last executing test programs: 4m54.277483849s ago: executing program 32 (id=44): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000200000000010000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000d43b81825a3a0d838000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x222000, 0x1000, 0x10, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9, 0x26, r7}, 0x10) sched_setaffinity(r5, 0x31, &(0x7f0000000200)=0xffffffffffff3bdc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) 3m19.98433868s ago: executing program 5 (id=459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x28, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005020000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018170000", @ANYRES32, @ANYBLOB="00000000000010c271000f4d", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x54, &(0x7f0000000300)=""/84, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0xc, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x3, 0x1, 0x2}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='rpcgss_svc_unwrap_failed\x00', r0, 0x0, 0x9}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000030000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0x7, 0x2) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ptrace(0x10, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) ptrace(0x11, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=')', 0x1}], 0x1}, 0x200488d1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000123) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4008af25, &(0x7f0000000940)=0x800) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffc66, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000055002f03020000000000fe0f07000000", @ANYRESOCT=r3, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)={0x2a0, 0x19, 0x400, 0x70bd26, 0x25dfdbfd, {0x7}, [@generic="eca6a3621aca2f696c19ffcc5c92a881f16919f6c1e408c9edbc3b3bcc9495d86454907aa0d38bd8c86d80788524741b56efbfd5eed4138b4afdb819eee549bd8f088679f2b5cfc3f80d12ffed158f5235f5e90b5e8799cfdfabef44d59d73b48db801c8f5ef8763460d54de3229a24d3aaa68819caaf3f1f582ffd5b5eea3c2c79a36d6361fb14fad27e90b7fedab0a0c8c2788383b46da351c800cc4f3e298e246a9ede3d3046632d940f1b7044b01440025910a", @typed={0xda, 0x131, 0x0, 0x0, @binary="f92cd077da645c5b6e27846aacb3d486626c125b4722bf4caa8cb55d4238fa26b04913212389cd1854483cf71257831ac40d46dadbca65d0fb1f0bdfe3984bdba4ffb01f457555bb73d014c4420ce202cd35f28ffd2ee95902795f0b240d8786df91568cf43fe8704da937461399f3c02e5d52e929772764b598b1b9e19bda411aa49bd3ee1ee3e18e3427e50eee7a98a251fc48009e8914e3d75846e97a57a810aa8b3686c6dda06a1221536e72d80bfa5d75c1990896814625840a7cfe8ded63a7d7d4e7bed861b7edf0e8f7b66f427ad6baa768f7"}, @typed={0x8, 0x11a, 0x0, 0x0, @fd=r1}, @generic="3cbd97c59d59113f5e14f8d51a95087e55fc46d00e66aa20ef9fcb901140d29e230e72088e92fc688396d889e047f1f9bffa81fa8858958401fece5c10b3f0de73e6d472e645b15ee28ec420fdfa50dcac0188e04a201ec95688f205f4b7ae17a2312e86c0080b36ee88eb37a57397c4fb742689ccb4751026f476f1dfc3086dc54bc660fff412106767eb2c879422722151a5e87499e1d01c96c799b2509a8a1f8a6d5aa41e063522658f58199afb941efbbc1b2cb26cb789e03f6a01c7dbe4719fd28e94ff738319db36a7b72cd2c769859a30009a617517facc49f925d2ed4dc2527beb6032bc907aa6d33aa587be"]}, 0x2a0}, 0x1, 0x0, 0x0, 0xc4}, 0x44) 3m18.997772534s ago: executing program 5 (id=462): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "7c5cec21691a43fe"}, 0x38) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) setreuid(0x0, 0xffffffffffffffff) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000880)="4a00e7b8b841f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e3f563df", 0xcc000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[], 0x20e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 3m18.006178719s ago: executing program 5 (id=466): creat(&(0x7f00000003c0)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x6000bc, 0x1a) 3m17.836154075s ago: executing program 5 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0/../file0/../file0/file0\x00', 0x0, 0x11000, 0x0) chroot(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f0000000640)='./file0/../file0/../file0/file0\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/udplite6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x9, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite6\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000000)={0xc0, "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"}) fchdir(r1) syz_emit_vhci(0x0, 0x0) openat(r1, 0x0, 0x656043, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102393, 0x18ff9) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000380)=0xfffffffd) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 3m17.179629147s ago: executing program 5 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0xc0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val={0x1, 0x4, [{0x79, 0x1}, {0x17, 0x1}, {0x2}, {0x4}]}, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x22, {0x6, 0xac, 0x26, "4535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d27"}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x30}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1b}]}]}, 0xc0}}, 0x8000000) 3m16.895180195s ago: executing program 5 (id=475): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x5, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1f, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000380), &(0x7f0000000440)=""/219, 0x4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r5}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3m16.302450138s ago: executing