T55] Bluetooth: hci3: command tx timeout [ 635.366123][T26314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.428206][ T5827] infiniband syz2: ib_query_port failed (-19) [ 635.504959][T26314] team0: Port device team_slave_0 added [ 635.519602][T26314] team0: Port device team_slave_1 added [ 635.610823][T26314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.624073][T26314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.649966][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.663366][T26314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.677961][T26314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.687478][T26314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.718282][T26314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.775241][T26314] hsr_slave_0: entered promiscuous mode [ 635.782041][T26314] hsr_slave_1: entered promiscuous mode [ 635.787924][T26314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.795534][T26314] Cannot create hsr debugfs directory [ 635.799442][ T5827] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 636.008853][ T5827] usb 9-1: Using ep0 maxpacket: 16 [ 636.017134][ T5827] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 636.034818][ T5827] usb 9-1: config 0 has no interface number 0 [ 636.048866][ T5827] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 636.078884][ T5827] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 636.109188][ T5827] usb 9-1: config 0 interface 41 has no altsetting 0 [ 636.120202][ T5827] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 636.138736][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.158778][ T5827] usb 9-1: Product: syz [ 636.162948][ T5827] usb 9-1: Manufacturer: syz [ 636.188800][ T5827] usb 9-1: SerialNumber: syz [ 636.197002][ T5827] usb 9-1: config 0 descriptor?? [ 636.209237][T26698] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 636.226511][T26698] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 636.268727][ T5868] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 636.412631][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.422523][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.449052][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 636.455163][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.463074][T26698] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 636.474318][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.482104][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 636.489481][ T5868] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 636.499685][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.506767][ T5868] usb 4-1: config 0 has no interface number 0 [ 636.519470][T26698] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 636.542393][ T5868] usb 4-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=70.1a [ 636.575906][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.593362][ T5868] usb 4-1: Product: syz [ 636.597574][ T5868] usb 4-1: Manufacturer: syz [ 636.604345][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.618956][ T5868] usb 4-1: SerialNumber: syz [ 636.627931][ T5868] usb 4-1: config 0 descriptor?? [ 636.722535][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.784973][T26314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 636.809114][T26314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 636.846687][T26314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 636.878747][ T30] audit: type=1400 audit(1743029900.554:2701): avc: denied { execute } for pid=26825 comm="syz.3.3025" name="file1" dev="ramfs" ino=87767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 636.886081][ T5868] usb 4-1: USB disconnect, device number 96 [ 636.900692][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.946727][ T30] audit: type=1400 audit(1743029900.554:2702): avc: denied { execute_no_trans } for pid=26825 comm="syz.3.3025" path="/93/file0/file1" dev="ramfs" ino=87767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 636.980589][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.994537][T26314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 637.059601][ T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.178935][ T55] Bluetooth: hci3: command tx timeout [ 637.220709][ T5827] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 637.356998][ T36] bridge_slave_1: left allmulticast mode [ 637.364634][ T36] bridge_slave_1: left promiscuous mode [ 637.390892][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.429981][ T36] bridge_slave_0: left allmulticast mode [ 637.445774][ T36] bridge_slave_0: left promiscuous mode [ 637.455948][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.481402][ T5827] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 637.518883][ T5827] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 637.534451][ T5827] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 637.553076][ T5827] usb 9-1: USB disconnect, device number 28 [ 637.628987][ T47] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 637.812501][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 637.838437][ T47] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 637.852685][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.866460][ T47] usb 2-1: config 0 descriptor?? [ 637.903849][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.913678][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.923313][ T36] bond0 (unregistering): Released all slaves [ 638.025106][ T36] bond1 (unregistering): (slave veth3): Releasing backup interface [ 638.042259][T27013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.042328][ T36] bond1 (unregistering): Released all slaves [ 638.087829][T26314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.105427][T26314] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.146789][ T47] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 638.164851][T26314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 638.193592][ T47] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 638.204151][T26314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.214996][ T47] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 638.253066][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.260172][T10514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.273704][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.280802][T10514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.518260][T26849] chnl_net:caif_netlink_parms(): no params data found [ 638.607233][T27055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 638.680205][ T55] Bluetooth: hci1: command tx timeout [ 639.166037][T26849] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.173268][T26849] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.181224][T26849] bridge_slave_0: entered allmulticast mode [ 639.187519][T26849] bridge_slave_0: entered promiscuous mode [ 639.202443][T26314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.222147][ T36] hsr_slave_0: left promiscuous mode [ 639.228837][ T36] hsr_slave_1: left promiscuous mode [ 639.239408][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.246907][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.255859][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.263316][ T55] Bluetooth: hci3: command tx timeout [ 639.272053][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.287430][ T36] veth1_macvtap: left promiscuous mode [ 639.293672][ T36] veth0_macvtap: left promiscuous mode [ 639.299276][ T36] veth1_vlan: left promiscuous mode [ 639.304299][ T30] audit: type=1400 audit(1743029902.984:2703): avc: denied { create } for pid=27121 comm="syz.8.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 639.304514][ T36] veth0_vlan: left promiscuous mode [ 639.623623][ T36] team0 (unregistering): Port device team_slave_1 removed [ 639.654439][ T36] team0 (unregistering): Port device team_slave_0 removed [ 639.943039][T26849] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.950360][T26849] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.957482][T26849] bridge_slave_1: entered allmulticast mode [ 639.965225][T26849] bridge_slave_1: entered promiscuous mode [ 639.996048][T26849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.047741][T26849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.077770][T27163] netlink: 'syz.8.3034': attribute type 2 has an invalid length. [ 640.124759][T26849] team0: Port device team_slave_0 added [ 640.141101][T26849] team0: Port device team_slave_1 added [ 640.226979][T26849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.239602][T26849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.265464][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.273720][T26849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.297544][T26849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.308624][T26849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.334682][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.341334][T26849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.352495][T26314] veth0_vlan: entered promiscuous mode [ 640.368050][T26314] veth1_vlan: entered promiscuous mode [ 640.392468][ T36] IPVS: stop unused estimator thread 0... [ 640.403045][T26849] hsr_slave_0: entered promiscuous mode [ 640.411743][T26849] hsr_slave_1: entered promiscuous mode [ 640.417532][T26849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.425132][T26849] Cannot create hsr debugfs directory [ 640.443778][T26314] veth0_macvtap: entered promiscuous mode [ 640.471133][T26314] veth1_macvtap: entered promiscuous mode [ 640.505627][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.516222][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.526236][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.529114][ T5870] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 640.536909][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.554197][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.566143][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.576410][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.578763][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 640.586886][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.605184][T26314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.630382][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.640844][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.651264][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.661680][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.671493][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.681925][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.691734][T26314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.700134][ T5870] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 640.702648][ T55] Bluetooth: hci1: command tx timeout [ 640.716654][T26314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.727172][T26314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.736162][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.737939][T26314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.748958][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 640.755844][T26314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.758617][ T5870] usb 9-1: config 0 descriptor?? [ 640.767371][T26314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.780036][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 640.780621][T26314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.793258][ T24] usb 4-1: config 0 has an invalid interface number: 231 but max is 1 [ 640.822499][ T24] usb 4-1: config 0 has no interface number 1 [ 640.829511][ T24] usb 4-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 640.840871][ T24] usb 4-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 640.855228][ T24] usb 4-1: config 0 interface 231 has no altsetting 0 [ 640.874021][ T24] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 640.883450][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.896821][ T24] usb 4-1: Product: syz [ 640.902593][ T24] usb 4-1: Manufacturer: syz [ 640.907437][ T24] usb 4-1: SerialNumber: syz [ 640.907460][T10519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.915709][ T24] usb 4-1: config 0 descriptor?? [ 640.928624][T10519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.946313][T10519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.957801][T10519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.230899][T27211] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3035'. [ 641.253864][ T30] audit: type=1400 audit(1743029904.914:2704): avc: denied { nlmsg_read } for pid=27204 comm="syz.8.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 641.255702][ T24] usb 4-1: Could not set interface, error -71 [ 641.297558][ T24] usb 4-1: USB disconnect, device number 97 [ 641.479791][ T30] audit: type=1400 audit(1743029905.024:2705): avc: denied { mount } for pid=27336 comm="syz.4.3006" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 641.565958][T27359] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 641.570577][T26849] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 641.572473][T27359] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 641.599391][T27359] vhci_hcd vhci_hcd.0: Device attached [ 641.660824][T26849] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 641.684345][ T5870] gp8psk: usb in 128 operation failed. [ 641.685583][T26849] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 641.697397][ T5870] gp8psk: usb in 137 operation failed. [ 641.704831][T26849] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 641.712706][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 641.725868][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 641.730054][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 641.742277][ T5870] usb 9-1: USB disconnect, device number 29 [ 641.816087][ T5869] vhci_hcd: vhci_device speed not set [ 641.899650][ T5869] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 642.047227][T26849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.078491][T26849] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.100592][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.107673][T10514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.112440][T27388] [U] 1WT`8H$09\ [ 642.120532][T27388] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 642.128051][T27388] [U] 4XZ^Y)MC. OȞPOW [ 642.137260][T27388] [U] ä%Z [ 642.137655][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.141090][T27388] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 642.147506][T10514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.274030][T26849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.284458][T26849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.299782][T27389] xt_CT: No such helper "snmp_trap" [ 642.403667][ T30] audit: type=1400 audit(1743029906.084:2706): avc: denied { remount } for pid=27399 comm="syz.8.3042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 642.425617][T26849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.477022][T27403] netlink: 'syz.3.3043': attribute type 9 has an invalid length. [ 642.480728][T27388] [U] P>BЍ̖Z% [ 642.486641][T27403] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3043'. [ 642.773989][T27417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3044'. [ 642.846633][ T5825] Bluetooth: hci1: command tx timeout [ 643.124908][T26849] veth0_vlan: entered promiscuous mode [ 643.242964][T26849] veth1_vlan: entered promiscuous mode [ 643.734785][T26849] veth0_macvtap: entered promiscuous mode [ 643.751482][T26849] veth1_macvtap: entered promiscuous mode [ 643.776383][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.788151][ T30] audit: type=1400 audit(1743029907.454:2707): avc: denied { watch } for pid=27430 comm="syz.3.3047" path="/102/bus" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 643.889050][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.900133][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.910692][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.920628][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.932641][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.396181][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.407317][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.417678][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.428100][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.438626][T26849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.457834][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.468884][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.479486][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.491180][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.523089][T27360] vhci_hcd: connection reset by peer [ 644.531564][T10519] vhci_hcd: stop threads [ 644.536435][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.547641][T10519] vhci_hcd: release socket [ 644.554328][T10519] vhci_hcd: disconnect device [ 644.561547][T27438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3048'. [ 