last executing test programs: 8m43.755588419s ago: executing program 32 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x8b4ec3467820b111}, 0x14}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x5, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0x0}]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18008e1154a2000d125c8af09a01000000000100000001000000c3141e18d13ca03a26b4b8fc2fa8df2a312c83e6fe95efd47aa12de30dfd7692741b63e717f24ba198695bb26e77d3690e2b559abce60132ca8a98e4b6ce569067aa23fc0d38e6e3acd57e599e1c484460b06ec6f0ef07004207cb95ee4a535fb9913b86d8010c38e46f463413b9e02a3c8120a756f173b4bdcaa3d3655b3adcc24d3d5fc7f3b10183dbd2a9e21b6247fb3ae2fba47642818359c9fc813f54cc110d042c8a44013f4d6e06d55efc6829c4e44a1fe7d2dc1818affe68269fa6ffaeacf1af3e47ac"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) 8m43.52798858s ago: executing program 33 (id=303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfd9b, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xffffffffffffff56, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a8, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000080)=0x403, 0x0, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) getpgrp(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 7m39.329887227s ago: executing program 34 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r1, 0x3ed000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x36) 7m3.237719407s ago: executing program 35 (id=629): fsopen(0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x32601) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(0x0) socket$netlink(0x10, 0x3, 0x9) fsopen(0x0, 0x0) (async) syz_open_dev$cec(0x0, 0x0, 0x32601) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async) chdir(0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) 7m3.156744339s ago: executing program 36 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x8b4ec3467820b111}, 0x14}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0) mq_timedreceive(r3, 0x0, 0x0, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x8001a0) splice(r2, 0x0, r4, 0x0, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000061fc8934a05ce17e97d1afe96d4c1ef9f8283102a0d7f5673052d55c3efc02fd550d64b854da9df88c263da00ade80a6ecb58d6db80f894275bdc25f88d1a3c190356ed289dc712a87995214fb581cf3c0ab40c6a99ae94d10284a7db119d32dd90d405065ec3a027e7cbd0b1a8f5e1b9c18640c428a370f0df0627026952d2eb9da240f35a7881dccdd7de497e8fd4592685d6467945375ff"], 0x37) r6 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x8, r6, 0x0}]) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18008e1154a2000d125c8af09a01000000000100000001000000c3141e18d13ca03a26b4b8fc2fa8df2a312c83e6fe95efd47aa12de30dfd7692741b63e717f24ba198695bb26e77d3690e2b559abce60132ca8a98e4b6ce569067aa23fc0d38e6e3acd57e599e1c484460b06ec6f0ef07004207cb95ee4a535fb9913b86d8010c38e46f463413b9e02a3c8120a756f173b4bdcaa3d3655b3adcc24d3d5fc7f3b10183dbd2a9e21b6247fb3ae2fba47642818359c9fc813f54cc110d042c8a44013f4d6e06d55efc6829c4e44a1fe7d2dc1818affe68269fa6ffaeacf1af3e47ac"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r5, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000032680)=""/102392, 0x18ff8) 5m51.934612803s ago: executing program 9 (id=831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180006d604dbba4a6ac5b3a900000000000000000000004b71fa98cffbefdbcc3000009500000000000000cab3a2526111985eb059faeab3d1ca35063d24d91543134eda1c56017571a42162e633163f8c90dbd3c02fe2e1d0e3f5146a15"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd_index=0xa, 0x759c, 0x8fe, 0x6d, 0x3, 0x1}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd_index=0xa, 0x759c, 0x8fe, 0x6d, 0x3, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd25, 0x0, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x99) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x99) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000001280)={0xb, @pix={0x38305343, 0x0, 0x34324d59}}) (async) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000001280)={0xb, @pix={0x38305343, 0x0, 0x34324d59}}) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xad05a1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280)={'#! ', './file0'}, 0x208e28b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5m51.510857991s ago: executing program 9 (id=836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x7a8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'bridge_slave_1\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x75c, 0x2, [@TCA_U32_SEL={0x744, 0x5, {0xa, 0x6f, 0x5, 0xe9, 0x9, 0x728, 0x40, 0xa04, [{0x0, 0xffffdc1d, 0x8000, 0x7}, {0x6, 0xf2b, 0x6, 0x7}, {0x1, 0x2, 0x1, 0x2}, {0x1b, 0x7, 0xa, 0xfffffffd}, {0x86b, 0x7, 0x2, 0x80800}, {0x7, 0x4, 0xde, 0x8}, {0xfffffff8, 0xa35e, 0x7ff, 0x7e}, {0x1, 0x6, 0x6, 0x81}, {0xfff, 0x0, 0xaf, 0x1}, {0x4, 0x1, 0xdd1, 0x3}, {0x80, 0x7, 0xa6, 0x7ff}, {0xf9, 0x260, 0x6, 0x59346bdb}, {0xb4, 0x9}, {0x0, 0x1, 0x7ff, 0x1}, {0x7fffffff, 0x4fcd, 0x7, 0x5}, {0x7, 0x5, 0x33d3, 0x4}, {0x1, 0x7fffffff, 0x57, 0xc8000000}, {0x5, 0xbfe, 0x78ff, 0x9}, {0x7, 0x0, 0x0, 0x3}, {0x206, 0x6, 0x2, 0x6}, {0x7, 0x1, 0xd3f4, 0x6}, {0x6, 0x2, 0xfffffff5, 0x8001}, {0x7f, 0x9, 0x7ff, 0x20000000}, {0x5, 0x9, 0x4e3, 0xde0}, {0x1, 0x9, 0x1, 0x8001}, {0x5, 0x2951, 0x0, 0xff}, {0xff, 0xc3, 0x6, 0x1}, {0x81, 0x4, 0x70a, 0xd2}, {0xe, 0x7, 0x1}, {0x6, 0x9, 0x80000001, 0x101}, {0x0, 0x1, 0x7, 0x8}, {0x7, 0x3, 0xff, 0x8}, {0x42af, 0x81, 0xe1, 0x3}, {0xe310, 0x53da, 0xff, 0x3}, {0x4f4, 0x7, 0x6, 0x1}, {0x7, 0x0, 0x7f, 0x80000000}, {0x5, 0xa, 0x4a, 0xf}, {0x7, 0x7, 0x1, 0x9}, {0x94b0, 0x10, 0x101, 0x8}, {0x7, 0x9, 0x8}, {0x7, 0x80000001, 0x5, 0x10000}, {0x3, 0x3, 0x80000001, 0x3}, {0x7, 0x1, 0x4d, 0x2}, {0x7fffffff, 0x7, 0x9, 0xde17}, {0x40, 0x3c00000, 0x4, 0x1}, {0x4, 0x767d, 0xfffffc01, 0x6}, {0xffffd483, 0x6, 0x7, 0x1}, {0x5, 0x3ff0000, 0x61, 0xd}, {0x7, 0x8, 0x6, 0x40}, {0x4, 0xf, 0xfffffffb, 0x4}, {0x7ff, 0xf70a, 0x6, 0x401}, {0xfffffffa, 0x7, 0x7, 0x5}, {0x8, 0x9, 0x4, 0x7}, {0xd, 0x6ec, 0x8, 0x4}, {0x3, 0x7, 0x3, 0x8001}, {0x7, 0xffffff7f, 0x6, 0x2}, {0x580, 0xfffffffc, 0x8, 0x1}, {0x1, 0x401, 0x8, 0x6}, {0x7, 0x3, 0xeac6, 0x4}, {0x6, 0x5, 0x639, 0x1ff}, {0x5, 0x0, 0x1ff, 0x8001}, {0x2, 0xffffffff, 0x3, 0x4}, {0x3, 0x4f14a498, 0xffffffff, 0x4}, {0x85, 0x8, 0x0, 0x12e}, {0x2, 0x2, 0x3, 0x2}, {0x1, 0x1, 0x81, 0x3}, {0x1, 0x0, 0x80000000, 0x6}, {0xfffbff81, 0x10000, 0x1, 0x3}, {0x8, 0x7, 0x3788, 0x3}, {0x6, 0x2, 0x6, 0x5}, {0x9, 0x1000, 0xffffffff, 0xfff}, {0x304, 0xb3, 0x7, 0x9}, {0x0, 0x2, 0x0, 0xf}, {0x0, 0x6, 0x5}, {0x9, 0xffffffff, 0x9, 0x6}, {0x6, 0x5, 0x7fffffff, 0x6}, {0x7, 0x10000, 0x3, 0x1000}, {0x6, 0xbaf5, 0x6ce7, 0x2}, {0xffffff4f, 0x0, 0xff, 0x3}, {0x6, 0x6, 0x3, 0x6}, {0x40, 0xc, 0x1, 0x6}, {0x8, 0x180000, 0x8, 0x5}, {0x2, 0x7b892104, 0x3, 0x3}, {0x5, 0x6, 0x7, 0xffffffff}, {0xc, 0xe, 0x8000, 0x9}, {0x1, 0x7, 0x7, 0x8}, {0x4, 0x1, 0x8, 0x40}, {0x3, 0x8, 0xffffffff, 0x171}, {0x4401, 0x7, 0x1, 0x6}, {0x10000000, 0x6, 0xcc, 0x5}, {0x5, 0x5, 0x5, 0x80}, {0xf8, 0x6, 0x8000, 0x8}, {0x9, 0x3, 0x8000, 0x9}, {0x0, 0x9, 0x1, 0x3}, {0x5, 0x1, 0x2, 0xa3}, {0x5, 0x10001, 0x730, 0x1}, {0x6, 0xa, 0xa, 0x7}, {0x3, 0x0, 0x100000, 0x4}, {0x0, 0x7fff, 0x800}, {0xa, 0x80, 0x8, 0x6}, {0x6, 0x5, 0x7, 0xc273}, {0x0, 0x4, 0x327ad977, 0x81}, {0x68a, 0x8, 0x0, 0x1}, {0x9, 0xa0, 0xfffffffe, 0xc}, {0xde9, 0x2afa6c3f, 0xff, 0x2}, {0x8, 0xbdec, 0x7, 0x5}, {0x4db6, 0x9, 0xe, 0x3}, {0x729, 0x7, 0x6, 0x10001}, {0x6, 0x8001, 0x6, 0xf}, {0xb, 0x8, 0x9}, {0x4, 0x9, 0x5, 0x5}, {0x7f, 0x81, 0x4, 0x1}, {0x6, 0xd, 0x2, 0x200001}, {0x6, 0x2, 0x6, 0x2}, {0x7, 0x7, 0x1, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'ip6tnl0\x00'}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x1}, 0x24048811) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="9557cfe0d808bd5cca5faac0e8302c522782e2516a89ca3397b48269809a194c284e4cd251f2a99659509e23d289186db57731f39817179dcb4f8472a59cf6bcf7e39dae308104a7eab7a3b8f08c18f8e9b7e06f7c1687c536"], 0xff2e) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000081) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000034000000060a0b040000000000000000020000000900010073797a3000a00e000900020073797a3200000000050007401d000000140000001100010000000000000000000200000a0000000000000000"], 0x5c}}, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, "df3f0400000000000000000000000609020040"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001900000000000000380000003800000004000000020000000000001104000000ffffffff0000000000000004000000005d1a9baba7ab9e7b488d74be020000000000000e030000000000000000006100d68898d686183c00d27f23e5b746c30bc3efd1543a00548a7456d0e4f94f68c59bffd67c76f173d9078018a83bb2e9e34a41b9ceabc6dece7bc0457bc24345d9e2baa4bf6b4d786a21ffabd916"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x0) r8 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsmount(r8, 0x0, 0x0) shutdown(r7, 0x1) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m32.787682115s ago: executing program 37 (id=834): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="5821dfe6708fc0f40000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x8001) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1e) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 5m25.637535209s ago: executing program 38 (id=835): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3e, 0x200400) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/204, 0xcc) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000b00)={[{0xffffffffffffff5b}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='pimreg\x00'}) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x1, 0xe, 0x6, 0xff}, 0x0, 0x0}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8b}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004084c}, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5m25.408623669s ago: executing program 39 (id=832): landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000000b00)=""/102368, 0x18fe0) r1 = gettid() syz_pidfd_open(r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x90, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x30) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f00000000c0)=0xffffffffffffff16) timerfd_create(0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="dd5efe00", @ANYRES16=r8, @ANYBLOB="20002bbd7000ff0100", @ANYRES32=r9, @ANYBLOB="0c002380060018008cfe0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) 5m25.332167714s ago: executing program 40 (id=836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x7a8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'bridge_slave_1\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x75c, 0x2, [@TCA_U32_SEL={0x744, 0x5, {0xa, 0x6f, 0x5, 0xe9, 0x9, 0x728, 0x40, 0xa04, [{0x0, 0xffffdc1d, 0x8000, 0x7}, {0x6, 0xf2b, 0x6, 0x7}, {0x1, 0x2, 0x1, 0x2}, {0x1b, 0x7, 0xa, 0xfffffffd}, {0x86b, 0x7, 0x2, 0x80800}, {0x7, 0x4, 0xde, 0x8}, {0xfffffff8, 0xa35e, 0x7ff, 0x7e}, {0x1, 0x6, 0x6, 0x81}, {0xfff, 0x0, 0xaf, 0x1}, {0x4, 0x1, 0xdd1, 0x3}, {0x80, 0x7, 0xa6, 0x7ff}, {0xf9, 0x260, 0x6, 0x59346bdb}, {0xb4, 0x9}, {0x0, 0x1, 0x7ff, 0x1}, {0x7fffffff, 0x4fcd, 0x7, 0x5}, {0x7, 0x5, 0x33d3, 0x4}, {0x1, 0x7fffffff, 0x57, 0xc8000000}, {0x5, 0xbfe, 0x78ff, 0x9}, {0x7, 0x0, 0x0, 0x3}, {0x206, 0x6, 0x2, 0x6}, {0x7, 0x1, 0xd3f4, 0x6}, {0x6, 0x2, 0xfffffff5, 0x8001}, {0x7f, 0x9, 0x7ff, 0x20000000}, {0x5, 0x9, 0x4e3, 0xde0}, {0x1, 0x9, 0x1, 0x8001}, {0x5, 0x2951, 0x0, 0xff}, {0xff, 0xc3, 0x6, 0x1}, {0x81, 0x4, 0x70a, 0xd2}, {0xe, 0x7, 0x1}, {0x6, 0x9, 0x80000001, 0x101}, {0x0, 0x1, 0x7, 0x8}, {0x7, 0x3, 0xff, 0x8}, {0x42af, 0x81, 0xe1, 0x3}, {0xe310, 0x53da, 0xff, 0x3}, {0x4f4, 0x7, 0x6, 0x1}, {0x7, 0x0, 0x7f, 0x80000000}, {0x5, 0xa, 0x4a, 0xf}, {0x7, 0x7, 0x1, 0x9}, {0x94b0, 0x10, 0x101, 0x8}, {0x7, 0x9, 0x8}, {0x7, 0x80000001, 0x5, 0x10000}, {0x3, 0x3, 0x80000001, 0x3}, {0x7, 0x1, 0x4d, 0x2}, {0x7fffffff, 0x7, 0x9, 0xde17}, {0x40, 0x3c00000, 0x4, 0x1}, {0x4, 0x767d, 0xfffffc01, 0x6}, {0xffffd483, 0x6, 0x7, 0x1}, {0x5, 0x3ff0000, 0x61, 0xd}, {0x7, 0x8, 0x6, 0x40}, {0x4, 0xf, 0xfffffffb, 0x4}, {0x7ff, 0xf70a, 0x6, 0x401}, {0xfffffffa, 0x7, 0x7, 0x5}, {0x8, 0x9, 0x4, 0x7}, {0xd, 0x6ec, 0x8, 0x4}, {0x3, 0x7, 0x3, 0x8001}, {0x7, 0xffffff7f, 0x6, 0x2}, {0x580, 0xfffffffc, 0x8, 0x1}, {0x1, 0x401, 0x8, 0x6}, {0x7, 0x3, 0xeac6, 0x4}, {0x6, 0x5, 0x639, 0x1ff}, {0x5, 0x0, 0x1ff, 0x8001}, {0x2, 0xffffffff, 0x3, 0x4}, {0x3, 0x4f14a498, 0xffffffff, 0x4}, {0x85, 0x8, 0x0, 0x12e}, {0x2, 0x2, 0x3, 0x2}, {0x1, 0x1, 0x81, 0x3}, {0x1, 0x0, 0x80000000, 0x6}, {0xfffbff81, 0x10000, 0x1, 0x3}, {0x8, 0x7, 0x3788, 0x3}, {0x6, 0x2, 0x6, 0x5}, {0x9, 0x1000, 0xffffffff, 0xfff}, {0x304, 0xb3, 0x7, 0x9}, {0x0, 0x2, 0x0, 0xf}, {0x0, 0x6, 0x5}, {0x9, 0xffffffff, 0x9, 0x6}, {0x6, 0x5, 0x7fffffff, 0x6}, {0x7, 0x10000, 0x3, 0x1000}, {0x6, 0xbaf5, 0x6ce7, 0x2}, {0xffffff4f, 0x0, 0xff, 0x3}, {0x6, 0x6, 0x3, 0x6}, {0x40, 0xc, 0x1, 0x6}, {0x8, 0x180000, 0x8, 0x5}, {0x2, 0x7b892104, 0x3, 0x3}, {0x5, 0x6, 0x7, 0xffffffff}, {0xc, 0xe, 0x8000, 0x9}, {0x1, 0x7, 0x7, 0x8}, {0x4, 0x1, 0x8, 0x40}, {0x3, 0x8, 0xffffffff, 0x171}, {0x4401, 0x7, 0x1, 0x6}, {0x10000000, 0x6, 0xcc, 0x5}, {0x5, 0x5, 0x5, 0x80}, {0xf8, 0x6, 0x8000, 0x8}, {0x9, 0x3, 0x8000, 0x9}, {0x0, 0x9, 0x1, 0x3}, {0x5, 0x1, 0x2, 0xa3}, {0x5, 0x10001, 0x730, 0x1}, {0x6, 0xa, 0xa, 0x7}, {0x3, 0x0, 0x100000, 0x4}, {0x0, 0x7fff, 0x800}, {0xa, 0x80, 0x8, 0x6}, {0x6, 0x5, 0x7, 0xc273}, {0x0, 0x4, 0x327ad977, 0x81}, {0x68a, 0x8, 0x0, 0x1}, {0x9, 0xa0, 0xfffffffe, 0xc}, {0xde9, 0x2afa6c3f, 0xff, 0x2}, {0x8, 0xbdec, 0x7, 0x5}, {0x4db6, 0x9, 0xe, 0x3}, {0x729, 0x7, 0x6, 0x10001}, {0x6, 0x8001, 0x6, 0xf}, {0xb, 0x8, 0x9}, {0x4, 0x9, 0x5, 0x5}, {0x7f, 0x81, 0x4, 0x1}, {0x6, 0xd, 0x2, 0x200001}, {0x6, 0x2, 0x6, 0x2}, {0x7, 0x7, 0x1, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'ip6tnl0\x00'}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x1}, 0x24048811) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="9557cfe0d808bd5cca5faac0e8302c522782e2516a89ca3397b48269809a194c284e4cd251f2a99659509e23d289186db57731f39817179dcb4f8472a59cf6bcf7e39dae308104a7eab7a3b8f08c18f8e9b7e06f7c1687c536"], 0xff2e) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000081) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000034000000060a0b040000000000000000020000000900010073797a3000a00e000900020073797a3200000000050007401d000000140000001100010000000000000000000200000a0000000000000000"], 0x5c}}, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, "df3f0400000000000000000000000609020040"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001900000000000000380000003800000004000000020000000000001104000000ffffffff0000000000000004000000005d1a9baba7ab9e7b488d74be020000000000000e030000000000000000006100d68898d686183c00d27f23e5b746c30bc3efd1543a00548a7456d0e4f94f68c59bffd67c76f173d9078018a83bb2e9e34a41b9ceabc6dece7bc0457bc24345d9e2baa4bf6b4d786a21ffabd916"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x0) r8 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsmount(r8, 0x0, 0x0) shutdown(r7, 0x1) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m25.088424837s ago: executing program 41 (id=837): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000101401002cbd7000ffdb9d080800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0400"/12, @ANYRES32, @ANYBLOB="ef196f7a5dc32f6486fdf7d5e360551f952966355d8ccd833f9d054055f528e8401f62b11c8e65290861b11849ce6ee93e7ee76d5224f98b3d6a88e1fad0b851ecf4fc2b51edc034d8f5167a8d569b1024759e2d02446529999116d601000000fa434c673079a7726531c3a709524677dd50bcadde046aded57bc961c3bc453006294c3a4df8609ac5", @ANYRES64=0x0], 0x10) r3 = socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@udp6=r3, 0x2}, 0x20) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$key(0xf, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @private=0xa010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 3m57.352309805s ago: executing program 42 (id=1092): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) 3m36.705542692s ago: executing program 2 (id=1220): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000400)=r1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x132, 0xffffffffffffffff, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3m36.642779203s ago: executing program 2 (id=1221): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @private=0xa010100}}) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x4a, 0xaf, 0x36, 0x20, 0x572, 0x58a5, 0x270a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x9, 0x1, 0xa3, 0x7d, 0x7e, 0x3, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x4, 0x1, [@generic={0x8, 0xb, "906db7cfad36"}]}}]}}]}}]}}, 0x0) 3m35.177693914s ago: executing program 2 (id=1228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m35.148725156s ago: executing program 2 (id=1229): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r1, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x7) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x166b1ab5cb710134) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup(r4) write$FUSE_INIT(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x2, {0x2}, 0xfd}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, 0x0, &(0x7f0000001200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x1}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3m34.561496085s ago: executing program 2 (id=1232): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2c001, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) splice(r0, &(0x7f0000000040)=0xfffffffffffffffe, r0, &(0x7f0000000080)=0x927, 0xd, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x4, 0x4}, 'port1\x00', 0x2, 0x20800, 0x2, 0x4, 0x800, 0x1, 0x0, 0x0, 0x4, 0xd}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r3}}, 0x18) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x2f, 0x2, 0x9, 0x14000000, 0x2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x0, 0x6, 0x4}}) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000000440)=0x3ff) bind$802154_raw(r0, &(0x7f0000000480)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) splice(r3, &(0x7f00000004c0)=0x504, r3, &(0x7f0000000500)=0xf, 0x0, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580), 0x13f, 0x5}}, 0x20) setsockopt(r0, 0xe, 0x101, &(0x7f0000000600)="a8be9d59a1d07261eff04c8b005f1fa65e99f4dc9711c235c10504a6c5818b6ba26bdcf411679f4e9284cb17aff784bbba633773865f1812d963995d9285146e289e0e9684e2a03fc62aad166d9bdb551332e3acca8f0c2836813ef8b294e1963e124b0384b717c9c29f9801a40d48531c492ad8136f8cddeba51b7b2a599f8e442824d2a0e7a7ee3fb38bbb", 0x8c) r6 = syz_io_uring_complete(0x0) read$FUSE(r0, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f0000002700)={0xb0, 0x0, r7, [{0x3, 0x0, 0x10, 0x9, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, 0x8, 0x8, 0x4, '[%!-:]:&'}, {0x4, 0x2, 0x3, 0x10000, '\xea.\xe9'}, {0x6, 0x9, 0x1, 0x6, '\x00'}, {0x6, 0x3, 0x0, 0x1}]}, 0xb0) write$cgroup_devices(r6, &(0x7f00000027c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) sendmmsg$alg(r0, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002800)="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", 0xfc}], 0x1, &(0x7f0000002940)=[@op={0x18, 0x117, 0x3, 0x22670836330b4418}, @iv={0xd8, 0x117, 0x2, 0xc2, "f12ca57f69f94ab200835e4469ff25479825114848aa5cb759db8cd9bdb6aa390bcdb4a8946ffa4f6ca26d528df98bb5c0a69650a630f1024120b562f6d0f53b2af3445bca17d09eacab2c3f7c32ce51529f81b6fe5b141c3ef9b1ad0295f1e0e066d4532f31077319443f0d4e8e6c3c050c9331044caab419d36aa588f97dc5835af34444dd48a737e2c4b89f0b6ba293f72473b2a000c6d20b8954694124835aa8caf71712aaa0d26a07c3fa16db576328a852a5912f2d156c6c219aef5ec9fc7e"}], 0xf0}], 0x1, 0x4800) mount$overlay(0x0, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0x800859, &(0x7f0000002b00)={[{@redirect_dir_follow}, {@uuid_null}, {@redirect_dir_off}, {@redirect_dir_off}, {@uuid_off}, {@default_permissions}, {@workdir={'workdir', 0x3d, './file0'}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}, {@obj_type={'obj_type', 0x3d, '\\-}$\xe2'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002c40)={0x0, 0x100000000, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000003040)={0x1e, 0x0, {0xfffffffffffffffe, @struct={0x10001, 0x8}, 0x0, 0x2, 0x6547, 0x10, 0x6, 0x4635, 0x50, @struct={0x8001, 0x2}, 0x1, 0x50d, [0x9, 0x3ff, 0x6, 0x1, 0x7, 0x2253d9d9]}, {0xfffffffffffffff7, @usage=0x1, 0x0, 0x6, 0x3, 0x45, 0x1, 0x8, 0x82, @usage=0x10, 0xd7a8, 0x3, [0x80000001, 0x3, 0x7fff, 0x2, 0xbec]}, {0x8000000000000001, @struct={0x0, 0x200}, r9, 0x6, 0x80, 0xc4b, 0x6a7e, 0xbd8, 0x43a, @usage=0xffffffffa1f3cc98, 0x1, 0x0, [0x9, 0xfffffffffffffffa, 0x7fff, 0x8, 0xd, 0x44]}, {0x3, 0x7d4, 0xd11d}}) r10 = signalfd4(r6, &(0x7f0000003440)={[0x9]}, 0x8, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000003480)={0x15, 0x110, 0xfa00, {r2, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0x3, 0x3, {"0737fed5f8a381dbe3f329f5c43b6e53"}, 0xa, 0x6, 0x7f}, @in6={0xa, 0x4e22, 0xffd9, @rand_addr=' \x01\x00', 0x200}}}, 0x118) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000035c0)={0x9, 0x108, 0xfa00, {r2, 0x9, 'YU#', "68cf747330569d65132d36a7553f0efa0cbc2873578f982bbfc8ef805f2c5a2e9654229ec874e81390511d8723df9b1c95e69763a8059571a1559dfc1c62170d0c6769c2acbce429e5affab65967458052f7afc7b207e0fd9754fc1cbd3b3aff273de0ed584663938f5d1cdbb791ebcd14c047c629d5800fc67b1c3cb97ef13698c48a260b801b3c8a90009a9c0187b2a285521c923f08cedb85f248f8a8b8612e321b97def206c274f7af6558d7e346fd6a4b8249b9b084bb6ae24698d5fefbe5546249621bfa7d80107755cb309f8341265fa5b324fb8b634d345350bdeb138cbbdd448de6c5e850ed5f36d52f201f0deeb5b75cf57a393d06e5975c17c21e"}}, 0x110) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000003700), 0x4) r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003740), 0x80, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r11, 0x80044dfb, &(0x7f0000003780)) 3m34.260605025s ago: executing program 2 (id=1233): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r0, 0x3ed000) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r1, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbdc2060000000002"], 0x24}}, 0x22) (async) r7 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) (async) r8 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m22.253415328s ago: executing program 5 (id=1285): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1, 0x1, {}, 0xff}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00000007c9c0d224d326b9a7abb3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x40, 0xf, 0x2, "a854"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xb, 0x2, '[p'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) r7 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xd0, 0x6b, [{{0x9, 0x4, 0x0, 0x18, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x40, 0xa, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xf, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x6, 0x4, 0xff, 0x1}, 0x59, &(0x7f00000002c0)={0x5, 0xf, 0x59, 0x1, [@generic={0x54, 0x10, 0x4, "a9eac41b379926de203cc3ed66ebd9e5923b0aecd3b92729ef4d2934f25945d9c123d385c0378aa986176f1c41fcb90245a3d8c9f6f8e2b9916c294b6487af9bad8bb6ed1633fc475190d7f464afe82c74"}]}, 0x6, [{0x17, &(0x7f0000000340)=@string={0x17, 0x3, "fea3571686095aed73f28dfb10f543d601f1a7a1b4"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x60, &(0x7f00000003c0)=@string={0x60, 0x3, "34a3d8fd08e20090640fce338cbe4d66d8ad75d9569db33ed96d1f49e90242af61980b8a04548b8c0e942dae8945a16d50260a15f4418ed7dc6f295a37151cbc1d5c030977db3273ccc7dc6b24f757f9b3f41e745ddb3f2daeee0b70842e"}}, {0xde, &(0x7f0000000440)=@string={0xde, 0x3, "f5312d0a381b636ca2ba42fee1f5235f5073452f350d5ee82a5254ac80c703e90467806b67e4609d61bf317e57d69844b594760566a16071294cd0b1be3295430491054367970d470a191ae69d6abd5ffdcc3e8c83e8cd3e4b7d34b831ae0fc6c4d6b19e39abaa2ba5a41c0304be12532171e64989f549e7a7936768df03f965dfbc04d1c654b40ed8e69602364a706b1a1b1c37dbee013f2569e42a939a356c9ee784965b68cb1f7f5233e70530d5fa508b6bb310c43dca5a42529b77d8fa5c5234cfe5815a1e0ab039b63a2b349e0822191c32ded1ab1782b3760b"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000700)={0x14, &(0x7f0000000840)={0x0, 0x11, 0xd3, {0xd3, 0x21, "e5afb06acea80482695a04d44a940994db299424f6a0fd0d20fe70be6a013e293637e793fdfaf76784aec77403547919d3aab7a7fef7f7342581570c6ba9cd173d50c74cf269d88b46efa6e85a679f70736d28f4e872f050ea1d6325f00cad26dcaf35a9748641758e8baf8f6d4bcd45956617867dd1d2c62d1118079d1c5a3ad9c96916b2b0ead5bfded09917619c63fe201e507d2b84169d1f44fff9c7bf2c408df46b22a1ef090497950969466ccd484718e68cb8af54d1bf1525fef3b29c658521c5f60bb1fb29b8b4e1f795ff744c"}}, &(0x7f00000006c0)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "888e0cf6a4a4c5a6d9e5090636240854f57a849dac7930a33c39be1f0a0fae8601faf80a921b8feed8"}}}, &(0x7f0000000bc0)={0x34, &(0x7f0000000940)={0x40, 0x9, 0xb9, "ba63b255f5b3e23d281b0edc2fde335b71fed2e302fb737d26394f5fa52b887413f68e4cbd63e570d89f67478e8ec4bcb5912c5689fc04efbd1ab41591288bcee89d1c9adf19bcec4449628c7f646403c39a944e5e7edeac227f86607adf4f9030292810927e6a78a7557b65d5dffff4bea2582c2dbfb86c33fd98d5af327899720401bbd73a889a950987821a7473469f7e02fcd4286dee023b5d195aa2b14943605fcc744aa60f51c00bac690264d396ec2e390b93c54d9f"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a40)={0x20, 0x0, 0xf4, {0xf2, "fac9c44e4a299a2a818b485cf381cd70ad0c81f3ebb2a8768cfb8df4e2eccc273f9e66e59fb9c9b10b913e79e489ef3a4221366697f116b1eb57a4ed075ab557ac1e067648ba6d76ca27f01f50f635d8a0f4083982130340f258f0edb23429b7516dee68c845a5a7f2c73a6440165c7c8ec170e8027cff84bdaac1d073d7802f046e0b194c00edf0d88401498f848a9448cbcce78338af98cd2f6f77f2a2d54d208da65eeb9eba926e525e477a1268729ebd00139d53024938bb2cd7e567b7642a32bd56063fe343401c3e0b9f877a046d95cd72c05ccead3eee766afd1d5661f38b4737bec8a256f0863b7caaf31a959335"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0x80}}) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) 3m18.874540332s ago: executing program 43 (id=1233): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r0, 0x3ed000) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r1, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbdc2060000000002"], 0x24}}, 0x22) (async) r7 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) (async) r8 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m18.230974137s ago: executing program 5 (id=1301): socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x26cfa431}, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0xe, 0x20000800, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x815, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x18e0) 3m17.255986818s ago: executing program 5 (id=1302): r0 = syz_open_dev$video(&(0x7f0000000000), 0x82, 0x4000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x3, 0x2, 0x0, 0x40}) r1 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) (async) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000100)={0x95, "ca5cf6ce3cebb8166e7d3d7da0e50f8f48ce2e5839e56b94cef16c3fe406d871", 0x10, 0xffffffff, 0x7, 0x8, 0x1}) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000180)={0x5, 0x3, 0x5, 0x8}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)={0x3, 0x0, [{0x5, 0x1, 0x0, 0x0, @sint={0x80000000, 0x2}}, {0x8001, 0x4, 0x0, 0x0, @msi={0x8, 0x5, 0x2, 0x6}}, {0x8, 0x4, 0x1, 0x0, @irqchip={0x6, 0x3}}]}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x6, 0x2, 0x8, 0x0, r2, 0x6, '\x00', r3, r2, 0x1, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000680)={0x3, 0x0, [{0x0, 0x4, 0x1, 0x0, @sint={0x1}}, {0x9, 0x3, 0x1, 0x0, @adapter={0x2, 0x10000, 0x7, 0x51f4b7f0, 0x34}}, {0x4, 0x2, 0x1, 0x0, @sint={0x7, 0x8}}]}) (async, rerun: 64) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000740)={0x0, @src_change}) (async, rerun: 64) r4 = accept4$rose(r2, &(0x7f0000000800)=@full={0xb, @dev, @rose, 0x0, [@remote, @remote, @netrom, @default, @bcast, @rose]}, &(0x7f0000000840)=0x40, 0x80000) sendto$rose(r4, &(0x7f0000000880)="fd06091e373a183bf8043740aff110affba478cc351d05738f8ea3931af87e9df7807cc0dc7a5da91d4b22f4cc5f75504249de3109525fd6e53c9a170e8bfb5af9a6e94e3596025be5342179de92f8bc0db14a4660365b6095aecd6c0a1e108035fd9a078865db44a6cac1c13c42ced9ae8a8e6e5695e92ddb8f6aabfda893be0de733080919b271ac9baa71bb1f6f10343edc62ad19c6f4", 0x98, 0x24000006, &(0x7f0000000940)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000980)=""/177) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = gettid() (async) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000a80)={0x6, 0xc, 0x4, 0x2, 0x5529, {r7, r8/1000+60000}, {0x250b66dc3ee8ea20, 0x8, 0x9, 0x9, 0x4, 0x0, "55b308c5"}, 0x7ff, 0x4, {}, 0xf}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000b00)={0x1, @capture={0x1000, 0x1, {0x80000000}, 0x2c, 0x1}}) mq_notify(r2, &(0x7f0000000c00)={0x0, 0x9, 0x4, @tid=r6}) (async) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000c40)="3bbd83e26df1b99c5ea85acd") prlimit64(r6, 0x1e, &(0x7f0000000c80)={0x32, 0x8}, &(0x7f0000000cc0)) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000d00)={0x100000, 0x30000}) (rerun: 64) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e40)={{r9}, &(0x7f0000002dc0), &(0x7f0000002e00)=r2}, 0x20) (async) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000002f40)=@usbdevfs_driver={0x6, 0x68c, &(0x7f0000002e80)="1324330e4c147d9919cb18e493d65f7cdaf2a2d0960af453d1a1c72db59b16db29ff6be6a40890286ad01c21024ba8f765d8c8fb40bb6eb32d7e91e838415efb2a27a3de688dca6b092ef97746f6ca6dd9c5de896367854a65134620f71db003e4e8bc0dec39281a9f7fb79fb9fd5d124f39ab04df1f53e5b000cbbbc2f08c05fc1df7c9ee"}) (async) preadv(r0, &(0x7f0000003300)=[{&(0x7f0000002f80)=""/13, 0xd}, {&(0x7f0000002fc0)=""/221, 0xdd}, {&(0x7f00000030c0)=""/149, 0x95}, {&(0x7f0000003180)=""/44, 0x2c}, {&(0x7f00000031c0)=""/56, 0x38}, {&(0x7f0000003200)=""/243, 0xf3}], 0x6, 0x140000, 0x3) 3m16.9417888s ago: executing program 5 (id=1303): pipe2(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.'], 0x20) (async) r1 = memfd_secret(0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000000)={0x1}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) (async, rerun: 64) ftruncate(r1, 0x51a9497) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m16.810380608s ago: executing program 5 (id=1304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x4, 0x0, 0x0, 0x48, &(0x7f0000000000)="20b011d40e2cde25b8d44b3ec97c945cd5a7e4db282673f677eec66d60b89f89753f8d60511b8f5350ae06bc3bc908d45f606ca78e227c51dd9ea5b9ba42dbe97477d5379a37c783", 0xfb08}) 3m16.581697076s ago: executing program 5 (id=1306): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r0, 0xd2a6a000) socket(0x2, 0x2, 0x1) (async) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') syncfs(r0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) inotify_init() (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x518, 0x9, 0x7}, 0x10) 3m1.371413215s ago: executing program 44 (id=1306): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r0, 0xd2a6a000) socket(0x2, 0x2, 0x1) (async) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') syncfs(r0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) inotify_init() (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x518, 0x9, 0x7}, 0x10) 2m4.502698963s ago: executing program 8 (id=1477): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4}, 0x6) (rerun: 64) syz_emit_ethernet(0x3a9, &(0x7f0000000a80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6cedc73103732f00ff010000000000000000000000000001fc0000000000000000000000000000110c000400086095b4161c0000000000000728000000030804080009000000000000008000000000000000000800000000000000000000000000000fb64a38bd4da7c44a751efb51b3c4f3349483f64569c529cb861b0ea840fd23a1be27f45e5126e4f421b5ca405b0a7ffc160eb1d81e32279cb47d524f78bd8b4788da83d74ebe7657bc441e5cc8426560a9f347038dd8c41a58e35e5a49543666905e6c4ce287ae4b73e9e7a3698d9f010dfbc210426c06b0f3bb720a73394698d53aea5dad77058f2431e3ac0af76e5fa974eb78d55601c0f51c925dbfc0b9e991dca54ca7264e4052d6f8cc8f5b8d2a3e17f586a31c9b0000000000000421880b000f0000000c8a49b383337da34944d988b259b67f09000800000c00065e532f8c691c6a2af3385a694131bb471000d4ffc03411f5061cea2c4f02f4c9f6f1a71c8e0e02bebce8e1408562a11ecbcdc9e7fb6dd7f457aa6540538b096fb49382e962f44ffd76fa47ac2588da31c67caccf087c40602f5d2932effea910d093074a534f3137675cd2a540301646ee074bf94c448cfed3fb2c2e271fd588c44dce286f327bbb06c1a0f63df31bc887352d348c27f82a1d264b9cf81f0b41eb92921c69968f23c63ccd5ffc8a30a26f71f1222c0ced0afccdd13e32ac3a0d8ea8899623ef6ac82ceb2e4d721bbb5520480db5e9197d2a847ceb010086dd0006db8384333c5f63857adf4915e0394768c5194e399f7cd0318bf0763a4fdbfdc8343f69d6597172df8244c8d8d20727a64c636c518e70c755a1f6407cd1e263f6502e8f72ab2857d53c6b4bd86bc83df0ce8548ea9486b58aab022ab202aa4cd4d6be7017dca10951a3bc831bf9f9b6d1f26755a7b404d5ea7d7e63e199946a0da97c968e38b64daa03de510e6c20080088be00000002190877020100000000000009080022eb000000002d3073000000000800000007831a0800655800000002205d24142310972e2996ec3e8dfe161d82a88333655d2ace87bd4c2b23e6b51d84bb517cdcd7234b891e9989c0ab6b155007adfe4af18ab0db1c0372c38ea8455a3a4cfc042576d07ee24382c1f885aa27064bda3446ccfc89fd25c568b441c6d2c66716dcc6f9db0767aab2e38d5e61fe5199249c3b900a93e41ed6710d3e2a79ff424d54c529710d46dcdf318eecda431ff542fe50692b9ff54b96d88ac63b32581cb27f21c4c541d426f557f1aff2ef631aaf71b12a9faefe0db0c1ead7d40a4fd57437f9df897d62c398b437d1e35cb8a38800d1b7540c4144a4b5bf8ac1ff596f85f25365bf5b2dc90435b22747df5014879e386dd7b0885fd61ba279776361ff05000000f90f73c83bd5cba21cf6a9704cc10958f535d1d8fa7afd6a62b7674e57388fa45c7588c9636c9b2519a528"], 0x0) 2m3.16577233s ago: executing program 8 (id=1479): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xffffffffffffff61) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x35, 0x2c, 0x2, 0x1e, 0x3, 0x7f, 0x4, 0xed, 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d26081f4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r12 = getpid() sched_setscheduler(r12, 0x2, 0x0) syz_open_procfs(r12, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1m59.838106407s ago: executing program 7 (id=1493): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_request}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0589e0f760eb2729217af3de909359080000050000000034ec8ab44d1dce6cb53c00"/50], 0x2c}}, 0x0) 1m58.834555245s ago: executing program 7 (id=1495): socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) r0 = userfaultfd(0x80000) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000240)={0x7}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x200, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x802004cb, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100], 0xffff1000, 0x202}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x2, 0x81, 0xfc, 0x0, 0x2, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x8924}, {0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4bee5}, {0x0, 0xffff, 0x7e, 0x2, 0x0, 0x9, 0x8, 0x0, 0xf6, 0x0, 0x1, 0x10, 0x2000000000000}], 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2, 0x7c5, 0x1, 0x0, 0xd59f80, 0xa39, 0x900, 0xb, 0x8, 0x5, 0x6, 0xc8b, 0x7, 0x800008, 0x38, 0x25, {0x2, 0x1}, 0x3, 0xf1}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xf0f7, 0x149b01) r6 = openat$dsp1(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x6) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f00004f6000/0x8000)=nil, 0x8000, 0x1000002, 0x11, r8, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r9, &(0x7f0000000780)={0x2020}, 0x2020) 1m58.693634854s ago: executing program 6 (id=1496): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="140b00001a004f7cb3025f2224d2f1c9fb470000", 0x14) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) socket(0x11, 0x3, 0x0) pselect6(0x40, &(0x7f0000000900)={0x0, 0x0, 0x200040000000, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES16], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00fe000100004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) 1m56.20047318s ago: executing program 8 (id=1498): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c2c57c5664e7b404075d50685eaefc5a5e0400000000"], 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg(r4, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20) (async) close(r3) 1m55.937631503s ago: executing program 7 (id=1499): r0 = socket$inet6(0xa, 0x4, 0x40) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x3, 0x4, @local, 0x1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@getpolicy={0x174, 0x15, 0x100, 0x70bd2a, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@mcast1, 0x4e23, 0xad7, 0x4e22, 0x9, 0xa, 0x0, 0x0, 0x33, 0x0, r2}, 0x6e6bb8, 0x2}, [@lastused={0xc}, @mark={0xc, 0x15, {0x35075c, 0x3}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe}, @tfcpad={0x8, 0x16, 0xfffffffa}, @lifetime_val={0x24, 0x9, {0x7, 0x2, 0xfffffffffffffffa, 0x9d6f}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x2}}, @policy={0xac, 0x7, {{@in=@local, @in6=@mcast2, 0x4e21, 0x7, 0x4e21, 0x0, 0x2, 0x20, 0x90, 0x2f, 0x0, r3}, {0x0, 0xbf8328, 0x7fffffff, 0x100000000, 0x7, 0xc000000, 0x7ff, 0x5f8}, {0x0, 0xa1ff, 0x3, 0x1}, 0xe, 0x6e6bc0, 0x0, 0x0, 0x2, 0x2}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) stat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1m55.865755324s ago: executing program 8 (id=1500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000014000104000000000048360000000a000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0xffffffffffffff8f, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaba00000000000086dd60e90e5b000c11002001000800000000000000000000000000d1b8af000000000000000002fc01000000000000000000000000010100000000000c907801000000"], 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="9e674c6881766ae940ca321c"]) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="0000006faef08266e8d47958fcbe970000000000", @ANYRES16=r0, @ANYRES64, @ANYRESHEX=r2, @ANYBLOB="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", @ANYRES16=r1], 0x48) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x4, &(0x7f0000000180)={0x80, 0x101, 0x3, 0xe0f}) mq_notify(r7, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000002c0)="6256be9562f195bcee9c8cf50ebb9e85d80ae556f167af4c18926bd6c60ff2223f6580ac241308475a0814190dab4ac1f2f2eef909494c556c204bfb68963df5afede6dfe30a1b4b5cc949b7dd39fff574d4b2d1e6ff5bbdb4406bda784993026d3668247cfd84edeb48b0fea72720e8a063139d3792203a088eed97e3f1fc5b2208140ae413d1142899a94ac88c528fbb88e9a9c845aaf1ac4b098ebd824f80b1155bbd583a48114863a7357b88a94d933a99106fec4f49e21b94241a6511ea783c4f259a2c7880f6aa3aed799409511f83c03bf590fcd545dec8c49fc5c5a458ff6c6b7f3466c8c720fb33b0", 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x50) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000280)=@usbdevfs_disconnect={0xfffffffd}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1m55.221274098s ago: executing program 7 (id=1501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) keyctl$session_to_parent(0x12) listen(r0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0xfffffffffffffdea) r5 = dup(0xffffffffffffffff) syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x1, 0x0, 0x0, r5}, 0x0, &(0x7f0000000040)) write$tun(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xa7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x200}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000005000f000000000000000000000000000100000000000000"], 0x50) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xb) copy_file_range(r8, &(0x7f0000000080), r7, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000380)={0x1}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000099880000000000000220000018110000", @ANYRES32, @ANYBLOB="00000000000095847dac701e0000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500"], &(0x7f0000000380)='GPL\x00', 0xb, 0xb3, &(0x7f0000000840)=""/179, 0x41100, 0x0, '\x00', 0x0, 0x1b, r8, 0x8, &(0x7f0000000900)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x1, 0x5, 0x86}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r6, r9, r5, 0xffffffffffffffff, r6, r5], &(0x7f00000009c0)=[{0x2, 0x3, 0xb, 0x4}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) fcntl$getownex(r8, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r11, 0x5, 0x0, &(0x7f00000001c0)) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m55.201081185s ago: executing program 6 (id=1502): socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x26cfa431}, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0xe, 0x20000800, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x815, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x18e0) 1m54.629394701s ago: executing program 7 (id=1504): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_open_dev$sg(0x0, 0xfffffff7, 0x101042) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@local}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}], 0x1, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r8, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80) 1m54.495636777s ago: executing program 6 (id=1505): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) 1m54.464020865s ago: executing program 8 (id=1506): creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001cc0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2, 0x3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000100)}) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='minix\x00', 0xa1805b, 0x0) 1m53.815883971s ago: executing program 8 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_open_dev$sndmidi(&(0x7f0000000180), 0x1000, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4188aec6, 0x0) listen(r4, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r6 = eventfd2(0x0, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x11}], 0x1, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) shutdown(r4, 0x0) 1m53.177840483s ago: executing program 7 (id=1509): socket(0x2a, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x11, 0x38, "983acc9b866e9106cc36677a9902a0422baf2c3145b34fe3b88ad466da843db06144c12f5835655d8db2edf6460ac206aaad2e60f741f07b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x83}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x40, 0xc, 0x92, {0x92, 0xb, "c3b7516285de8154469dc976002d1ce763c4a822b243c5755129505852337c91d99e3f7d531ae2293e1940774de72ab132e113aec960de202fa57c7019aabea4c8bbb7db7bec7be1335f04c97089f66f21e4eba2f9021c6fa92c64afc57254e1681c807a808c6e34cfa492cbcd74322b0d334e43d766373c6290586f5d367a8727de38a2a43b57c3b04274a1f271ffb4"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x20, 0x1, 0xae, "be04e2bd1611b3d808ac31914799484b837db5a677ec6eec06c1271c4fef86969983ed805a2f9202ccffe43df952b3cffef2083e1eb3faa085ff7a515ca1beab4426f735db9899dadd8a516bb2b12cfe5b6281804026febcea64a22971fed724134b19eaa212e4a46f018d84a65cbb42a9c3f3645b884b5bdedde3e9374d8c5896a129a6476c7c8b7f3012fcea42c239ec4d82131ae83c42fe86ee7dd6cfe1528f0bf419cf4736756ab1f5b0ac16"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x20}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x2, 0xa, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000100)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioperm(0x0, 0x5, 0x4000000000000020) timer_getoverrun(0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000080)=0x1fa2, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m52.908934385s ago: executing program 6 (id=1510): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45040}, 0x0) getpid() (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x200000000}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000001c0)=0x60) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000657a185000000000000000700000005000000010000000000000005000000000000000100008000000000000000c000000000000000000000000000000000000000000000000000000000ffff0000090000007f1800000000000007000000000000000400000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ef5ae7ff500"/384]) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b0001000000000000000000010100800c0011002000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x44) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) 1m52.313319252s ago: executing program 6 (id=1511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.447091009s ago: executing program 6 (id=1514): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000340)={0x3, @raw_data="82c22473dc403058ff3292d031e79eff1889eb0e688a734862b999278d6ab90f1cee4664dc6b9da5838f9cdda29ae6d4747f2bc05f2bd939e485f161ee47040744de7a41872833d8f548d1a3a24b9adc8869af06f543200c1d041fef64f7e9e687abdce03bcd3d11753f246dd9bb1f61338a6dae9cf41b19a65b7acfd4e62e1caf6fc36a4310782e8fe3fc1a1054bbe76ebacfacfa22ea7395ffb946f98f9cc0fe64c361f05b7d20705c7cbff5fcaf0f8a89a73a0ed2664b0f7c9d07f4108612db1145b4a14bdc38"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@default, @bcast, @null, @default, @remote, @default, @null, @null]}, &(0x7f0000000140)=0x48, 0x80000) getsockname$ax25(r2, &(0x7f00000002c0)={{0x3, @rose}, [@netrom, @remote, @bcast, @null, @default, @null, @netrom]}, &(0x7f00000001c0)=0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000980)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0xff, @broadcast}}) socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304858) write$binfmt_script(r6, &(0x7f0000000500), 0x4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x3}, 0x8) 1m37.823066419s ago: executing program 45 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_open_dev$sndmidi(&(0x7f0000000180), 0x1000, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4188aec6, 0x0) listen(r4, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r6 = eventfd2(0x0, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x11}], 0x1, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) shutdown(r4, 0x0) 1m37.574249569s ago: executing program 46 (id=1509): socket(0x2a, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x11, 0x38, "983acc9b866e9106cc36677a9902a0422baf2c3145b34fe3b88ad466da843db06144c12f5835655d8db2edf6460ac206aaad2e60f741f07b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x83}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x40, 0xc, 0x92, {0x92, 0xb, "c3b7516285de8154469dc976002d1ce763c4a822b243c5755129505852337c91d99e3f7d531ae2293e1940774de72ab132e113aec960de202fa57c7019aabea4c8bbb7db7bec7be1335f04c97089f66f21e4eba2f9021c6fa92c64afc57254e1681c807a808c6e34cfa492cbcd74322b0d334e43d766373c6290586f5d367a8727de38a2a43b57c3b04274a1f271ffb4"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x20, 0x1, 0xae, "be04e2bd1611b3d808ac31914799484b837db5a677ec6eec06c1271c4fef86969983ed805a2f9202ccffe43df952b3cffef2083e1eb3faa085ff7a515ca1beab4426f735db9899dadd8a516bb2b12cfe5b6281804026febcea64a22971fed724134b19eaa212e4a46f018d84a65cbb42a9c3f3645b884b5bdedde3e9374d8c5896a129a6476c7c8b7f3012fcea42c239ec4d82131ae83c42fe86ee7dd6cfe1528f0bf419cf4736756ab1f5b0ac16"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x20}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x2, 0xa, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000100)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioperm(0x0, 0x5, 0x4000000000000020) timer_getoverrun(0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000080)=0x1fa2, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m36.200582728s ago: executing program 47 (id=1514): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000340)={0x3, @raw_data="82c22473dc403058ff3292d031e79eff1889eb0e688a734862b999278d6ab90f1cee4664dc6b9da5838f9cdda29ae6d4747f2bc05f2bd939e485f161ee47040744de7a41872833d8f548d1a3a24b9adc8869af06f543200c1d041fef64f7e9e687abdce03bcd3d11753f246dd9bb1f61338a6dae9cf41b19a65b7acfd4e62e1caf6fc36a4310782e8fe3fc1a1054bbe76ebacfacfa22ea7395ffb946f98f9cc0fe64c361f05b7d20705c7cbff5fcaf0f8a89a73a0ed2664b0f7c9d07f4108612db1145b4a14bdc38"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@default, @bcast, @null, @default, @remote, @default, @null, @null]}, &(0x7f0000000140)=0x48, 0x80000) getsockname$ax25(r2, &(0x7f00000002c0)={{0x3, @rose}, [@netrom, @remote, @bcast, @null, @default, @null, @netrom]}, &(0x7f00000001c0)=0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000980)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0xff, @broadcast}}) socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304858) write$binfmt_script(r6, &(0x7f0000000500), 0x4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x3}, 0x8) 28.36178801s ago: executing program 3 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={{0x8001, 0x0, 0x8, 0x0, 'syz0\x00', 