644.576759][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.588328][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.598904][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.652318][T26849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.662880][T26849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.677605][T26849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.700773][T26849] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.711912][T26849] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.721366][T26849] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.731674][T26849] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.775465][T10519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.791412][T10519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.808495][T10517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.818228][T10517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.859364][ T5825] Bluetooth: hci1: command tx timeout [ 644.887434][ T30] audit: type=1400 audit(1743029908.564:2708): avc: denied { map } for pid=27450 comm="syz.1.3051" path="socket:[90465]" dev="sockfs" ino=90465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 644.911681][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 644.938840][ T971] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 644.979662][ T30] audit: type=1400 audit(1743029908.634:2709): avc: denied { listen } for pid=27465 comm="syz.6.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 645.088881][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 645.098095][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 645.107392][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 645.110805][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 645.121135][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 645.130412][ T24] usb 5-1: config 1 has no interface number 0 [ 645.136556][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.137762][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.160990][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 645.176482][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 645.186137][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.203452][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.208693][ T971] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 645.232025][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 645.233297][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.262561][ T971] usb 4-1: config 0 descriptor?? [ 645.437316][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 645.478610][ T30] audit: type=1400 audit(1743029909.154:2710): avc: denied { append } for pid=27506 comm="syz.6.3055" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 645.552581][ T30] audit: type=1400 audit(1743029909.224:2711): avc: denied { connect } for pid=27506 comm="syz.6.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 645.790973][ T30] audit: type=1400 audit(1743029909.464:2712): avc: denied { execute } for pid=27512 comm="syz.8.3057" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=90781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 645.914213][ T971] usbhid 4-1:0.0: can't add hid device: -71 [ 645.924980][ T971] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 645.936919][ T971] usb 4-1: USB disconnect, device number 98 [ 646.478979][ T24] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 646.630359][ T5825] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 646.642421][T27536] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3060'. [ 647.011603][ T5869] vhci_hcd: vhci_device speed not set [ 647.290882][T27507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.296912][T27507] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.303685][T27507] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 647.309780][T27507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.315790][T27507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.321775][T27507] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 647.328154][T27507] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 647.335066][T27507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.341237][T27507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 647.347677][T27507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 647.494200][ T30] audit: type=1400 audit(1743029911.174:2713): avc: denied { setattr } for pid=27562 comm="syz.3.3064" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 647.582390][ T10] usb 5-1: USB disconnect, device number 89 [ 647.595149][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 647.709446][T27580] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 647.715979][T27580] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 647.733839][T27580] vhci_hcd vhci_hcd.0: Device attached [ 647.747745][T27581] vhci_hcd: connection closed [ 647.747962][T10519] vhci_hcd: stop threads [ 647.766142][T10519] vhci_hcd: release socket [ 647.770946][T10519] vhci_hcd: disconnect device [ 649.107796][T27593] dccp_invalid_packet: P.Data Offset(10) too large [ 649.350622][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 649.356643][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 649.362866][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.609527][T21834] Bluetooth: hci5: command 0x0c1a tx timeout [ 649.615631][T21834] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.939845][ T5869] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 650.225138][ T5869] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 650.286560][ T5869] usb 7-1: config 0 has no interface number 0 [ 650.385848][ T5869] usb 7-1: config 0 interface 3 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 650.470660][ T5869] usb 7-1: config 0 interface 3 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 650.501670][ T5869] usb 7-1: config 0 interface 3 