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x96d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x8000000000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000, 0x2, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2a]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={{0x8001, 0x0, 0x8, 0x0, 'syz0\x00', 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x96d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x8000000000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000, 0x2, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2a]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 28.169689169s ago: executing program 3 (id=1574): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.80762731s ago: executing program 3 (id=1576): sched_setaffinity(0x0, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpid() gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) (async) mmap$dsp(&(0x7f00008e0000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r4, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) 26.390726652s ago: executing program 3 (id=1577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r3, 0x8926, 0x20001100) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$MSG_STAT(0x0, 0xb, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f0000000180)="d1432bf12578cd2c63fd9ce918878cef6cb141c1e83764e721b332259aa3524759f44d688d84b8188b8dfef0e0f38cfbc74d89a63e790f31c65bd2b13ca8e6d7bea135a674c43c188329c1911ed2fe") connect$can_bcm(r6, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000280)=0xd9, 0x4) syz_emit_ethernet(0x11, &(0x7f0000004280)={@local, @empty, @void, {@x25={0x805, {0x0, 0x1}}}}, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 24.568673474s ago: executing program 3 (id=1579): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = io_uring_setup(0x168e, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) getgid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in6=@local, 0x200, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x4d2, 0x6c}, @in=@loopback, {0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, {}, 0x0, 0x3501, 0x2, 0x0, 0xfd}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x2004c840) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (rerun: 64) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 24.4567946s ago: executing program 3 (id=1580): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x15, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='ocfs2\x00', 0x5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newneigh={0x1c, 0x1c, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, r8, 0x1, 0xa, 0x7}}, 0x1c}, 0x1, 0xba01}, 0x810) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x40, 0xb, 0x7, 0x6, 0x4, 0x7f], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) 9.060865929s ago: executing program 4 (id=1588): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000000, 0x26b}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x6ed2, 0x8000dae5, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="02030ee9d7c5560385dcb186dd84d7dc039806112405ce811c172f43d370f467c1df68475783e30f4c57b89f14dff610718f", 0x32, 0x4040010, &(0x7f0000000040)={0x11, 0x16, r6, 0x1, 0x8}, 0x14) recvmmsg(r5, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/211, 0xd3}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f00000009c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x1, 0x4, {0xa, 0x4e20, 0x62e011ba, @mcast1, 0x8}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="b08d44be0fcdd0d8a1ea68d810cb980f3a3cd9de69ee1cfd36d3dd3570b721d553b5c746b8cf771b5a6639ecedd29d9c98b7dcbb72b166b27b0a940b57d58abe14faed773a1182fcc11736262e865c7a683fdeb31254b7939d7e8c70379feae1de82c4874e0e11e7627b5c6a18302965f624e1426fb596c415d971db0d959276c257f712feb7cb26974b46565b0dc6868acb2903d8cf0d9412bf10b3a9be3383", 0xa0}, {&(0x7f0000000480)="b4cb0acc51db6b316987d52c4c83f73d8c44507768e3a5fcc3db64f8ffc9478435b630932209f9caa9f8b46eab80b319efbf0f0eaafeb30d6736cf94c730d1d015f1c51dad165d97607f12a7448db328cccf569847", 0x55}, {&(0x7f0000000600)="bf9a53fde3789bad10f87feb54d7e11e915d2f53fb", 0x15}], 0x3, &(0x7f0000000680)=[{0x18, 0x10c, 0x4, "db413c7a"}, {0xf0, 0x114, 0x0, "0f8ff908091c3a3a6c29fa55a3699c65dfb47ce63d1053ca72c5e9b2c3c6695a153d73605ca14a6f2e5ccc8c84fb3a2ed8f7d461fa5ac9b7c72650dfdf1d98508bc7b0cfb1408caa5695fccabeaf331e05bcf48bfe8153a8068a12ae1f9c838096e89a6ba973291026843d073d6e0e72337bec106af97dd50206a2c7d68bea16170bf32b996a60c38621548716cc73f5fd11654294920932288eb14083c87b6962d55ae0edcb4270868301acf78bfcf11f28f0a463ce9c565c8b31f72f04bff306b50ca53bd7d9fd7b8e3d99df16a5fd006f5030077b9d6c46c9b151687561"}, {0xb0, 0x88, 0x780000, "6508b5117c49c95f27cbc8cfbd45356d139a40c2e08d7ecaa1e6218e30d5d9ef820c5b115f1d1609796b5e7c2bf07d801eee5843e362e9797441b19010e91eb42efbb8c219571410eae5097ffb2ca52d6e64123fa390e39c3634a720b6424e15b2facdc042e985236608d362260c182524e8200cd85a9024b65e0f1ab8f0c52929308fd76c735980a460a04a380739c855a534a0bad86779aad730e8"}, {0x10, 0x119, 0x6}, {0x20, 0x102, 0x6, "2d3aca38b8744ba2dd2575565c39"}, {0x80, 0x29, 0x1, "3d4f284342d2524c2def772f2ff7a02e2b99c50aef15729cc5e89055a32d8dc8855a8e754a480e85d69b9db3ffb82ab196411a350e72241d5ac7412e370c646c59f175e2962fb2aec5ebf54a1340ba88dfcbf03421210277927455ae9b72fb12534e83ef4c1a6cda240662a4bca137"}, {0xa8, 0x6, 0x3, "e04661142251aa10fc3ef6964d8d15f16c53b1c9e2255dc3f5074cbaeef6171ae5cc5e08ea2a49844ebea0f692095dba4bf2a25da174fc5c7baf81c289c8d489bf97a17880d0d5036bb38b938346cd4bccd0faca148efd17c48b3502847d2b741bd2c242619f5638369c54fca5a222fe86a71596c6857d0e60f1eb1db02e9902b9384c8c607ad5b48b4412daddd03f11631143cc55e9"}], 0x310}, 0x4) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r8, &(0x7f0000000140)="9b9047f8767d6efd0cedd33c6bc8e689e348ddd952b1d2a8bab4ce961f06b9df0bb7ddef63cf98d86abf5fa066a1e8c31edc1d1f595c694ac256da8b46200fa1c4cd5eabcc67955de7bf21ddaa8487734906888530022af941d7293c5a478649d149bc05ae04b6af44b1c5f3084c85e8b3136daacac7358569bc60f1bc52b7500a9daa3af1cade9dc10bb847480bd3a632c5944079b370", &(0x7f0000000200)=""/179}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ifreq(r9, 0x8970, &(0x7f0000000a00)={'\x00', @ifru_ivalue=0xef}) 8.605794223s ago: executing program 4 (id=1589): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x80000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 8.362251787s ago: executing program 48 (id=1580): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x15, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='ocfs2\x00', 0x5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newneigh={0x1c, 0x1c, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, r8, 0x1, 0xa, 0x7}}, 0x1c}, 0x1, 0xba01}, 0x810) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x40, 0xb, 0x7, 0x6, 0x4, 0x7f], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) 8.153530742s ago: executing program 0 (id=1593): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xffffff22) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080002400000001608000140000000071400"], 0xc4}}, 0x4000040) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x400000000c0201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2, 0x4010, r6, 0x82000000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x7fffffff, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x9, 0xfffffffffffffffc, 0x0, 0x2, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000070b000/0x4000)=nil, 0x4000, &(0x7f0000000280)='keyring\x00') r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={0x0, 0xffffffffffffff3d, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9}) 7.538778284s ago: executing program 4 (id=1594): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0x80000c, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$MAP_CREATE(0x0, 0x0, 0xfffffdee) socket(0x2, 0x2, 0x1) 7.129642079s ago: executing program 0 (id=1595): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x101, 0x800, {0x0}, {0xee01}, 0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r0, r2, r5) sync_file_range(0xffffffffffffffff, 0x6, 0x8000, 0x9) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x122, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000240)=0x8, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="f583163aab786514ab25e01889ed050e6ae73a780901283e2af2f5d61ebe9db0bfe55af4219ad004ccfdb98f137a42d1ca4f1d666643b77eb3a75651790d25c4ba805ba33d50c9fd7415", 0x4a, 0x0) r8 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r7, 0x5, 0x1, r8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x2, 0x6}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom1\x00', 0x800, 0x0) r11 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f00000005c0)) r12 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5000000) close(r10) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000600)={r8, 0x34, 0xc}, &(0x7f0000000640)={'enc=', 'oaep', ' hash=', {'hmac(sha256-neon)\x00'}}, &(0x7f00000006c0)="87170bc68edecf9bada805e9fa092af52383837e8d4cd326180d8c59d32c1922be715a00f9315e4a679c1714b9c0dc3022a50af6", &(0x7f0000000700)=""/12) fcntl$lock(r10, 0x25, &(0x7f0000000740)={0x1, 0x1, 0x815, 0x8, r1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000007c0)={r9, 0x1, 0xf720, 0x2, &(0x7f0000000780)=[{0x8001, 0x0, 0x2, 0x7f}, {0x8, 0x8, 0x4, 0x5}]}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000800)={0x4, 0x2, 0x5, {0x4a, 0x4, 0x0, 0x36b}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x148482}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x98, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xb0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x98}}, 0x20000880) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000009c0)={r3, r4, r5}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xd4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80000c0}, 0x40001) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000b00)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000b40)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f0000000b80)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000c00)={r9, 0x9, 0x73, 0x9, 0x1, [r13, r14, r15], [0x4, 0xfffffff7, 0x100, 0x4], [0x9, 0x4, 0x6, 0x8000000], [0x8000000000000000, 0x1, 0x9, 0x1]}) 6.873818161s ago: executing program 0 (id=1596): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x868, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000080)={r2}, 0x1) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x595c01) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x23d) r10 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x2, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 6.854820189s ago: executing program 1 (id=1524): creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001cc0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2, 0x3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000100)}) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='minix\x00', 0xa1805b, 0x0) 6.454771223s ago: executing program 0 (id=1597): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000ac0)=[@register_looper, @enter_looper, @enter_looper], 0x0, 0x0, 0x0}) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) 6.360035924s ago: executing program 1 (id=1598): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x0, [], 0x2, 0x0}, 0x78) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_pidfd_open(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000001, r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500), 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0x3d9a, &(0x7f00000002c0)={0x0, 0xc78a, 0x400, 0x1, 0x20001cd}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40012000}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r8, 0x0, 0x0) io_uring_enter(r5, 0x1066, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.90169898s ago: executing program 0 (id=1599): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205000000a3"], 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FIOCLEX(r2, 0x5451) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r9 = syz_open_procfs(0x0, 0x0) syz_open_pts(r9, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) fstat(r9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}}) 4.84374866s ago: executing program 1 (id=1600): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='target_sequencer_start\x00', r1}, 0x18) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r4, 0x0, r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bcd) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086203, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0xffffffffffffffff, 0x1}}) write$sndseq(r9, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 4.690209287s ago: executing program 1 (id=1601): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f000034b000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4004, @fd=r3, 0x6, 0x0, 0x0, 0x9, 0x1, {0x2}}) setuid(0x0) socket$alg(0x26, 0x5, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x6000000b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005580), 0x0) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x114, &(0x7f0000000280)=0x1, 0x0, 0x4) 4.4777033s ago: executing program 4 (id=1602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'ip_vti0\x00', r3, 0x20, 0x20, 0x7f, 0xffffffc2, {{0x19, 0x4, 0x1, 0x23, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x13, 0xbf, [@loopback, @local, @rand_addr=0x64010101, @multicast2]}, @end, @generic={0x83, 0xa, "81b8c33bf37231dc"}, @timestamp={0x44, 0x10, 0x35, 0x0, 0x0, [0xfff, 0x3, 0x7b05]}, @lsrr={0x83, 0x1f, 0xae, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010101, @rand_addr=0x64010101, @local, @local, @empty, @multicast2]}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x0) 3.939611981s ago: executing program 1 (id=1603): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, r3}}, 0x18) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28f9f68d8cd8d4000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a010300e6ff0000000002000000090001008d797a30000000000900030073797a3200001b0014000000110001d5c7a2d000"], 0x7c}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000400000009000000000000000000020000002c000000050a01020000000000000000020000070900010073797a30000000000900030073797a3100000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getrandom(&(0x7f0000000300)=""/79, 0x4f, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x3bf8, 0x38001) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, &(0x7f0000000700)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x1, 0xddcd, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) timer_settime(0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1277a60c558be8d7e91297f90bbac3483b9c0e10a9f0e1b5a0c79cbea628060000000502010203010902000000000000000000"], 0x0) chdir(&(0x7f0000000100)='./file0\x00') ptrace(0x10, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) 3.663402691s ago: executing program 4 (id=1604): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000400)={{0x3, 0x2}}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030f0000000000000000340000000800030008000000253c93c9d179c9ab2d0fb861b074db6267b50af4c5efc5a6017b97e770df8f864fb09395cc3267834bb7065b4e3418ed277c42ca9dfcebc1f1cbabf9f5add7159e3d1852eebe6d97c427af25c9324917ec7b91a570b97232b605026cafe61e58b09469676c1cd876b1eee54a5681790c7dc15cb644eeb91243d07084b45500c15de5b083748a5a0fefa46b9671609060cc60e91538f9fbea9d4e699c5d2111a5a87d2dbdf9c4e07457254ab7a143a6c7016477d2ad6c331f1d4ae20feb2651757bf9ed9c7773ef92150000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c015}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r3, 0x0, 0x0) (rerun: 32) 3.13774968s ago: executing program 9 (id=1518): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000010049ed040095000000000000ff"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c04d, r2, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 2.825775131s ago: executing program 9 (id=1605): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x2, 0xf0, 0x2}, 0x1}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 1.592927355s ago: executing program 9 (id=1606): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x20, &(0x7f0000000240)={0x0, 0x10, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x6, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000180), 0xb) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x40800) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x58, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x40) ftruncate(r6, 0x82081fc) 658.836951ms ago: executing program 9 (id=1607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007100)={0x0, 0x0, &(0x7f00000070c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000120a00040000000000000000000000000400048020000000000a01040000000000000000030000000900010073797a300000000030000000160a0101000000000000000003000000040003800900020073797a31000000000900010073797a30"], 0x90}}, 0x40840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000000000000000000001"]) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e80006558", 0x9}, {&(0x7f0000000200)="6bdcf27c", 0x4}], 0x3) ioctl$SIOCNRDECOBS(r0, 0x89e2) 409.767254ms ago: executing program 0 (id=1608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) semget$private(0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x60, "d6f4028819f59700573dd7d5c49a35229fa92d08a3279280771aed3114b82acceca419ef017fbeff19b4b436f8cdc6a20549241939bf2de25807b47c50b30d04afbba2ce11aa89737703238d60ad9ec7dff4c992ca9835ffbffddde9abeaaef9"}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)=""/107, &(0x7f0000000300)=0x6b) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200"], 0x44}}, 0x0) r7 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]}) 151.465426ms ago: executing program 1 (id=1609): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = io_uring_setup(0x7bda, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) io_uring_setup(0x7bda, &(0x7f0000000080)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 0s ago: executing program 4 (id=1610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x1, 0x700, 0x10001, 0x8001, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @loopback, {[@end]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x239]}, 0x8, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x3, 0x0}, 0x8) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) getsockopt$inet6_tcp_buf(r13, 0x6, 0x1a, 0x0, 0x0) r14 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r14, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x82d}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x1, 0x8, 0x8, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xb4, 0x0, &(0x7f0000000240), 0x41100, 0x8, '\x00', r7, @fallback=0x30, r8, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0x2, 0x1}, 0x10, r9, r10, 0x3, &(0x7f0000000540), &(0x7f0000000580)=[{0x4, 0x5, 0xe, 0x2}, {0x4, 0x2, 0x2, 0x2}, {0x3, 0x3, 0xc, 0x7}], 0x10, 0x80, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x85f, 0x0) kernel console output (not intermixed with test programs): zed udl on minor 2 [ 493.158842][ T6423] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 493.185626][ T6423] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 493.219187][T12557] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1389'. [ 493.230381][ T866] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 493.240578][ T5940] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 493.247752][ T6423] usb 5-1: USB disconnect, device number 69 [ 493.254029][ T5940] zl10353_read_register: readreg error (reg=127, ret==-32) [ 493.261579][ T866] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 493.360863][ T9] option 8-1:3.51: GSM modem (1-port) converter detected [ 493.390488][ T9] usb 8-1: USB disconnect, device number 31 [ 493.398458][ T9] option 8-1:3.51: device disconnected [ 493.638035][ T9] usb 7-1: USB disconnect, device number 26 [ 494.061619][ T6423] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 494.386958][T12572] binder: Unknown parameter 'smackfsroot' [ 494.410425][T12575] binder: 12574:12575 ioctl 89f2 0 returned -22 [ 494.417293][T12575] binder_alloc: 12574: binder_alloc_buf, no vma [ 494.478256][ T6423] usb 5-1: Using ep0 maxpacket: 16 [ 494.518346][ T6423] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 494.538192][ T6423] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.595986][ T6423] usb 5-1: config 1 interface 0 has no altsetting 0 [ 494.633055][ T6423] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.642893][ T6423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.680614][ T6423] usb 5-1: Product: 쀮ã½ê¦»êŸ¢êž ï©†è•ºî¸¯é¢ºâ›•ì±œè²´ï¥©ì¹¬é†™ì¿ºç…Žã® á¿ä«¸âƒ…â«ë©·ï®¤ì®’䪧⤄ê£ä›Šî’ᤫ낹ᰩ讈毚蕊थ욺紂✱履툲圯í¸ï¥…淂ᤚ彨踟캗仭ꄹꇳ뢺볿둽볂⢦↗哥誺ᯔƵ᎑⛒漞뀄丹ჵ䟟㲒㬟扩⼦猩웭ꔆïŽî˜ã¹˜Þ²ê‘…ç­” [ 494.706820][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.851587][ T29] audit: type=1400 audit(1733862334.972:1506): avc: denied { setopt } for pid=12580 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 494.871662][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.904092][ T6423] usb 5-1: Manufacturer: 《 [ 494.920768][ T6423] usb 5-1: SerialNumber: à ‰ [ 494.952533][T12565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 494.959937][T12565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.200962][ T6423] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 495.253187][ T6423] usb 5-1: USB disconnect, device number 70 [ 495.271560][ T6423] usblp0: removed [ 498.188588][ T6423] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 498.341560][ T6423] usb 8-1: Using ep0 maxpacket: 32 [ 498.360290][ T6423] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.381793][ T6423] usb 8-1: config 0 has no interface number 0 [ 498.415681][ T6423] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 498.451761][ T6423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.517241][ T5822] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 498.517564][ T6423] usb 8-1: Product: syz [ 498.557544][ T6423] usb 8-1: Manufacturer: syz [ 498.564811][ T6423] usb 8-1: SerialNumber: syz [ 498.570396][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1408'. [ 498.580209][ T6423] usb 8-1: config 0 descriptor?? [ 498.651538][ T5822] usb 5-1: device descriptor read/64, error -71 [ 498.675727][T12631] netlink: set zone limit has 8 unknown bytes [ 498.891789][ T5822] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 499.074598][ T5822] usb 5-1: device descriptor read/64, error -71 [ 499.075358][ T6423] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 499.113541][ T6423] usb 8-1: selecting invalid altsetting 1 [ 499.119381][ T6423] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 499.242124][ T6423] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 499.252579][ T6423] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 499.252825][ T5822] usb usb5-port1: attempt power cycle [ 499.260828][ T6423] usb 8-1: media controller created [ 499.280576][ T6423] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.683236][T12606] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1402'. [ 500.721650][T12606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.141653][ T5822] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 501.216745][ T5822] usb 5-1: device descriptor read/8, error -71 [ 501.232739][T12639] binder: 12635:12639 ioctl 89f2 0 returned -22 [ 501.536477][ T6423] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 501.543521][ T6423] zl10353_read_register: readreg error (reg=127, ret==-71) [ 501.579498][ T6423] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 501.589390][T12642] /dev/nullb0: Can't open blockdev [ 501.615000][ T5822] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 502.018484][ T6423] usb 8-1: USB disconnect, device number 32 [ 502.207651][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.217036][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.594767][ T5822] usb 5-1: device descriptor read/8, error -71 [ 503.594153][ T5822] usb usb5-port1: unable to enumerate USB device [ 504.061620][ T5822] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 504.090576][T12669] binder: 12660:12669 unknown command 0 [ 504.151800][T12669] binder: 12660:12669 ioctl c0306201 200001c0 returned -22 [ 504.225078][T12670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.231512][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 504.243863][ T5822] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.304900][ T5822] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.423320][ T5822] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 504.557092][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.587133][ T5822] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 504.641386][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.692705][ T5822] usb 5-1: config 0 descriptor?? [ 504.781651][ T29] audit: type=1400 audit(1733862344.872:1507): avc: denied { map } for pid=12672 comm="syz.7.1419" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 504.805833][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.327122][ T5822] usbhid 5-1:0.0: can't add hid device: -71 [ 505.340185][ T5822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.362769][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1420'. [ 505.396399][ T5822] usb 5-1: USB disconnect, device number 75 [ 505.590202][ T6647] Bluetooth: hci3: Frame reassembly failed (-84) [ 505.832142][ T5862] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 506.011705][ T5862] usb 8-1: Using ep0 maxpacket: 32 [ 506.023959][ T5862] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.032155][ T5862] usb 8-1: config 0 has no interface number 0 [ 506.045824][ T5862] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 506.075273][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.105735][ T5862] usb 8-1: Product: syz [ 506.114429][T12683] binder: 12682:12683 ioctl 89f2 0 returned -22 [ 506.130916][ T5862] usb 8-1: Manufacturer: syz [ 506.151146][ T5862] usb 8-1: SerialNumber: syz [ 506.222227][ T5862] usb 8-1: config 0 descriptor?? [ 506.253631][ T5862] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 506.317023][ T5862] usb 8-1: selecting invalid altsetting 1 [ 506.345941][ T5862] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 506.420254][ T5862] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 506.495594][ T5862] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 506.564287][T12686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1423'. [ 506.576763][ T5862] usb 8-1: media controller created [ 506.621453][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.725730][ T5862] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 506.757746][ T5862] zl10353_read_register: readreg error (reg=127, ret==-32) [ 507.563745][ T5823] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 508.653694][ T5822] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 510.516054][ T5862] usb 8-1: USB disconnect, device number 33 [ 510.582166][ T5822] usb 4-1: device descriptor read/64, error -71 [ 510.583053][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 510.750410][T12714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.831765][ T5822] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 512.918279][ T5940] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 513.111643][ T5940] usb 7-1: device descriptor read/64, error -71 [ 513.588289][ T5940] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 517.093108][T12741] input: syz1 as /devices/virtual/input/input44 [ 517.414476][ T6423] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 517.823322][T12747] lo speed is unknown, defaulting to 1000 [ 517.921549][T12748] lo speed is unknown, defaulting to 1000 [ 518.451695][ T6423] usb 8-1: device descriptor read/64, error -71 [ 518.531646][ T5862] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 518.691559][ T6423] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 518.740864][ T5862] usb 4-1: device descriptor read/64, error -71 [ 518.885508][ T6423] usb 8-1: device descriptor read/64, error -71 [ 519.006747][ T6423] usb usb8-port1: attempt power cycle [ 519.053589][ T5862] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 519.251656][ T5862] usb 4-1: device descriptor read/64, error -71 [ 519.382046][ T5862] usb usb4-port1: attempt power cycle [ 519.392091][ T6423] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 519.434341][ T6423] usb 8-1: device descriptor read/8, error -71 [ 519.681588][ T6423] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 519.732554][ T29] audit: type=1400 audit(1733862359.852:1508): avc: denied { read } for pid=12768 comm="syz.4.1443" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 519.811650][ T29] audit: type=1800 audit(1733862359.912:1509): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1443" name="/" dev="9p" ino=2 res=0 errno=0 [ 519.884004][ T6423] usb 8-1: device descriptor read/8, error -71 [ 519.994819][ T6423] usb usb8-port1: unable to enumerate USB device [ 520.784823][ T5862] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 521.803033][ T5862] usb 4-1: device descriptor read/8, error -71 [ 523.053717][ T4367] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.587524][T12807] overlayfs: failed to resolve './file1': -2 [ 523.762149][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 524.234447][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 526.439305][ T9] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 526.471631][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.506355][ T9] usb 7-1: config 0 has no interface number 0 [ 526.551599][ T9] usb 7-1: string descriptor 0 read error: -71 [ 526.557881][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 526.607560][ T9] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 526.747629][ T9] usb 7-1: config 0 descriptor?? [ 526.753832][ T9] usb 7-1: can't set config #0, error -71 [ 526.764353][ T9] usb 7-1: USB disconnect, device number 29 [ 527.312939][ T5862] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 527.370580][T12837] pim6reg: entered allmulticast mode [ 527.458881][T12838] lo speed is unknown, defaulting to 1000 [ 528.309065][ T29] audit: type=1326 audit(1733862368.242:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ea37ff19 code=0x7ffc0000 [ 528.348775][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.362101][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.372534][ T5862] usb 4-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00 [ 528.381720][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.467430][ T29] audit: type=1326 audit(1733862368.242:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.4.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ea37ff19 code=0x7ffc0000 [ 528.511923][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 528.533720][ T5862] usb 4-1: config 0 descriptor?? [ 528.722664][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.731827][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.749268][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 528.760218][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.768297][ T9] usb 7-1: Product: syz [ 528.773593][ T9] usb 7-1: Manufacturer: syz [ 528.778193][ T9] usb 7-1: SerialNumber: syz [ 528.786664][ T9] usb 7-1: config 0 descriptor?? [ 528.792906][ T9] smsc75xx v1.0.0 [ 528.796684][ T9] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 528.808960][ T9] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 529.022467][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.046164][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.116660][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.233126][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.242293][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.249153][ T6423] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 529.258021][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.266460][ T5862] hid-generic 0003:22ED:1010.001E: unknown main item tag 0x0 [ 529.285078][ T5862] hid-generic 0003:22ED:1010.001E: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.3-1/input0 [ 529.632061][ T6423] usb 5-1: Using ep0 maxpacket: 16 [ 529.646591][ T6423] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 529.647061][ T5862] usb 4-1: USB disconnect, device number 49 [ 529.694935][T12827] netlink: 'syz.3.1458': attribute type 21 has an invalid length. [ 529.702955][ T6423] usb 5-1: config 0 has no interface number 0 [ 529.727492][ T6423] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 529.794296][T12858] netlink: 'syz.8.1464': attribute type 10 has an invalid length. [ 529.808236][ T6423] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 529.903847][T12858] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 530.144164][ T6423] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 530.160967][ T6423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.181503][ T6423] usb 5-1: Product: syz [ 530.185693][ T6423] usb 5-1: Manufacturer: syz [ 530.190284][ T6423] usb 5-1: SerialNumber: syz [ 530.195514][ T5892] usb 7-1: USB disconnect, device number 30 [ 530.212546][T12831] pim6reg: left allmulticast mode [ 530.218768][ T6423] usb 5-1: config 0 descriptor?? [ 530.233250][T12852] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 530.240814][T12852] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 530.619469][ T6423] asix 5-1:0.251: probe with driver asix failed with error -71 [ 530.632841][ T6423] usb 5-1: USB disconnect, device number 76 [ 532.621663][ T29] audit: type=1400 audit(1733862372.702:1512): avc: denied { wake_alarm } for pid=12897 comm="syz.3.1475" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 532.841556][ T866] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 533.991690][ T5892] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 534.136922][T12922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12922 comm=syz.7.1482 [ 534.152950][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.179980][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.211229][ T5892] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 534.264096][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.303555][ T5892] usb 9-1: config 0 descriptor?? [ 534.962075][ T29] audit: type=1400 audit(1733862375.092:1513): avc: denied { setopt } for pid=12942 comm="syz.7.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 535.207310][ T5892] magicmouse 0003:05AC:0269.001F: unknown main item tag 0x0 [ 535.236072][ T5892] magicmouse 0003:05AC:0269.001F: unknown main item tag 0x0 [ 535.349511][ T5892] magicmouse 0003:05AC:0269.001F: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.8-1/input0 [ 536.602140][ T29] audit: type=1400 audit(1733862376.742:1514): avc: denied { write } for pid=12911 comm="syz.8.1479" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 536.625237][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.920797][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1493'. [ 537.016888][T12960] macvlan0: entered promiscuous mode [ 537.276726][T12962] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 537.901096][ T29] audit: type=1400 audit(1733862378.032:1515): avc: denied { read } for pid=12965 comm="syz.7.1495" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 537.924256][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.021609][ T29] audit: type=1400 audit(1733862378.032:1516): avc: denied { open } for pid=12965 comm="syz.7.1495" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 538.045066][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.122576][ T6423] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 538.277672][ T29] audit: type=1400 audit(1733862378.412:1517): avc: denied { execute } for pid=12965 comm="syz.7.1495" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 538.361605][ T6423] usb 4-1: Using ep0 maxpacket: 16 [ 538.382794][ T6423] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.394164][ T6423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.407215][ T6423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.420407][ T6423] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 538.431866][ T6423] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.450678][ T6423] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 538.462116][ T6423] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 538.471406][ T6423] usb 4-1: Manufacturer: syz [ 538.486478][ T6423] usb 4-1: config 0 descriptor?? [ 538.718184][T12966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 538.770082][T12966] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 538.811528][ T6423] rc_core: IR keymap rc-hauppauge not found [ 538.817434][ T6423] Registered IR keymap rc-empty [ 538.831621][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 538.861681][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 538.904029][T12966] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 538.914027][T12966] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 538.938016][ T6423] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 539.031918][ T6423] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 539.063642][T12966] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 539.074738][T12966] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 539.122328][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.221107][ T29] audit: type=1400 audit(1733862379.352:1518): avc: denied { ioctl } for pid=12978 comm="syz.4.1497" path="socket:[45334]" dev="sockfs" ino=45334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 539.225954][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.245930][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.284578][T12966] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 539.300510][T12966] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 539.911628][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.931608][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.951597][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.971587][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.991586][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.011632][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.051602][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.244839][ T6423] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.283618][ T6423] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 540.301666][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 540.304040][ T6423] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 540.421937][T12966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.427965][T12966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 540.437534][ T5862] usb 9-1: USB disconnect, device number 19 [ 540.472479][T12966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 540.517333][T12966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.546689][T12966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 540.586794][T12966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 540.912856][ T5823] Bluetooth: hci7: command 0x0406 tx timeout [ 540.927134][T12996] 9pnet_fd: Insufficient options for proto=fd [ 541.072050][ T5823] Bluetooth: hci8: command 0x0406 tx timeout [ 541.205150][ T866] usb 4-1: USB disconnect, device number 51 [ 541.311637][ T5823] Bluetooth: hci9: command 0x0406 tx timeout [ 541.448078][ T5862] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 542.381659][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 542.431579][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.708202][T13026] /dev/nullb0: Can't open blockdev [ 542.821682][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 543.196607][ T5823] Bluetooth: hci7: command 0x0406 tx timeout [ 543.202812][ T5823] Bluetooth: hci8: command 0x0406 tx timeout [ 543.325666][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 543.395834][ T5828] Bluetooth: hci9: command 0x0406 tx timeout [ 544.521600][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 544.572823][T13050] tmpfs: Unknown parameter '' [ 544.831548][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 544.840195][T13040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 544.846761][T13040] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 544.855513][T13040] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 544.861423][T13040] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 544.872153][T13040] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 544.878061][T13040] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 544.886449][T13040] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 544.892379][T13040] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 545.324409][ T29] audit: type=1400 audit(1733862385.462:1519): avc: denied { write } for pid=13058 comm="syz.6.1514" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 546.538230][ T5940] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 546.601574][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 546.912779][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 547.091709][ T5862] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 547.252564][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 547.264168][T13040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 547.270066][T13040] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 547.752002][ T5862] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.771562][ T5862] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.781350][ T5862] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.811595][ T5862] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.831664][ T5862] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.840718][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.451741][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 552.201817][ T5862] usb 5-1: can't set config #16, error -71 [ 552.532865][ T5862] usb 5-1: USB disconnect, device number 77 [ 554.401527][ T5940] usb 4-1: device descriptor read/all, error -71 [ 559.422573][T13040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.428504][T13040] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 559.484684][T13076] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1520'. [ 559.853278][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 559.869616][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 559.961015][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 559.971132][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 559.981944][ T5823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 559.989182][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.002714][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.016795][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.024332][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.033072][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.040605][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 560.051071][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.205344][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.215615][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.266624][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.295382][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.324730][ T5823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 560.336901][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.371602][ T8] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 560.491691][ T29] audit: type=1400 audit(1733862400.612:1520): avc: denied { write } for pid=13091 comm="syz.4.1523" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 561.746348][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 561.756021][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 561.983058][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 561.997937][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.005637][ T5823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 562.015418][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.025003][T13076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.193798][ T5828] Bluetooth: hci3: command tx timeout [ 562.408455][T12333] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.441568][ T5828] Bluetooth: hci1: command tx timeout [ 562.661919][ T8] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 562.719731][T13076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.805339][T13077] lo speed is unknown, defaulting to 1000 [ 562.856049][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.867256][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 562.883962][T12333] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.904648][ T8] usb 5-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 562.921838][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.265440][T13076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.360679][T13095] lo speed is unknown, defaulting to 1000 [ 563.502085][T12333] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.591937][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.598247][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.602406][ T8] usb 5-1: config 0 descriptor?? [ 563.631797][T13099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.732450][T13088] lo speed is unknown, defaulting to 1000 [ 563.881540][T13076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.137428][ T5823] Bluetooth: hci5: command tx timeout [ 564.255128][ T8] thrustmaster 0003:044F:B65A.0020: unknown main item tag 0x0 [ 564.263927][ T8] thrustmaster 0003:044F:B65A.0020: hidraw0: USB HID v0.00 Device [HID 044f:b65a] on usb-dummy_hcd.4-1/input0 [ 564.277003][T12333] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.287871][ T5823] Bluetooth: hci3: command tx timeout [ 564.293485][ T8] thrustmaster 0003:044F:B65A.0020: no inputs found [ 564.517864][ T5823] Bluetooth: hci1: command tx timeout [ 564.534543][ T8] usb 5-1: USB disconnect, device number 79 [ 564.599568][T13077] chnl_net:caif_netlink_parms(): no params data found [ 564.803133][T13076] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.840610][T13076] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.898156][T13095] chnl_net:caif_netlink_parms(): no params data found [ 565.036844][T13076] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.086377][T13076] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.542811][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.550077][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.557678][T13077] bridge_slave_0: entered allmulticast mode [ 565.564774][T13077] bridge_slave_0: entered promiscuous mode [ 565.574895][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.582128][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.589362][T13077] bridge_slave_1: entered allmulticast mode [ 565.596119][T13077] bridge_slave_1: entered promiscuous mode [ 565.701621][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 565.856029][T13088] chnl_net:caif_netlink_parms(): no params data found [ 565.865560][ T9] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 565.888026][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.002681][ T9] usb 5-1: config 0 descriptor?? [ 566.191843][ T5823] Bluetooth: hci5: command tx timeout [ 566.351596][ T5823] Bluetooth: hci3: command tx timeout [ 566.596838][ T5823] Bluetooth: hci1: command tx timeout [ 566.761389][T13077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.929871][T13077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.013912][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.022634][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.032945][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.040531][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.047852][T13095] bridge_slave_0: entered allmulticast mode [ 567.055093][T13095] bridge_slave_0: entered promiscuous mode [ 567.108200][ T29] audit: type=1400 audit(1733862407.242:1521): avc: denied { mount } for pid=13124 comm="syz.3.1529" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 567.335784][T13077] team0: Port device team_slave_0 added [ 567.379137][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.404266][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.438275][T13095] bridge_slave_1: entered allmulticast mode [ 567.466627][T13095] bridge_slave_1: entered promiscuous mode [ 567.500619][T12333] bridge_slave_1: left allmulticast mode [ 567.511550][T12333] bridge_slave_1: left promiscuous mode [ 567.517244][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.811939][T12333] bridge_slave_0: left allmulticast mode [ 567.817635][T12333] bridge_slave_0: left promiscuous mode [ 567.823851][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.212376][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 568.281641][ T5823] Bluetooth: hci5: command tx timeout [ 568.310930][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 568.424736][ T9] usb 5-1: USB disconnect, device number 80 [ 568.432916][ T5823] Bluetooth: hci3: command tx timeout [ 568.781683][ T5823] Bluetooth: hci1: command tx timeout [ 569.361648][ T5940] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 569.381609][ T9] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 569.520384][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 569.536508][ T5940] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.550863][ T5940] usb 4-1: config 0 has no interface number 0 [ 569.573180][ T9] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 569.591569][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 569.616371][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 29440, setting to 64 [ 569.627581][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.629662][T12333] bond0 (unregistering): Released all slaves [ 569.650955][ T5940] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 569.660301][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.679436][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 569.689867][ T5940] usb 4-1: Product: syz [ 569.694808][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 569.705798][T13077] team0: Port device team_slave_1 added [ 569.711563][ T5940] usb 4-1: Manufacturer: syz [ 569.721527][ T5940] usb 4-1: SerialNumber: syz [ 569.731563][ T9] usb 5-1: Manufacturer: syz [ 569.737718][ T5940] usb 4-1: config 0 descriptor?? [ 569.752205][ T9] usb 5-1: config 0 descriptor?? [ 569.757754][T13141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.763039][ T5940] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 569.785387][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 569.795882][ T5940] usb 4-1: selecting invalid altsetting 1 [ 569.802887][ T5940] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 569.823051][ T5940] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 569.838115][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 569.851618][ T5940] usb 4-1: media controller created [ 569.864852][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.969623][ T5940] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 569.976876][ T5940] zl10353_read_register: readreg error (reg=127, ret==-32) [ 569.999912][T13077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.025352][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.142566][T13077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.279998][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.287644][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.302097][T13088] bridge_slave_0: entered allmulticast mode [ 570.317711][T13088] bridge_slave_0: entered promiscuous mode [ 570.338989][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.368428][ T5828] Bluetooth: hci5: command tx timeout [ 570.394427][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.942035][T13077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.949009][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.195277][ T8] usb 5-1: USB disconnect, device number 81 [ 572.233010][T13077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.342760][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.373068][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.391972][T13088] bridge_slave_1: entered allmulticast mode [ 572.414933][T13088] bridge_slave_1: entered promiscuous mode [ 572.481078][T13095] team0: Port device team_slave_0 added [ 572.954749][T13095] team0: Port device team_slave_1 added [ 573.113211][T13077] hsr_slave_0: entered promiscuous mode [ 573.140076][T13077] hsr_slave_1: entered promiscuous mode [ 573.148067][ T29] audit: type=1400 audit(1733862413.292:1522): avc: denied { getopt } for pid=13148 comm="syz.4.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 573.198229][T13077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.228899][T13077] Cannot create hsr debugfs directory [ 573.252463][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.273788][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.391521][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 573.543112][ T9] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.564548][ T9] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.611572][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.628402][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 573.673742][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.703276][ T9] usb 5-1: config 0 descriptor?? [ 574.015282][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.042088][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.147187][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.183323][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.218928][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.307577][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.495188][T13088] team0: Port device team_slave_0 added [ 574.553115][T12333] hsr_slave_0: left promiscuous mode [ 574.611341][T12333] hsr_slave_1: left promiscuous mode [ 574.726780][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.756852][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.810612][ T9] usb 5-1: USB disconnect, device number 82 [ 574.881963][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.889421][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.978592][T12333] veth1_macvtap: left promiscuous mode [ 574.991621][T12333] veth0_macvtap: left promiscuous mode [ 574.997304][T12333] veth1_vlan: left promiscuous mode [ 575.044265][T12333] veth0_vlan: left promiscuous mode [ 575.891619][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 576.072451][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.091537][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.113932][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 576.161579][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 576.181518][ T9] usb 5-1: SerialNumber: syz [ 576.468126][ T9] usb 5-1: 0:2 : does not exist [ 576.491558][ T9] usb 5-1: unit 5: unexpected type 0x09 [ 576.515095][ T9] usb 5-1: USB disconnect, device number 83 [ 577.201743][T13154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13154 comm=syz.4.1536 [ 577.741853][ T29] audit: type=1400 audit(1733862417.772:1523): avc: denied { mount } for pid=13155 comm="syz.4.1537" name="/" dev="hugetlbfs" ino=47811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 578.296320][T12333] team0 (unregistering): Port device team_slave_1 removed [ 578.668167][T12333] team0 (unregistering): Port device team_slave_0 removed [ 579.243375][ T5865] usb 4-1: USB disconnect, device number 54 [ 582.415405][T13088] team0: Port device team_slave_1 added [ 583.061499][ T29] audit: type=1400 audit(1733862423.192:1524): avc: denied { unmount } for pid=10147 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 583.487957][T13095] hsr_slave_0: entered promiscuous mode [ 583.635132][T13185] Bluetooth: MGMT ver 1.23 [ 583.662374][T13185] binder: 13181:13185 ioctl 89f2 0 returned -22 [ 583.700871][T13095] hsr_slave_1: entered promiscuous mode [ 583.821074][T13095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.851409][T13095] Cannot create hsr debugfs directory [ 583.949843][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.961114][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.363118][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.403951][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1544'. [ 584.442104][ T8] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 584.596042][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 584.611555][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.638348][ T8] usb 5-1: Product: syz [ 584.646656][T13190] pim6reg: entered allmulticast mode [ 584.671208][ T8] usb 5-1: Manufacturer: syz [ 584.691416][ T8] usb 5-1: SerialNumber: syz [ 584.783217][ T8] usb 5-1: config 0 descriptor?? [ 585.144053][ T8] smsc75xx v1.0.0 [ 585.147732][ T8] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 585.211223][ T8] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 585.240520][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.248410][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.340567][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.662651][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.764569][T13088] hsr_slave_0: entered promiscuous mode [ 585.825440][T13088] hsr_slave_1: entered promiscuous mode [ 585.878266][T13088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.906623][T13088] Cannot create hsr debugfs directory [ 586.520562][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.617305][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1548'. [ 586.672267][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.710672][ T8] usb 5-1: USB disconnect, device number 84 [ 586.819568][T13191] pim6reg: left allmulticast mode [ 587.164775][T13206] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 587.255848][T13208] openvswitch: netlink: Tunnel attr 191 out of range max 16 [ 587.255897][T12333] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.595638][T13077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 587.764951][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.237172][T13077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.333875][T13077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 589.359468][T13219] binder: BINDER_SET_CONTEXT_MGR already set [ 589.366059][T13219] binder: 13217:13219 ioctl 4018620d 20004a80 returned -16 [ 589.374515][T13218] binder: 13217:13218 ioctl 89f2 0 returned -22 [ 589.573638][T13221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.582585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.859367][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.922752][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.285510][ T5863] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 590.405611][T12333] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.469302][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 590.479732][ T5863] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.500342][ T5863] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.545293][ T5863] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.560747][ T5863] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.584219][ T5863] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.597791][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.613310][ T5863] usbtmc 5-1:16.0: bulk endpoints not found [ 590.626522][T13077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 590.694532][T12333] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.885168][T12333] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.014607][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.050130][T13077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.211550][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.223856][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.230980][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.280990][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.288140][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.688259][T12333] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.767171][T13095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 591.792585][T13095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 591.914800][T12333] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.957135][T13095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 591.987967][T13095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 592.029901][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.080588][T12333] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.123388][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.156280][T13077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.251457][T12333] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.384238][T13077] veth0_vlan: entered promiscuous mode [ 592.404841][T13077] veth1_vlan: entered promiscuous mode [ 592.543146][T12333] bridge_slave_1: left allmulticast mode [ 592.556597][T12333] bridge_slave_1: left promiscuous mode [ 592.571218][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.587544][ T5863] usb 5-1: USB disconnect, device number 85 [ 592.671964][T12333] bridge_slave_0: left allmulticast mode [ 592.677818][T12333] bridge_slave_0: left promiscuous mode [ 592.688204][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.913338][T12333] bridge_slave_1: left allmulticast mode [ 592.960372][T12333] bridge_slave_1: left promiscuous mode [ 592.965992][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.044707][T12333] bridge_slave_0: left allmulticast mode [ 593.061570][T12333] bridge_slave_0: left promiscuous mode [ 593.099047][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.156864][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.319410][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.329289][T13243] syz.4.1555: attempt to access beyond end of device [ 593.329289][T13243] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 593.343769][ T29] audit: type=1400 audit(1733862433.061:1525): avc: denied { getopt } for pid=13233 comm="syz.4.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 593.398498][T13243] syz.4.1555: attempt to access beyond end of device [ 593.398498][T13243] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 593.459348][T13242] loop2: detected capacity change from 0 to 7 [ 593.510885][T13242] Dev loop2: unable to read RDB block 7 [ 593.522812][T13242] loop2: AHDI p1 p3 [ 593.535912][T13242] loop2: partition table partially beyond EOD, truncated [ 593.568662][T13243] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 593.610056][T13242] loop2: p1 start 2048 is beyond EOD, truncated [ 593.784188][T13243] syz.4.1555: attempt to access beyond end of device [ 593.784188][T13243] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 593.789047][T13233] [U] vÔ3 [ 593.890047][T13243] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 593.899528][T13243] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 593.982674][T13243] UDF-fs: Scanning with blocksize 1024 failed [ 594.008221][T13243] syz.4.1555: attempt to access beyond end of device [ 594.008221][T13243] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 594.068735][T13243] syz.4.1555: attempt to access beyond end of device [ 594.068735][T13243] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 594.130819][T13243] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 594.140740][T13243] syz.4.1555: attempt to access beyond end of device [ 594.140740][T13243] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 594.199939][T13243] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 594.209397][T13243] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 594.223091][T13243] UDF-fs: Scanning with blocksize 2048 failed [ 594.242861][T13243] syz.4.1555: attempt to access beyond end of device [ 594.242861][T13243] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 594.264232][T13243] syz.4.1555: attempt to access beyond end of device [ 594.264232][T13243] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 594.277278][T13243] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 594.288088][T13243] syz.4.1555: attempt to access beyond end of device [ 594.288088][T13243] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 594.301119][T13243] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 594.311896][T13243] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 594.322691][T13243] UDF-fs: Scanning with blocksize 4096 failed [ 594.333488][T13243] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 594.585025][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.911980][T13246] netlink: ct family unspecified [ 595.916968][T13246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.170236][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.808559][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 596.994941][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 597.033989][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 597.041721][ T8] usb 4-1: can't read configurations, error -61 [ 597.193393][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 597.246922][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.375162][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 597.382269][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 597.396851][ T8] usb 4-1: can't read configurations, error -61 [ 597.417461][ T8] usb usb4-port1: attempt power cycle [ 597.813381][ T8] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 597.867187][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 597.877815][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 597.893933][ T8] usb 4-1: can't read configurations, error -61 [ 598.037947][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 598.097308][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 598.134936][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 598.142531][ T8] usb 4-1: can't read configurations, error -61 [ 598.152193][ T8] usb usb4-port1: unable to enumerate USB device [ 599.429079][T12333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.804941][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.843966][T12333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.015682][T12333] bond0 (unregistering): Released all slaves [ 600.049997][T12333] bond1 (unregistering): Released all slaves [ 600.464839][ T29] audit: type=1400 audit(1733862439.684:1526): avc: denied { getopt } for pid=13249 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 600.567954][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.892571][T12333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.958766][T12333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.068968][T12333] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 601.138885][T12333] bond0 (unregistering): Released all slaves [ 601.684799][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.806366][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.244241][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.928942][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.666279][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.425380][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.504313][T13252] tipc: Started in network mode [ 605.509184][T13252] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 605.520656][T13252] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 605.529069][T13252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.537546][T13252] tipc: Enabled bearer , priority 10 [ 605.584005][T13235] netdevsim netdevsim4: Direct firmware load for printk failed with error -2 [ 605.593082][T13235] netdevsim netdevsim4: Falling back to sysfs fallback for: printk [ 605.657907][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.673574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.783787][T13077] veth0_macvtap: entered promiscuous mode [ 605.809980][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.811293][T13077] veth1_macvtap: entered promiscuous mode [ 605.820634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.869586][T13088] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 605.887916][T13259] virtio-fs: tag <(null)> not found [ 605.927744][ T5862] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 605.970380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.028394][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.077995][ T29] audit: type=1400 audit(1733862444.997:1527): avc: denied { mounton } for pid=13258 comm="syz.4.1560" path="/proc/557/task" dev="proc" ino=48611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 606.120179][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 606.147361][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.173323][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.207049][T13095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.228443][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 606.259212][T13095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.288051][ T5862] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 606.323089][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.391338][ T5862] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 606.423883][ T5862] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 606.472702][ T5862] usb 4-1: Manufacturer: syz [ 606.527065][ T5862] usb 4-1: config 0 descriptor?? [ 606.755975][ T5822] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 606.768995][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.880806][T13095] veth0_vlan: entered promiscuous mode [ 606.918128][T13095] veth1_vlan: entered promiscuous mode [ 606.932516][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 606.960212][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.985867][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.037645][T13095] veth0_macvtap: entered promiscuous mode [ 607.043890][ T5822] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 607.068272][T13095] veth1_macvtap: entered promiscuous mode [ 607.092930][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.125190][ T5822] usb 5-1: config 0 descriptor?? [ 607.145709][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.188611][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.242393][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.299223][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.317436][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.381423][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.444039][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.487417][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.540827][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.569380][ T5822] playstation 0003:054C:05C4.0022: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 607.595608][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.659540][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.702247][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.739169][T13095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.791487][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.853891][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.905256][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.971707][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.003471][ T5822] playstation 0003:054C:05C4.0022: Failed to retrieve feature with reportID 163: -32 [ 608.033523][ T5822] playstation 0003:054C:05C4.0022: Failed to retrieve DualShock4 firmware info: -32 [ 608.042971][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.088715][ T5822] playstation 0003:054C:05C4.0022: Failed to get firmware info from DualShock4 [ 608.097954][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.107780][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.153044][ T5822] playstation 0003:054C:05C4.0022: HW/FW version data in sysfs will be invalid. [ 608.201600][ T5865] net_ratelimit: 4 callbacks suppressed [ 608.201616][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.201776][ T8] tipc: Node number set to 1 [ 608.208410][ T5822] input: HID 054c:05c4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0022/input/input48 [ 608.215766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.220314][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.343200][ T5822] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0022/input/input49 [ 608.377339][ T5822] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0022/input/input50 [ 608.389923][ T5862] rc_core: IR keymap rc-hauppauge not found [ 608.395835][ T5862] Registered IR keymap rc-empty [ 608.411120][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.422592][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.440713][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.461240][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.490458][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.504013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.508636][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 608.525409][ T5822] playstation 0003:054C:05C4.0022: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 608.546906][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.566992][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 608.591332][T13095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.686037][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.728784][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.764324][ T5822] usb 5-1: USB disconnect, device number 86 [ 608.782115][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.816099][T13088] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 608.843535][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.854552][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.861670][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.886716][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.893855][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.901752][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.942497][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 608.974319][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 609.002452][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 609.011935][T13095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.038806][T13095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.049481][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 609.059928][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.062781][T13095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.072229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.092069][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 609.106633][T13095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.119787][ T5862] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 609.148706][ T5862] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 609.206552][ T5862] usb 4-1: USB disconnect, device number 59 [ 609.259075][T12333] hsr_slave_0: left promiscuous mode [ 609.305956][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.357335][T12333] hsr_slave_1: left promiscuous mode [ 609.399271][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.418921][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.476177][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.504580][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.637347][T12333] hsr_slave_0: left promiscuous mode [ 609.752291][T12333] hsr_slave_1: left promiscuous mode [ 609.779884][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.797748][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.808208][ T8] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 609.841123][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.858269][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.934426][T12333] veth1_macvtap: left promiscuous mode [ 609.953556][T12333] veth0_macvtap: left promiscuous mode [ 609.964351][T12333] veth1_vlan: left promiscuous mode [ 609.979351][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 609.979370][T12333] veth0_vlan: left promiscuous mode [ 610.004417][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.021975][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.031720][ T8] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 610.044295][T12333] veth1_macvtap: left promiscuous mode [ 610.049817][T12333] veth0_macvtap: left promiscuous mode [ 610.061764][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.074916][T12333] veth1_vlan: left promiscuous mode [ 610.081107][ T5862] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 610.088826][T12333] veth0_vlan: left promiscuous mode [ 610.090871][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.125903][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.141697][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 610.161053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.422730][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.273082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.850653][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.970444][T12333] team0 (unregistering): Port device team_slave_1 removed [ 612.155846][T12333] team0 (unregistering): Port device team_slave_0 removed [ 612.789970][ T9] usb 5-1: USB disconnect, device number 87 [ 613.743542][ T8] net_ratelimit: 3 callbacks suppressed [ 613.743562][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.757215][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.608378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.866296][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.602491][ T5862] usb 4-1: device descriptor read/64, error -110 [ 615.720178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.728654][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.837802][T12333] team0 (unregistering): Port device team_slave_1 removed [ 616.191398][T12333] team0 (unregistering): Port device team_slave_0 removed [ 616.661924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.672602][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.831995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.424674][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.433055][ T5862] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 618.375835][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.412005][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.446285][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.456723][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.510818][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.539930][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.574564][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.585001][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.617620][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.649636][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.692343][T13077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.167481][ C0] net_ratelimit: 3 callbacks suppressed [ 620.167499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.819838][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.829197][T13088] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 620.836584][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.867046][T13088] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 620.958489][ T5862] usb 4-1: device descriptor read/64, error -32 [ 620.981784][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.021645][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.054885][T13277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 621.060810][T13277] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 621.079062][ T5862] usb usb4-port1: attempt power cycle [ 621.088101][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.101366][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.120720][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.140224][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.150040][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.182929][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.192773][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.225772][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.256814][T13077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.271239][T13077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.279281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.310265][T13077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.331780][T13077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.342561][T13077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.392803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.107464][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.214237][ T5862] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 623.321296][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 623.327629][ T5862] usb 4-1: device descriptor read/8, error -32 [ 623.451378][ T5862] raw-gadget.1 gadget.3: failed to queue suspend event [ 623.458529][ T5862] raw-gadget.1 gadget.3: failed to queue reset event [ 623.503200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.652543][ T5862] raw-gadget.1 gadget.3: failed to queue resume event [ 623.709166][T13277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 623.715093][T13277] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 623.738174][ T5862] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 623.804196][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 623.811340][ T5862] usb 4-1: device descriptor read/8, error -32 [ 623.827831][ T29] audit: type=1400 audit(1733862461.591:1528): avc: denied { unmount } for pid=10147 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 623.930546][ T5862] raw-gadget.1 gadget.3: failed to queue suspend event [ 624.005403][ T5862] usb usb4-port1: unable to enumerate USB device [ 624.105133][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.157262][T13298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1567'. [ 624.166584][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 624.441531][T13277] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 624.464935][T13277] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 624.472966][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.614760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.766179][T13277] raw-gadget.1 gadget.3: failed to queue disconnect event [ 624.825369][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 624.848367][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 624.855770][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 624.870191][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 624.877525][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 624.885014][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 624.896756][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 624.918053][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 624.943204][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 625.021292][ T5821] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 625.028569][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 625.062714][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 625.071681][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 625.079517][ T5823] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 625.086775][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.095736][ T5821] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 625.102986][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 625.110291][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.160163][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.167231][ T5130] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 625.174429][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 625.197217][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 625.213464][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.220526][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 625.238832][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.248192][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 625.269559][T13311] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1569'. [ 625.309745][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 625.352515][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.359996][T13309] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1569'. [ 625.361182][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 625.383729][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 625.391055][ T5130] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 625.399170][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 625.406276][ T5130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 625.416688][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 625.425569][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.433335][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 625.554964][T13302] lo speed is unknown, defaulting to 1000 [ 625.566855][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.681076][T13294] lo speed is unknown, defaulting to 1000 [ 625.726644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.743512][T13299] lo speed is unknown, defaulting to 1000 [ 625.818968][T13307] syz.4.1568 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 625.961325][T13302] chnl_net:caif_netlink_parms(): no params data found [ 626.186219][ T5862] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 626.241780][T13299] chnl_net:caif_netlink_parms(): no params data found [ 626.302163][T13294] chnl_net:caif_netlink_parms(): no params data found [ 626.366169][ T5862] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 626.397365][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.408493][ T5863] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 626.417098][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 626.427962][ T5862] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.447467][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.457147][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.469677][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.492533][ T5862] usb 4-1: invalid MIDI out EP 0 [ 626.515342][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.522980][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.536158][ T5862] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 626.539381][T13302] bridge_slave_0: entered allmulticast mode [ 626.569688][T13302] bridge_slave_0: entered promiscuous mode [ 626.584005][ T5863] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 626.590139][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.594275][ T5863] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 626.614125][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.621298][T13302] bridge_slave_1: entered allmulticast mode [ 626.627616][ T5863] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 626.639088][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=27 [ 626.643122][T13302] bridge_slave_1: entered promiscuous mode [ 626.656630][ T5863] usb 5-1: Product: syz [ 626.667661][ T5863] usb 5-1: Manufacturer: syz [ 626.672394][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.674344][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.680654][ T5863] usb 5-1: SerialNumber: syz [ 626.693719][ T5822] usb 4-1: USB disconnect, device number 64 [ 626.699779][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.721041][T13299] bridge_slave_0: entered allmulticast mode [ 626.728437][T13299] bridge_slave_0: entered promiscuous mode [ 626.754222][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.761302][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.787345][T13299] bridge_slave_1: entered allmulticast mode [ 626.800435][T13299] bridge_slave_1: entered promiscuous mode [ 626.838423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.883693][T12333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.999978][T13302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.140878][T12333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.194578][T13299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.216503][T13302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.235777][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.242860][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.287461][T13294] bridge_slave_0: entered allmulticast mode [ 627.315936][T13294] bridge_slave_0: entered promiscuous mode [ 627.352603][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.366721][T13299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.408979][T12333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.463169][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.471067][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.489094][T13294] bridge_slave_1: entered allmulticast mode [ 627.496485][T13294] bridge_slave_1: entered promiscuous mode [ 627.584961][T13302] team0: Port device team_slave_0 added [ 627.611409][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.616116][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.619772][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.625762][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.640192][ T8] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 627.659627][T12333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.694984][ T5821] Bluetooth: hci5: command tx timeout [ 627.705557][ T5821] Bluetooth: hci7: command tx timeout [ 627.705866][ T5130] Bluetooth: hci6: command tx timeout [ 627.771439][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.790727][T13299] team0: Port device team_slave_0 added [ 627.799297][T13302] team0: Port device team_slave_1 added [ 627.805051][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.810935][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.851074][ T8] usb 4-1: config 0 has no interfaces? [ 627.883753][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 627.893030][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 627.901561][ T8] usb 4-1: Manufacturer: syz [ 627.912824][ T8] usb 4-1: config 0 descriptor?? [ 627.926649][T13299] team0: Port device team_slave_1 added [ 627.950433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.054251][T13299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.069157][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.117697][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 628.134331][T13299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.167830][T13302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.194209][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.231453][T13302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.251519][T13302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.258565][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.266554][ T5865] usb 4-1: USB disconnect, device number 65 [ 628.324341][T13302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.351672][T13294] team0: Port device team_slave_0 added [ 628.368070][T13299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.375889][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.412924][T13299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.474236][T13294] team0: Port device team_slave_1 added [ 628.692774][T13340] xt_CT: No such helper "netbios-ns" [ 628.699988][T13340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1571'. [ 628.891847][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.228821][T13302] hsr_slave_0: entered promiscuous mode [ 629.262846][T13302] hsr_slave_1: entered promiscuous mode [ 629.279136][T13302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.292870][T13302] Cannot create hsr debugfs directory [ 629.326967][T13299] hsr_slave_0: entered promiscuous mode [ 629.333333][T13299] hsr_slave_1: entered promiscuous mode [ 629.354200][T13299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.375171][T13299] Cannot create hsr debugfs directory [ 629.490345][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.545368][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.612915][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.722535][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.749933][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.822697][ T5863] usb 5-1: USB disconnect, device number 88 [ 629.834357][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.917417][ T5130] Bluetooth: hci6: command tx timeout [ 629.917454][ T5821] Bluetooth: hci7: command tx timeout [ 629.922813][ T5130] Bluetooth: hci5: command tx timeout [ 630.226297][T13294] hsr_slave_0: entered promiscuous mode [ 630.252136][T13294] hsr_slave_1: entered promiscuous mode [ 630.267108][T13294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.288504][T13294] Cannot create hsr debugfs directory [ 631.278414][ T29] audit: type=1400 audit(1733862468.522:1529): avc: denied { read } for pid=13369 comm="syz.3.1577" path="socket:[49745]" dev="sockfs" ino=49745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 631.297455][ T5863] net_ratelimit: 4 callbacks suppressed [ 631.297472][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.315213][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.137982][T12333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.149013][ T5821] Bluetooth: hci7: command tx timeout [ 632.151562][ T5130] Bluetooth: hci5: command tx timeout [ 632.154558][ T5821] Bluetooth: hci6: command tx timeout [ 632.397002][T12333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.407837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.408723][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.617371][T12333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.752538][T12333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.793098][T10418] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 632.851635][T13299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 632.876382][T13299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 632.893988][T13299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 632.943244][T13299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 632.955035][T10418] usb 5-1: unable to get BOS descriptor or descriptor too short [ 632.990069][T10418] usb 5-1: not running at top speed; connect to a high speed hub [ 633.006164][T10418] usb 5-1: config 4 has an invalid interface number: 111 but max is 0 [ 633.029426][T10418] usb 5-1: config 4 has no interface number 0 [ 633.038954][T10418] usb 5-1: config 4 interface 111 has no altsetting 0 [ 633.063906][T10418] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 633.077708][T10418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.095180][T10418] usb 5-1: Product: syz [ 633.099411][T10418] usb 5-1: Manufacturer: syz [ 633.104160][T10418] usb 5-1: SerialNumber: syz [ 633.144662][T12333] bridge_slave_1: left allmulticast mode [ 633.151947][T12333] bridge_slave_1: left promiscuous mode [ 633.167485][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.200775][T12333] bridge_slave_0: left allmulticast mode [ 633.206468][T12333] bridge_slave_0: left promiscuous mode [ 633.219074][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.235795][T12333] bridge_slave_1: left allmulticast mode [ 633.241501][T12333] bridge_slave_1: left promiscuous mode [ 633.263613][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.273173][T12333] bridge_slave_0: left allmulticast mode [ 633.284830][T12333] bridge_slave_0: left promiscuous mode [ 633.290563][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.339877][T12333] bridge_slave_1: left allmulticast mode [ 633.345589][T12333] bridge_slave_1: left promiscuous mode [ 633.362829][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.383356][T12333] bridge_slave_0: left allmulticast mode [ 633.395968][T12333] bridge_slave_0: left promiscuous mode [ 633.401686][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.509472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.520553][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.112152][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.364682][ T5821] Bluetooth: hci6: command tx timeout [ 634.371675][ T5821] Bluetooth: hci5: command tx timeout [ 634.372498][ T5130] Bluetooth: hci7: command tx timeout [ 