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 650.525676][T27634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.535773][ T5869] usb 7-1: config 0 interface 3 has no altsetting 0 [ 650.539496][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 650.545347][ T5869] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 650.562515][T27634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.572632][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.622597][ T5869] usb 7-1: config 0 descriptor?? [ 650.632514][ T5869] hub 7-1:0.3: bad descriptor, ignoring hub [ 650.638522][ T5869] hub 7-1:0.3: probe with driver hub failed with error -5 [ 650.646628][ T5869] sierra 7-1:0.3: Sierra USB modem converter detected [ 650.758927][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 650.828361][T27656] sp0: Synchronizing with TNC [ 650.836909][ T5869] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 650.868716][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 650.877677][ T5869] usb 7-1: USB disconnect, device number 17 [ 650.883483][ T24] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=cd.10 [ 650.892855][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.893870][ T5869] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 650.901160][ T24] usb 5-1: Product: syz [ 650.913979][ T24] usb 5-1: Manufacturer: syz [ 650.914345][ T5869] sierra 7-1:0.3: device disconnected [ 650.918937][ T24] usb 5-1: SerialNumber: syz [ 650.935338][ T24] usb 5-1: config 0 descriptor?? [ 650.942107][ T24] gspca_main: spca501-2.14.0 probing 0000:0000 [ 651.058572][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 651.073959][ T30] audit: type=1400 audit(1743029914.754:2714): avc: denied { bind } for pid=27684 comm="syz.3.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 651.137912][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.152384][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.162315][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.177157][ T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 651.187525][ T30] audit: type=1400 audit(1743029914.754:2715): avc: denied { setopt } for pid=27684 comm="syz.3.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 651.215518][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.421548][ T10] usb 9-1: config 0 descriptor?? [ 651.457395][ T24] gspca_spca501: reg write: error -110 [ 651.506564][ T24] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 651.513807][ T24] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 651.938782][T21834] Bluetooth: hci0: command 0x0c1a tx timeout [ 651.944902][T21834] Bluetooth: hci3: command 0x0c1a tx timeout [ 651.951065][T21834] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.298768][ T971] usb 5-1: USB disconnect, device number 90 [ 652.386791][T27713] xt_TCPMSS: Only works on TCP SYN packets [ 652.405930][T27713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3085'. [ 652.427839][T27713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3085'. [ 652.460931][T27713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3085'. [ 652.479470][T27713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3085'. [ 652.524153][T27642] tipc: Started in network mode [ 652.529131][T27642] tipc: Node identity 4, cluster identity 4711 [ 652.535369][T27642] tipc: Node number set to 4 [ 652.548019][ T30] audit: type=1400 audit(1743029916.224:2716): avc: denied { setopt } for pid=27714 comm="syz.4.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 652.565978][ T10] koneplus 0003:1E7D:2E22.0032: item fetching failed at offset 0/2 [ 652.587875][ T10] koneplus 0003:1E7D:2E22.0032: parse failed [ 652.625493][ T10] koneplus 0003:1E7D:2E22.0032: probe with driver koneplus failed with error -22 [ 652.695158][T27726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3089'. [ 652.716637][T27726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3089'. [ 652.775497][ T10] usb 9-1: USB disconnect, device number 30 [ 652.878742][ T5898] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 653.049932][ T5898] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 653.061148][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 653.067737][ T5898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 653.068712][ T5827] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 653.076832][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.093804][ T5898] usb 4-1: config 0 descriptor?? [ 653.229909][ T5827] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 653.238143][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.248367][ T5827] usb 5-1: config 0 has no interface number 0 [ 653.256196][ T5827] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 653.266819][ T5827] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 653.281348][ T5827] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 653.298694][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.306672][ T5827] usb 5-1: Product: syz [ 653.313895][ T5827] usb 5-1: Manufacturer: syz [ 653.318536][ T5827] usb 5-1: SerialNumber: syz [ 653.324558][ T5827] usb 5-1: config 0 descriptor?? [ 653.503858][ T5898] isku 0003:1E7D:319C.0033: unbalanced collection at end of report description [ 653.514709][ T5898] isku 0003:1E7D:319C.0033: parse failed [ 653.520457][ T5898] isku 0003:1E7D:319C.0033: probe with driver isku failed with error -22 [ 653.536233][ T5827] usb 5-1: probing VID:PID(0424:012C) [ 653.542491][ T5827] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 653.549445][ T5827] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 653.559171][ T5827] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 653.568821][ T5827] usb 5-1: USB disconnect, device number 91 [ 653.618791][ T5869] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 653.706462][ T30] audit: type=1400 audit(1743029917.384:2717): avc: denied { create } for pid=27718 comm="syz.3.