634.621234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.639496][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.876734][T12333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.901795][T12333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.949875][T12333] bond0 (unregistering): Released all slaves [ 634.977835][T12333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.038425][T12333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.124343][T12333] bond0 (unregistering): Released all slaves [ 635.540817][T12333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.565245][T12333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.576461][T12333] bond0 (unregistering): Released all slaves [ 635.733053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.824627][T10418] pvrusb2: Hardware description: Terratec Grabster AV400 [ 635.838057][T10418] pvrusb2: ********** [ 635.848627][T10418] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 635.882166][T10418] pvrusb2: Important functionality might not be entirely working. [ 635.898230][T10418] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 635.908250][T13299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.925296][T10418] pvrusb2: ********** [ 635.930049][T10418] usb 5-1: selecting invalid altsetting 0 [ 635.941197][ T2326] pvrusb2: control-write URB failure, status=-71 [ 635.946376][T10418] usb 5-1: USB disconnect, device number 89 [ 635.974166][ T2326] pvrusb2: Device being rendered inoperable [ 636.008898][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 636.026048][T13299] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.036303][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.043398][T12334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.067598][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 636.302881][T12333] hsr_slave_0: left promiscuous mode [ 636.346139][T12333] hsr_slave_1: left promiscuous mode [ 636.438704][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.446178][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.522138][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.543181][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.569933][T12333] hsr_slave_0: left promiscuous mode [ 636.578010][T12333] hsr_slave_1: left promiscuous mode [ 636.652842][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.672269][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.735896][T12333] hsr_slave_0: left promiscuous mode [ 636.759673][T12333] hsr_slave_1: left promiscuous mode [ 636.781036][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.788479][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.844880][ C0] net_ratelimit: 1 callbacks suppressed [ 636.844900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.914173][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.973227][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.005658][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.107668][T12333] veth1_macvtap: left promiscuous mode [ 637.138112][T12333] veth0_macvtap: left promiscuous mode [ 637.143701][T12333] veth1_vlan: left promiscuous mode [ 637.167711][T12333] veth0_vlan: left promiscuous mode [ 637.217564][T12333] veth1_macvtap: left promiscuous mode [ 637.227997][T12333] veth0_macvtap: left promiscuous mode [ 637.245441][T12333] veth1_vlan: left promiscuous mode [ 637.269964][T12333] veth0_vlan: left promiscuous mode [ 637.382138][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.876332][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.956714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.133912][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.485981][T13402] hub 2-0:1.0: USB hub found [ 638.493888][T13402] hub 2-0:1.0: 1 port detected [ 638.853008][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.072573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.363673][T12333] team0 (unregistering): Port device team_slave_1 removed [ 639.530970][T12333] team0 (unregistering): Port device team_slave_0 removed [ 639.659734][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.181902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.274536][T12333] team0 (unregistering): Port device team_slave_1 removed [ 642.404022][ C0] net_ratelimit: 2 callbacks suppressed [ 642.404042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.471768][T12333] team0 (unregistering): Port device team_slave_0 removed [ 642.609944][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.515827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.692390][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.857907][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.937527][T12333] team0 (unregistering): Port device team_slave_1 removed [ 644.041849][T12333] team0 (unregistering): Port device team_slave_0 removed [ 644.627661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.814824][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.292714][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.299794][ T6641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.344450][T13399] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 645.364230][T13399] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 645.389210][T13399] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 645.569321][T13299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.695873][T13302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 645.745115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.864821][T13302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 645.910842][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.923697][T13302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 646.098861][T13299] veth0_vlan: entered promiscuous mode [ 646.104880][T13302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 646.193058][T13299] veth1_vlan: entered promiscuous mode [ 646.223469][T13299] veth0_macvtap: entered promiscuous mode [ 646.231386][T13299] veth1_macvtap: entered promiscuous mode [ 646.270678][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.281827][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.296265][ T5862] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 646.305999][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.316424][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.326300][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.355997][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.368918][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.396486][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.413827][T13299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.477759][ T5862] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 646.485961][ T5862] usb 5-1: config 0 has no interface number 0 [ 646.501142][ T5862] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.503582][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.521000][ T5862] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 646.534679][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.550163][ T5862] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 646.551759][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.565035][ T5862] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 646.594941][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.604768][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.613034][ T5862] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.638080][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.649594][ T5862] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 646.666808][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.669335][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.680165][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.711645][ T5862] usb 5-1: Product: syz [ 646.713007][T13299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.733692][ T5862] usb 5-1: Manufacturer: syz [ 646.738300][ T5862] usb 5-1: SerialNumber: syz [ 646.746366][ T5862] usb 5-1: config 0 descriptor?? [ 646.751921][T13418] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 646.760378][ T5862] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 646.782555][T13302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.799321][T13299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.837638][T13299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.837658][ T5862] scsi host1: usb-storage 5-1:0.189 [ 646.851917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.880164][T13299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.905439][T13299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.000338][ T5865] usb 5-1: USB disconnect, device number 90 [ 647.041018][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.074675][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.081803][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.215727][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.222846][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.263598][T13299] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macvlan2 [ 647.274693][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.308943][T13302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.325743][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.352562][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.502417][T13294] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 647.647867][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.659102][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.718010][T13294] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 647.750436][T13294] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 647.795996][T13294] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 647.945836][T13302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.963105][ C0] net_ratelimit: 2 callbacks suppressed [ 647.963122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.046951][T13302] veth0_vlan: entered promiscuous mode [ 648.104110][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.118919][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.128560][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.135659][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.151669][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.206342][T13294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 648.237547][T13294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.308376][T13302] veth1_vlan: entered promiscuous mode [ 648.317673][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.324748][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.489814][T13302] veth0_macvtap: entered promiscuous mode [ 648.508472][T13302] veth1_macvtap: entered promiscuous mode [ 648.532438][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.550881][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.560706][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.593667][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.615051][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.625497][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.657799][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.668246][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.699338][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.709855][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.723618][T13302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.732768][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.743245][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.753071][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.763601][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.773477][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.784038][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.793878][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.806193][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.816088][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.829285][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.840147][T13302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.849453][T13302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.858190][T13302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.877740][T13302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.886477][T13302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.980975][T10418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.057318][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.075023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.152566][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.162502][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.172780][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.183220][ T5821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 649.200038][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 649.267931][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.335149][T13302] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macvlan2 [ 649.380761][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.413555][T13448] lo speed is unknown, defaulting to 1000 [ 649.423622][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.452058][T13456] erofs (device nbd4): cannot find valid erofs superblock [ 649.513942][T12333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.550784][T12333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.603017][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.622077][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.645874][ T29] audit: type=1400 audit(1733862485.743:1530): avc: denied { setattr } for pid=13459 comm="syz.0.1595" name="mountinfo" dev="proc" ino=51923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 649.696141][T13456] lo speed is unknown, defaulting to 1000 [ 650.168804][T13467] /dev/nullb0: Can't open blockdev [ 650.186691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.376715][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.579047][T13294] veth0_vlan: entered promiscuous mode [ 650.603843][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.629069][T13294] veth1_vlan: entered promiscuous mode [ 650.646772][T13294] veth0_macvtap: entered promiscuous mode [ 650.654795][T13294] veth1_macvtap: entered promiscuous mode [ 650.667791][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.678229][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.688129][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.698775][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.709101][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.719582][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.729419][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.739911][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.750001][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.760498][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.770362][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.780903][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.792100][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.801304][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.811943][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.821993][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.832449][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.842315][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.852800][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.862767][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.873338][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.883239][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.893680][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.903589][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.914230][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.925114][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.934676][T13294] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.943465][T13294] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.952205][T13294] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.961131][T13294] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.298595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.505192][ T5821] Bluetooth: hci1: command tx timeout [ 651.571373][T13448] chnl_net:caif_netlink_parms(): no params data found [ 651.799468][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.867468][T13488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.234117][T13294] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macvlan2 [ 652.260043][ T5865] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 652.322881][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.426163][ T29] audit: type=1400 audit(1733862488.324:1531): avc: denied { mount } for pid=13494 comm="syz.4.1602" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 652.426280][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 652.691473][ T29] audit: type=1400 audit(1733862488.324:1532): avc: denied { unmount } for pid=13494 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 652.741628][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.771901][ T5865] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 652.783232][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.949874][ T5865] usb 1-1: config 0 descriptor?? [ 652.975617][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.992622][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.020333][T13448] bridge_slave_0: entered allmulticast mode [ 653.056531][T13448] bridge_slave_0: entered promiscuous mode [ 653.139452][ T6641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.147394][ T6641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.174863][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.193582][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.200839][T13448] bridge_slave_1: entered allmulticast mode [ 653.221267][T13448] bridge_slave_1: entered promiscuous mode [ 653.295722][T13448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.330648][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 653.331877][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.346203][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 653.346318][T13448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.372338][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.392514][ T5865] smartjoyplus 0003:0B43:0003.0023: unbalanced collection at end of report description [ 653.424368][ T5865] smartjoyplus 0003:0B43:0003.0023: parse failed [ 653.443871][ T5865] smartjoyplus 0003:0B43:0003.0023: probe with driver smartjoyplus failed with error -22 [ 653.487800][T13448] team0: Port device team_slave_0 added [ 653.501997][T13448] team0: Port device team_slave_1 added [ 653.515967][ T25] usb 2-1: device descriptor read/64, error -71 [ 653.522146][ C0] net_ratelimit: 2 callbacks suppressed [ 653.522160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.575583][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 653.583623][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 653.600198][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 653.612322][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.628773][ T9] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 653.640572][T13448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.647527][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.682404][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 653.714522][ T5821] Bluetooth: hci1: command tx timeout [ 653.732409][ T9] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 653.763729][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 653.774346][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 653.788275][T13448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.803751][T13448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.821587][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.832398][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.847465][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.078167][T13448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.242952][ T9] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 654.634026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.839422][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.040201][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 655.088377][T13448] hsr_slave_0: entered promiscuous mode [ 655.100710][ T9] scsi host1: usb-storage 5-1:1.0 [ 655.109198][T13520] overlayfs: conflicting lowerdir path [ 655.130651][T13448] hsr_slave_1: entered promiscuous mode [ 655.168917][T13448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.176509][T13448] Cannot create hsr debugfs directory [ 655.182337][ T25] usb 2-1: device descriptor read/64, error -71 [ 655.195951][ T29] audit: type=1400 audit(1733862490.934:1533): avc: denied { connect } for pid=13518 comm="syz.9.