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 653.771149][ T5869] usb 9-1: config index 0 descriptor too short (expected 1051, got 27) [ 653.779639][ T5869] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 653.787814][ T5869] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 653.798699][ T5869] usb 9-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 653.810207][ T5869] usb 9-1: config 0 interface 0 has no altsetting 0 [ 653.819290][ T5869] usb 9-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 653.828548][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.845586][ T5869] usb 9-1: Product: syz [ 653.851690][ T5869] usb 9-1: Manufacturer: syz [ 653.857520][ T5869] usb 9-1: SerialNumber: syz [ 653.863890][ T5869] usb 9-1: config 0 descriptor?? [ 653.869821][T27752] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 653.880396][ T5827] usb 4-1: USB disconnect, device number 99 [ 653.978790][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.979210][T21834] Bluetooth: hci3: command 0x0c1a tx timeout [ 654.131139][ T30] audit: type=1400 audit(1743029917.814:2718): avc: denied { getopt } for pid=27751 comm="syz.8.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 654.161702][ T30] audit: type=1400 audit(1743029917.834:2719): avc: denied { create } for pid=27796 comm="syz.1.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 654.182370][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.327303][ T5869] keyspan 9-1:0.0: Keyspan 4 port adapter converter detected [ 654.335292][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 654.343699][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 654.351748][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 654.841049][ T5869] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 654.862452][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 82 [ 654.875180][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 654.887529][ T5869] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 654.899756][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83 [ 654.907567][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3 [ 654.916147][ T5869] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 654.925008][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 84 [ 654.942204][ T5869] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 654.951248][ T5869] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 654.962086][ T5869] usb 9-1: USB disconnect, device number 31 [ 654.970145][ T5869] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 654.981585][ T5869] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 654.994430][ T5869] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 655.007123][ T5869] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 655.017688][ T5869] keyspan 9-1:0.0: device disconnected [ 655.855416][ T30] audit: type=1400 audit(1743029919.534:2720): avc: denied { shutdown } for pid=27869 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 656.091038][ T5827] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 656.106837][T27881] loop8: detected capacity change from 0 to 7 [ 656.117992][T27881] Dev loop8: unable to read RDB block 7 [ 656.125261][T27881] loop8: AHDI p1 p3 p4 [ 656.133279][T27881] loop8: partition table partially beyond EOD, truncated [ 656.141278][T27881] loop8: p1 start 975770946 is beyond EOD, truncated [ 656.148002][T27881] loop8: p3 start 6514546 is beyond EOD, truncated [ 761.348628][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 761.355588][ C0] rcu: (detected by 0, t=10504 jiffies, g=77129, q=311 ncpus=2) [ 761.363293][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10504 (4295013305-4295002801), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 761.376638][ C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g77129 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 761.387816][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 761.397768][ C0] rcu: RCU grace-period kthread stack dump: [ 761.403636][ C0] task:rcu_preempt state:R running task stack:28360 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 761.417115][ C0] Call Trace: [ 761.420383][ C0] [ 761.423310][ C0] __schedule+0x1129/0x5c00 [ 761.427823][ C0] ? find_held_lock+0x2b/0x80 [ 761.432497][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 761.437438][ C0] ? __pfx___schedule+0x10/0x10 [ 761.442288][ C0] ? find_held_lock+0x2b/0x80 [ 761.446958][ C0] ? schedule+0x2d7/0x3a0 [ 761.451285][ C0] schedule+0xe7/0x3a0 [ 761.455352][ C0] schedule_timeout+0x123/0x280 [ 761.460207][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 761.465583][ C0] ? __pfx_process_timeout+0x10/0x10 [ 761.470867][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 761.476663][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 761.482121][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 761.486883][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 761.492162][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 761.496836][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 761.501685][ C0] rcu_gp_kthread+0x270/0x380 [ 761.506358][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 761.511554][ C0] ? rcu_is_watching+0x12/0xc0 [ 761.516305][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.521497][ C0] ? __kthread_parkme+0x148/0x220 [ 761.526513][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 761.531707][ C0] kthread+0x3a4/0x760 [ 761.535763][ C0] ? __pfx_kthread+0x10/0x10 [ 761.540339][ C0] ? __pfx_kthread+0x10/0x10 [ 761.544918][ C0] ? __pfx_kthread+0x10/0x10 [ 761.549493][ C0] ? __pfx_kthread+0x10/0x10 [ 761.554070][ C0] ? rcu_is_watching+0x12/0xc0 [ 761.558822][ C0] ? __pfx_kthread+0x10/0x10 [ 761.563403][ C0] ret_from_fork+0x45/0x80 [ 761.567809][ C0] ? __pfx_kthread+0x10/0x10 [ 761.572393][ C0] ret_from_fork_asm+0x1a/0x30 [ 761.577161][ C0] [ 761.580170][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 761.586475][ C0] Sending NMI from CPU 0 to CPUs 1: [ 761.591666][ C1] NMI backtrace for cpu 1 [ 761.591677][ C1] CPU: 1 UID: 0 PID: 27896 Comm: syz.3.3110 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 761.591693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 761.591701][ C1] RIP: 0010:lock_acquire+0x1a0/0x350 [ 761.591718][ C1] Code: da ff ff 48 c7 c7 2c 6d b8 8d 48 83 c4 28 e8 e7 d2 c5 09 b8 ff ff ff ff 65 0f c1 05 c2 24 05 12 83 f8 01 0f 85 6a 01 00 00 9c <58> f6 c4 02 0f 85 7f 01 00 00 48 83 3c 24 00 0f 84 ad fe ff ff fb [ 761.591730][ C1] RSP: 0018:ffffc90000a08cb8 EFLAGS: 00000046 [ 761.591741][ C1] RAX: 0000000000000001 RBX: ffffffff9acb0018 RCX: ffffffff93a3de40 [ 761.591749][ C1] RDX: 0000000000000000 RSI: ffffffff8db86d2c RDI: ffffffff8bf367e0 [ 761.591757][ C1] RBP: 0000000000000000 R08: ddbbc63050e626de R09: 0000000000000001 [ 761.591765][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 761.591772][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.591780][ C1] FS: 00007fc7d1a596c0(0000) GS:ffff888124b54000(0000) knlGS:0000000000000000 [ 761.591793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.591801][ C1] CR2: 0000000000000040 CR3: 0000000068350000 CR4: 00000000003526f0 [ 761.591809][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 761.591816][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 761.591823][ C1] Call Trace: [ 761.591829][ C1] [ 761.591834][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 761.591853][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 761.591865][ C1] ? nmi_handle.part.0+0x1a7/0x5d0 [ 761.591881][ C1] ? nmi_handle+0x86/0xc0 [ 761.591892][ C1] ? lock_acquire+0x1a0/0x350 [ 761.591907][ C1] ? default_do_nmi+0x6a/0x160 [ 761.591924][ C1] ? exc_nmi+0x170/0x1e0 [ 761.591940][ C1] ? end_repeat_nmi+0xf/0x53 [ 761.591956][ C1] ? lock_acquire+0x1a0/0x350 [ 761.591972][ C1] ? lock_acquire+0x1a0/0x350 [ 761.591988][ C1] ? lock_acquire+0x1a0/0x350 [ 761.592003][ C1] [ 761.592007][ C1] [ 761.592013][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 761.592025][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 761.592038][ C1] ? debug_object_deactivate+0x135/0x3a0 [ 761.592053][ C1] debug_object_deactivate+0x135/0x3a0 [ 761.592068][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 761.592083][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 761.592099][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 761.592113][ C1] __hrtimer_run_queues+0x46f/0xad0 [ 761.592127][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 761.592143][ C1] ? read_tsc+0x9/0x20 [ 761.592160][ C1] hrtimer_interrupt+0x397/0x8e0 [ 761.592173][ C1] ? irq_work_single+0x13a/0x260 [ 761.592192][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 761.592207][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 761.592221][ C1] [ 761.592225][ C1] [ 761.592230][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 761.592243][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 761.592256][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 9a 37 f6 48 89 df e8 5e ee 37 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 62 28 f6 65 8b 05 6e 8a 3c 08 85 c0 74 16 5b [ 761.592267][ C1] RSP: 0018:ffffc9000371fc18 EFLAGS: 00000246 [ 761.592277][ C1] RAX: 0000000000000002 RBX: ffff88802f353dd0 RCX: ffffffff81c2a9ef [ 761.592285][ C1] RDX: 0000000000000000 RSI: ffffffff8dbabe7c RDI: ffffffff8bf367e0 [ 761.592293][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 761.592300][ C1] R10: ffffffff90826e17 R11: 0000000000000000 R12: 0000000000000001 [ 761.592308][ C1] R13: ffff88807f0fc380 R14: ffff88802f353e20 R15: ffff88807f0fc740 [ 761.592319][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 761.592339][ C1] ref_tracker_alloc+0x2fe/0x5b0 [ 761.592351][ C1] ? rcu_is_watching+0x12/0xc0 [ 761.592363][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 761.592375][ C1] ? __kmalloc_noprof+0x242/0x510 [ 761.592386][ C1] ? sk_alloc+0x206/0xc20 [ 761.592401][ C1] ? inet6_create+0x381/0x1300 [ 761.592412][ C1] ? __sock_create+0x335/0x8d0 [ 761.592422][ C1] ? __sys_socket+0x14d/0x260 [ 761.592433][ C1] ? __x64_sys_socket+0x72/0xb0 [ 761.592444][ C1] ? do_syscall_64+0xcd/0x260 [ 761.592458][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.592472][ C1] ? sock_lock_init+0x285/0x660 [ 761.592484][ C1] sk_alloc+0x206/0xc20 [ 761.592499][ C1] inet6_create+0x381/0x1300 [ 761.592510][ C1] ? inet6_create+0x7f/0x1300 [ 761.592523][ C1] __sock_create+0x335/0x8d0 [ 761.592535][ C1] __sys_socket+0x14d/0x260 [ 761.592548][ C1] ? __pfx___sys_socket+0x10/0x10 [ 761.592560][ C1] ? rcu_is_watching+0x12/0xc0 [ 761.592574][ C1] __x64_sys_socket+0x72/0xb0 [ 761.592585][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.592598][ C1] do_syscall_64+0xcd/0x260 [ 761.592613][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.592625][ C1] RIP: 0033:0x7fc7d0b8d169 [ 761.592635][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.592646][ C1] RSP: 002b:00007fc7d1a59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 761.592658][ C1] RAX: ffffffffffffffda RBX: 00007fc7d0da5fa0 RCX: 00007fc7d0b8d169 [ 761.592666][ C1] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 761.592673][ C1] RBP: 00007fc7d0c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 761.592681][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.592688][ C1] R13: 0000000000000000 R14: 00007fc7d0da5fa0 R15: 00007fff3e775e98 [ 761.592701][ C1] [ 762.143707][ C0] vkms_vblank_simulate: vblank timer overrun