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 655.311157][ T25] usb usb2-port1: attempt power cycle [ 655.745826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.986879][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.996191][ T5821] Bluetooth: hci1: command tx timeout [ 656.001741][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 656.024721][ T25] usb 2-1: device descriptor read/8, error -71 [ 656.212473][ T9] usb 1-1: USB disconnect, device number 60 [ 656.389112][ T6370] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 656.451180][T13448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.504313][ T29] audit: type=1400 audit(1733862492.150:1534): avc: denied { ioctl } for pid=13526 comm="syz.0.1608" path="socket:[52162]" dev="sockfs" ino=52162 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 656.632661][ T5863] usb 5-1: USB disconnect, device number 91 [ 656.669916][ T6635] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 656.707643][ T6370] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 656.756146][ T6635] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 656.857643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.866491][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.874751][ T6635] sd 1:0:0:0: [sdb] Sense not available. [ 656.889027][ T6635] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 656.900400][ T6635] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 656.907237][ T6635] sd 1:0:0:0: [sdb] Write Protect is off [ 656.942527][ T6635] sd 1:0:0:0: [sdb] Asking for cache data failed [ 656.954242][ T6635] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 656.985378][ T6635] [ 656.987740][ T6635] ====================================================== [ 656.994756][ T6635] WARNING: possible circular locking dependency detected [ 657.001766][ T6635] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 657.008867][ T6635] ------------------------------------------------------ [ 657.015876][ T6635] kworker/u8:15/6635 is trying to acquire lock: [ 657.022108][ T6635] ffff888029146120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 657.031782][ T6635] [ 657.031782][ T6635] but task is already holding lock: [ 657.039124][ T6635] ffff8880291458e8 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 657.049637][ T6635] [ 657.049637][ T6635] which lock already depends on the new lock. [ 657.049637][ T6635] [ 657.060018][ T6635] [ 657.060018][ T6635] the existing dependency chain (in reverse order) is: [ 657.069005][ T6635] [ 657.069005][ T6635] -> #5 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 657.077850][ T6635] blk_queue_enter+0x50f/0x640 [ 657.083127][ T6635] blk_mq_alloc_request+0x59b/0x950 [ 657.088834][ T6635] scsi_execute_cmd+0x1eb/0xf40 [ 657.094196][ T6635] read_capacity_10+0x1d4/0x6d0 [ 657.099568][ T6635] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 657.105882][ T6635] sd_probe+0x904/0x1000 [ 657.110631][ T6635] really_probe+0x23e/0xa90 [ 657.115642][ T6635] __driver_probe_device+0x1de/0x440 [ 657.121429][ T6635] driver_probe_device+0x4c/0x1b0 [ 657.126956][ T6635] __device_attach_driver+0x1df/0x310 [ 657.132830][ T6635] bus_for_each_drv+0x157/0x1e0 [ 657.138190][ T6635] __device_attach_async_helper+0x1d3/0x290 [ 657.144587][ T6635] async_run_entry_fn+0x9c/0x530 [ 657.150035][ T6635] process_one_work+0x9c5/0x1ba0 [ 657.155477][ T6635] worker_thread+0x6c8/0xf00 [ 657.160573][ T6635] kthread+0x2c1/0x3a0 [ 657.165149][ T6635] ret_from_fork+0x45/0x80 [ 657.170090][ T6635] ret_from_fork_asm+0x1a/0x30 [ 657.175363][ T6635] [ 657.175363][ T6635] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 657.183016][ T6635] __mutex_lock+0x19b/0xa60 [ 657.188028][ T6635] __nbd_set_size+0x2c0/0x730 [ 657.193231][ T6635] nbd_start_device+0x8fd/0xd70 [ 657.198584][ T6635] nbd_ioctl+0x21a/0xfd0 [ 657.203329][ T6635] blkdev_ioctl+0x276/0x6d0 [ 657.208354][ T6635] __x64_sys_ioctl+0x190/0x200 [ 657.213628][ T6635] do_syscall_64+0xcd/0x250 [ 657.218635][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.225035][ T6635] [ 657.225035][ T6635] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 657.233620][ T6635] blk_mq_submit_bio+0x1fb6/0x24c0 [ 657.239231][ T6635] __submit_bio+0x384/0x540 [ 657.244245][ T6635] submit_bio_noacct_nocheck+0x698/0xd70 [ 657.250387][ T6635] submit_bio_noacct+0x93a/0x1e20 [ 657.255925][ T6635] mpage_readahead+0x41d/0x590 [ 657.261197][ T6635] read_pages+0x1a8/0xdc0 [ 657.266140][ T6635] page_cache_ra_unbounded+0x3dc/0x750 [ 657.272109][ T6635] force_page_cache_ra+0x24b/0x340 [ 657.277729][ T6635] page_cache_sync_ra+0x110/0x9c0 [ 657.283261][ T6635] filemap_get_pages+0xd7b/0x1be0 [ 657.288787][ T6635] filemap_read+0x3ca/0xd70 [ 657.293789][ T6635] blkdev_read_iter+0x187/0x480 [ 657.299159][ T6635] vfs_read+0x87f/0xbe0 [ 657.303815][ T6635] ksys_read+0x12b/0x250 [ 657.308576][ T6635] do_syscall_64+0xcd/0x250 [ 657.313582][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.319978][ T6635] [ 657.319978][ T6635] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 657.328493][ T6635] down_read+0x9a/0x330 [ 657.333153][ T6635] filemap_fault+0x2e0/0x2820 [ 657.338331][ T6635] __do_fault+0x10a/0x490 [ 657.343166][ T6635] do_pte_missing+0xebd/0x3e00 [ 657.348432][ T6635] __handle_mm_fault+0x103c/0x2a40 [ 657.354044][ T6635] handle_mm_fault+0x3fa/0xaa0 [ 657.359309][ T6635] do_user_addr_fault+0x7a3/0x13f0 [ 657.364920][ T6635] exc_page_fault+0x5c/0xc0 [ 657.369925][ T6635] asm_exc_page_fault+0x26/0x30 [ 657.375279][ T6635] strncpy_from_user+0x14a/0x2d0 [ 657.380726][ T6635] getname_flags.part.0+0x8f/0x550 [ 657.386355][ T6635] getname+0x8d/0xe0 [ 657.390750][ T6635] do_sys_openat2+0x104/0x1e0 [ 657.395933][ T6635] __x64_sys_openat+0x175/0x210 [ 657.401286][ T6635] do_syscall_64+0xcd/0x250 [ 657.406292][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.412690][ T6635] [ 657.412690][ T6635] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 657.420228][ T6635] __might_fault+0x11b/0x190 [ 657.425324][ T6635] _copy_from_user+0x29/0xd0 [ 657.430422][ T6635] __blk_trace_setup+0xa8/0x180 [ 657.435780][ T6635] blk_trace_setup+0x47/0x70 [ 657.440876][ T6635] sg_ioctl+0x65e/0x2750 [ 657.445625][ T6635] __x64_sys_ioctl+0x190/0x200 [ 657.450896][ T6635] do_syscall_64+0xcd/0x250 [ 657.455902][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.462302][ T6635] [ 657.462302][ T6635] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 657.470117][ T6635] __lock_acquire+0x249e/0x3c40 [ 657.475474][ T6635] lock_acquire.part.0+0x11b/0x380 [ 657.481105][ T6635] __mutex_lock+0x19b/0xa60 [ 657.486112][ T6635] blk_mq_init_sched+0x42b/0x640 [ 657.491558][ T6635] elevator_init_mq+0x2cd/0x420 [ 657.496918][ T6635] add_disk_fwnode+0x113/0x1300 [ 657.502271][ T6635] sd_probe+0xa86/0x1000 [ 657.507023][ T6635] really_probe+0x23e/0xa90 [ 657.512031][ T6635] __driver_probe_device+0x1de/0x440 [ 657.517818][ T6635] driver_probe_device+0x4c/0x1b0 [ 657.523345][ T6635] __device_attach_driver+0x1df/0x310 [ 657.529222][ T6635] bus_for_each_drv+0x157/0x1e0 [ 657.534581][ T6635] __device_attach_async_helper+0x1d3/0x290 [ 657.540976][ T6635] async_run_entry_fn+0x9c/0x530 [ 657.546419][ T6635] process_one_work+0x9c5/0x1ba0 [ 657.551858][ T6635] worker_thread+0x6c8/0xf00 [ 657.556950][ T6635] kthread+0x2c1/0x3a0 [ 657.561524][ T6635] ret_from_fork+0x45/0x80 [ 657.566458][ T6635] ret_from_fork_asm+0x1a/0x30 [ 657.571847][ T6635] [ 657.571847][ T6635] other info that might help us debug this: [ 657.571847][ T6635] [ 657.582053][ T6635] Chain exists of: [ 657.582053][ T6635] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 657.582053][ T6635] [ 657.596476][ T6635] Possible unsafe locking scenario: [ 657.596476][ T6635] [ 657.603907][ T6635] CPU0 CPU1 [ 657.609257][ T6635] ---- ---- [ 657.614603][ T6635] lock(&q->q_usage_counter(queue)#53); [ 657.620224][ T6635] lock(&q->limits_lock); [ 657.627145][ T6635] lock(&q->q_usage_counter(queue)#53); [ 657.635294][ T6635] lock(&q->debugfs_mutex); [ 657.639869][ T6635] [ 657.639869][ T6635] *** DEADLOCK *** [ 657.639869][ T6635] [ 657.647990][ T6635] 4 locks held by kworker/u8:15/6635: [ 657.653337][ T6635] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 657.663684][ T6635] #1: ffffc9000c8f7d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 657.674901][ T6635] #2: ffff888039012378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 657.685273][ T6635] #3: ffff8880291458e8 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 657.696226][ T6635] [ 657.696226][ T6635] stack backtrace: [ 657.702096][ T6635] CPU: 0 UID: 0 PID: 6635 Comm: kworker/u8:15 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 657.713016][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.723054][ T6635] Workqueue: async async_run_entry_fn [ 657.728419][ T6635] Call Trace: [ 657.731681][ T6635] [ 657.734599][ T6635] dump_stack_lvl+0x116/0x1f0 [ 657.739267][ T6635] print_circular_bug+0x419/0x5d0 [ 657.744276][ T6635] check_noncircular+0x31a/0x400 [ 657.749217][ T6635] ? __pfx_check_noncircular+0x10/0x10 [ 657.754668][ T6635] ? lockdep_lock+0xc6/0x200 [ 657.759251][ T6635] ? __pfx_lockdep_lock+0x10/0x10 [ 657.764271][ T6635] __lock_acquire+0x249e/0x3c40 [ 657.769116][ T6635] ? __pfx___lock_acquire+0x10/0x10 [ 657.774305][ T6635] lock_acquire.part.0+0x11b/0x380 [ 657.779407][ T6635] ? blk_mq_init_sched+0x42b/0x640 [ 657.784510][ T6635] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 657.790129][ T6635] ? rcu_is_watching+0x12/0xc0 [ 657.794882][ T6635] ? trace_lock_acquire+0x14e/0x1f0 [ 657.800070][ T6635] ? blk_mq_init_sched+0x42b/0x640 [ 657.805169][ T6635] ? lock_acquire+0x2f/0xb0 [ 657.809655][ T6635] ? blk_mq_init_sched+0x42b/0x640 [ 657.814754][ T6635] __mutex_lock+0x19b/0xa60 [ 657.819244][ T6635] ? blk_mq_init_sched+0x42b/0x640 [ 657.824342][ T6635] ? blk_mq_init_sched+0x42b/0x640 [ 657.829438][ T6635] ? __pfx___mutex_lock+0x10/0x10 [ 657.834449][ T6635] ? blk_queue_flag_set+0x29/0x40 [ 657.839461][ T6635] ? blk_mq_init_sched+0x42b/0x640 [ 657.844559][ T6635] blk_mq_init_sched+0x42b/0x640 [ 657.849487][ T6635] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 657.854932][ T6635] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 657.860898][ T6635] ? lock_acquire+0x2f/0xb0 [ 657.865385][ T6635] ? add_disk_fwnode+0x113/0x1300 [ 657.870392][ T6635] elevator_init_mq+0x2cd/0x420 [ 657.875231][ T6635] ? add_disk_fwnode+0x113/0x1300 [ 657.880235][ T6635] add_disk_fwnode+0x113/0x1300 [ 657.885067][ T6635] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.890252][ T6635] sd_probe+0xa86/0x1000 [ 657.894485][ T6635] ? __pfx_sd_probe+0x10/0x10 [ 657.899151][ T6635] really_probe+0x23e/0xa90 [ 657.903638][ T6635] __driver_probe_device+0x1de/0x440 [ 657.908905][ T6635] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 657.914693][ T6635] driver_probe_device+0x4c/0x1b0 [ 657.919702][ T6635] __device_attach_driver+0x1df/0x310 [ 657.925060][ T6635] ? __pfx___device_attach_driver+0x10/0x10 [ 657.930935][ T6635] bus_for_each_drv+0x157/0x1e0 [ 657.935774][ T6635] ? __pfx_bus_for_each_drv+0x10/0x10 [ 657.941136][ T6635] ? lockdep_hardirqs_on+0x7c/0x110 [ 657.946316][ T6635] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 657.952110][ T6635] ? __pfx___device_attach_async_helper+0x10/0x10 [ 657.958508][ T6635] __device_attach_async_helper+0x1d3/0x290 [ 657.964386][ T6635] ? __pfx___device_attach_async_helper+0x10/0x10 [ 657.970784][ T6635] ? ktime_get+0x206/0x300 [ 657.975199][ T6635] ? read_tsc+0x9/0x20 [ 657.979259][ T6635] ? ktime_get+0x1ac/0x300 [ 657.983658][ T6635] async_run_entry_fn+0x9c/0x530 [ 657.988606][ T6635] process_one_work+0x9c5/0x1ba0 [ 657.993531][ T6635] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 657.999149][ T6635] ? __pfx_process_one_work+0x10/0x10 [ 658.004591][ T6635] ? rcu_is_watching+0x12/0xc0 [ 658.009349][ T6635] ? assign_work+0x1a0/0x250 [ 658.013922][ T6635] worker_thread+0x6c8/0xf00 [ 658.018515][ T6635] ? __pfx_worker_thread+0x10/0x10 [ 658.023609][ T6635] kthread+0x2c1/0x3a0 [ 658.027672][ T6635] ? _raw_spin_unlock_irq+0x23/0x50 [ 658.032860][ T6635] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 658.037439][ T6635] ret_from_fork+0x45/0x80 [ 658.041839][ T6635] ? __pfx_kthread+0x10/0x10 [ 658.046434][ T6635] ret_from_fork_asm+0x1a/0x30 [ 658.051192][ T6635] [ 658.055698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.134515][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.142681][ T5821] Bluetooth: hci1: command tx timeout [ 658.151817][ T29] audit: type=1400 audit(1733862493.628:1535): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[4712]" dev="pipefs" ino=4712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 658.169746][T13448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.215222][ T6635] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 658.669319][T13448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.068688][T13448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.095930][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.109048][ T996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.167992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.248877][ T996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.265850][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.363260][ T996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.500292][ T996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.629929][ T996] bridge_slave_1: left allmulticast mode [ 659.635589][ T996] bridge_slave_1: left promiscuous mode [ 659.649084][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.687467][ T996] bridge_slave_0: left allmulticast mode [ 659.693680][ T996] bridge_slave_0: left promiscuous mode [ 659.699307][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.077296][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.091965][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.112485][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.121476][ T996] bond0 (unregistering): Released all slaves [ 660.287825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.374994][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.408849][ T996] hsr_slave_0: left promiscuous mode [ 660.418808][ T996] hsr_slave_1: left promiscuous mode [ 660.438307][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.452253][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.464266][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.481694][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.490443][ T996] veth1_macvtap: left promiscuous mode [ 660.503077][ T996] veth0_macvtap: left promiscuous mode [ 660.508605][ T996] veth1_vlan: left promiscuous mode [ 660.514700][ T996] veth0_vlan: left promiscuous mode [ 660.720099][ T996] team0 (unregistering): Port device team_slave_1 removed [ 660.760621][ T996] team0 (unregistering): Port device team_slave_0 removed [ 661.171675][ T996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.233165][ T996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.298756][ T996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.340510][ T996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.390460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.415365][ T996] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.469391][ T996] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.489878][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.532887][ T996] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.596662][ T996] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.677201][ T996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.735450][ T996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.778613][ T996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.842547][ T996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.924950][ T996] bridge_slave_1: left allmulticast mode [ 661.930623][ T996] bridge_slave_1: left promiscuous mode [ 661.946008][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.968172][ T996] bridge_slave_0: left allmulticast mode [ 661.974222][ T996] bridge_slave_0: left promiscuous mode [ 661.981964][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.994630][ T996] bridge_slave_1: left allmulticast mode [ 662.001995][ T996] bridge_slave_1: left promiscuous mode [ 662.007605][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.019463][ T996] bridge_slave_0: left allmulticast mode [ 662.027032][ T996] bridge_slave_0: left promiscuous mode [ 662.033442][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.048502][ T996] bridge_slave_1: left allmulticast mode [ 662.054765][ T996] bridge_slave_1: left promiscuous mode [ 662.060367][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.081750][ T996] bridge_slave_0: left allmulticast mode [ 662.089489][ T996] bridge_slave_0: left promiscuous mode [ 662.095111][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.109500][ T996] bridge_slave_1: left allmulticast mode [ 662.115131][ T996] bridge_slave_1: left promiscuous mode [ 662.120821][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.136070][ T996] bridge_slave_0: left allmulticast mode [ 662.141843][ T996] bridge_slave_0: left promiscuous mode [ 662.147444][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.502908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.591200][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.797597][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.814017][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.826718][ T996] bond0 (unregistering): Released all slaves [ 662.871685][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.899704][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.919806][ T996] bond0 (unregistering): Released all slaves [ 662.933763][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.955178][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.975568][ T996] bond0 (unregistering): Released all slaves [ 663.004921][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.017258][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.037816][ T996] bond0 (unregistering): Released all slaves [ 663.046469][ T996] bond1 (unregistering): Released all slaves [ 663.164015][ T996] tipc: Left network mode [ 663.676002][T13386] (syz.3.1580,13386,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 663.684704][T13386] (syz.3.1580,13386,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 663.734182][ T996] batman_adv: batadv0: Interface deactivated: macvlan2 [ 663.741230][ T996] mac80211_hwsim hwsim31 wlan0 (unregistering): left promiscuous mode [ 663.759004][ T996] batman_adv: batadv0: Removing interface: macvlan2 [ 663.830134][ T996] hsr_slave_0: left promiscuous mode [ 663.835706][ T996] hsr_slave_1: left promiscuous mode [ 663.841517][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.848858][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.859044][ T996] hsr_slave_0: left promiscuous mode [ 663.865595][ T996] hsr_slave_1: left promiscuous mode [ 663.873885][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.881304][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.888729][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.896329][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.905050][ T996] hsr_slave_0: left promiscuous mode [ 663.910593][ T996] hsr_slave_1: left promiscuous mode [ 663.916172][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.923548][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.930986][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.938392][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.949256][ T996] hsr_slave_0: left promiscuous mode [ 663.954802][ T996] hsr_slave_1: left promiscuous mode [ 663.960365][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.967849][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.977890][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.985283][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.997095][ T996] veth1_macvtap: left promiscuous mode [ 664.002761][ T996] veth0_macvtap: left promiscuous mode [ 664.008278][ T996] veth1_vlan: left promiscuous mode [ 664.013555][ T996] veth0_vlan: left promiscuous mode [ 664.019247][ T996] veth1_macvtap: left promiscuous mode [ 664.024811][ T996] veth0_macvtap: left promiscuous mode [ 664.030318][ T996] veth1_vlan: left promiscuous mode [ 664.035629][ T996] veth0_vlan: left promiscuous mode [ 664.041306][ T996] veth1_macvtap: left promiscuous mode [ 664.046885][ T996] veth0_macvtap: left promiscuous mode [ 664.052424][ T996] veth1_vlan: left promiscuous mode [ 664.057638][ T996] veth0_vlan: left promiscuous mode [ 664.171996][ T996] team0 (unregistering): Port device team_slave_1 removed [ 664.194465][ T996] team0 (unregistering): Port device team_slave_0 removed [ 664.327800][ T996] team0 (unregistering): Port device team_slave_1 removed [ 664.349506][ T996] team0 (unregistering): Port device team_slave_0 removed [ 664.481467][ T996] team0 (unregistering): Port device team_slave_1 removed [ 664.504896][ T996] team0 (unregistering): Port device team_slave_0 removed [ 664.607465][ T996] team0 (unregistering): Port device team_slave_1 removed [ 664.633456][ T996] team0 (unregistering): Port device team_slave_0 removed [ 664.725993][ C0] net_ratelimit: 6 callbacks suppressed [ 664.726014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.813131][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.499933][ T996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.550210][ T996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.593283][ T996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.636658][ T996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.709059][ T996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.744034][ T996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.797250][ T996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.837719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.848019][ T996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.921620][ T996] bridge_slave_1: left allmulticast mode [ 665.927345][ T996] bridge_slave_1: left promiscuous mode [ 665.932979][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.940804][ T996] bridge_slave_0: left allmulticast mode [ 665.946507][ T996] bridge_slave_0: left promiscuous mode [ 665.952095][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.959985][ T996] bridge_slave_1: left allmulticast mode [ 665.965601][ T996] bridge_slave_1: left promiscuous mode [ 665.971367][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.978992][ T996] bridge_slave_0: left allmulticast mode [ 665.984603][ T996] bridge_slave_0: left promiscuous mode [ 665.990287][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.129389][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.139172][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.148258][ T996] bond0 (unregistering): Released all slaves [ 666.157536][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.166768][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.176913][ T996] bond0 (unregistering): Released all slaves [ 666.234117][ T996] tipc: Disabling bearer [ 666.239494][ T996] tipc: Left network mode [ 666.245656][ T5863] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 666.258409][ T5863] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 666.266807][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: kworker/1:6 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 666.277539][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 666.287576][ T5863] Workqueue: events cleanup_bearer [ 666.292703][ T5863] RIP: 0010:cleanup_bearer+0x23d/0x390 [ 666.298142][ T5863] Code: ea 03 80 3c 02 00 0f 85 44 01 00 00 48 8b 5b 18 e8 b8 7f 5a 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 30 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 12 01 00 00 48 c7 c0 1c 2b 61 90 48 8b 5b 30 48 [ 666.317750][ T5863] RSP: 0018:ffffc900038e7c68 EFLAGS: 00010206 [ 666.323803][ T5863] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 666.331754][ T5863] RDX: 0000000000000006 RSI: ffffffff8ace590c RDI: 0000000000000030 [ 666.339707][ T5863] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffed1004d8a915 [ 666.347659][ T5863] R10: ffff888026c548ab R11: ffffffff816bc66e R12: ffff88814d658e60 [ 666.355608][ T5863] R13: ffff88814d658e98 R14: 0000000000000001 R15: dead000000000122 [ 666.363575][ T5863] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 666.372501][ T5863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.379086][ T5863] CR2: 00007f59f59d59a0 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 666.387048][ T5863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 666.395002][ T5863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 666.402960][ T5863] Call Trace: [ 666.406219][ T5863] [ 666.409132][ T5863] ? die_addr+0x3b/0xa0 [ 666.413286][ T5863] ? exc_general_protection+0x155/0x230 [ 666.418827][ T5863] ? asm_exc_general_protection+0x26/0x30 [ 666.424534][ T5863] ? select_task_rq_fair+0x36e/0x44e0 [ 666.429912][ T5863] ? cleanup_bearer+0x1dc/0x390 [ 666.434766][ T5863] ? cleanup_bearer+0x23d/0x390 [ 666.439600][ T5863] ? cleanup_bearer+0x228/0x390 [ 666.444435][ T5863] process_one_work+0x9c5/0x1ba0 [ 666.449366][ T5863] ? __pfx_process_one_work+0x10/0x10 [ 666.454725][ T5863] ? rcu_is_watching+0x12/0xc0 [ 666.459486][ T5863] ? assign_work+0x1a0/0x250 [ 666.464059][ T5863] worker_thread+0x6c8/0xf00 [ 666.468638][ T5863] ? __kthread_parkme+0x148/0x220 [ 666.473739][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 666.478833][ T5863] kthread+0x2c1/0x3a0 [ 666.482888][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.488082][ T5863] ? __pfx_kthread+0x10/0x10 [ 666.492668][ T5863] ret_from_fork+0x45/0x80 [ 666.497068][ T5863] ? __pfx_kthread+0x10/0x10 [ 666.501645][ T5863] ret_from_fork_asm+0x1a/0x30 [ 666.506416][ T5863] [ 666.509415][ T5863] Modules linked in: [ 666.513512][ T5863] ---[ end trace 0000000000000000 ]--- [ 666.519183][ T5863] RIP: 0010:cleanup_bearer+0x23d/0x390 [ 666.525565][ T5863] Code: ea 03 80 3c 02 00 0f 85 44 01 00 00 48 8b 5b 18 e8 b8 7f 5a 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 30 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 12 01 00 00 48 c7 c0 1c 2b 61 90 48 8b 5b 30 48 [ 666.545235][ T5863] RSP: 0018:ffffc900038e7c68 EFLAGS: 00010206 [ 666.551299][ T5863] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 666.559643][ T5863] RDX: 0000000000000006 RSI: ffffffff8ace590c RDI: 0000000000000030 [ 666.567659][ T5863] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffed1004d8a915 [ 666.575658][ T5863] R10: ffff888026c548ab R11: ffffffff816bc66e R12: ffff88814d658e60 [ 666.583621][ T5863] R13: ffff88814d658e98 R14: 0000000000000001 R15: dead000000000122 [ 666.591936][ T5863] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 666.600886][ T5863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.607605][ T5863] CR2: 00007f59f59d59a0 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 666.615571][ T5863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 666.623576][ T5863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 666.631868][ T5863] Kernel panic - not syncing: Fatal exception [ 666.638123][ T5863] Kernel Offset: disabled [ 666.642423][ T5863] Rebooting in 86400 seconds..