program 33 (id=475): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x5, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1f, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000380), &(0x7f0000000440)=""/219, 0x4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r5}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2m52.029887242s ago: executing program 3 (id=555): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = eventfd2(0xc, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r1, 0x15, 0x0, r1}) close_range(r0, r3, 0x800000400000000) 2m51.584316266s ago: executing program 3 (id=557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r2 = syz_clone(0x9281300, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r3 = socket(0x23, 0x3, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfffb}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2m51.466986863s ago: executing program 3 (id=559): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x4800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0xa) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000195000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x5c89, &(0x7f0000000640)={0x0, 0x6ccc, 0x2000, 0x5, 0x280}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xf, 0xffffffffffffffff, 0x21, {0x4, 0x11}, 0x5}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x7, 0xffffffffffffffff, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r6}, 0xc) 2m51.292468616s ago: executing program 3 (id=560): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0x101}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40080, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xb59, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940), 0xc02, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000a80)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m51.068134559s ago: executing program 3 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x80, 0x98, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x7) 2m50.926364933s ago: executing program 3 (id=562): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c0c5) r1 = socket$inet6(0xa, 0x6, 0x7) close_range(r0, r1, 0x2) 2m36.444178652s ago: executing program 0 (id=612): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x180) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000200)={0x3e60687c, 0x8, 0x0, 'queue0\x00', 0x80000001}) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "18f19185e9e9e293"}}, 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x548, 0x3a8, 0x8, 0x7f02ae, 0x3a8, 0x200, 0x478, 0x2e8, 0x2e8, 0x478, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x3a8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@empty, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0xfffa, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x1, 0x4}, {0x3, 0x4, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) syz_open_dev$sndctrl(&(0x7f0000000380), 0x2, 0x222000) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) mount$nfs4(&(0x7f0000000100)='(+-)\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\b\x00'], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2m35.860402207s ago: executing program 0 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) mq_open(&(0x7f0000000480)='GPL\x00', 0x2, 0x20, &(0x7f00000004c0)={0xffffffffffff8000, 0x40, 0x3, 0x9c1}) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xac, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xbb}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x14840}, 0x44815) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m35.84131682s ago: executing program 34 (id=562): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c0c5) r1 = socket$inet6(0xa, 0x6, 0x7) close_range(r0, r1, 0x2) 2m33.379647898s ago: executing program 0 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18, 0xe000}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x2, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc45) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 2m31.736469449s ago: executing program 0 (id=630): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5710, 0x80}) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0xf000, {{}, {0x0}, 0x0, 0x0, 0x19003}}], 0x48}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.399810717s ago: executing program 0 (id=634): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x24) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0xdac, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) 2m20.22433044s ago: executing program 4 (id=669): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x2}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chdir(0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='./file1\x00', r1, &(0x7f00000001c0)='./file1\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x8800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000400)={0x0, 0x23, 0x6b, {0x6b, 0xe, "be60ad30081310f625e784a8dc930f44372fe35d37fbde0aa5e9de3f22d40443671414f212f284e37e9cef185ec9f46c3ec53b270ec615443634c615430c32e7f10f97ea0e266bebb67228b53b2593bb52a8fec7007f8f6a0cf77ca8bed43f1cb2255ecd8b7d369712"}}, &(0x7f0000000840)={0x0, 0x3, 0x5d, @string={0x59, 0x3, "bf686a19a3214d754e0c883339da5c1ad12058a64f66e7f358f51d85de7350cf63faf63d1b2fb79975dc18d0acbc95249fef6fd92cc15c2e431d62050f36f38fcb00b5cbd7fab6a6f410cf4f80515fae2b1a3cf7ca1f77a8b22d8b"}}}, &(0x7f00000007c0)={0x44, &(0x7f00000008c0)={0x0, 0xd, 0xcb, "8f9e1ef5d5d50fd5b5e166433e509633b43360b66c909efc435cadda96ed36f545354cdd69e48ebc4668763751b46b47ef7ec0a3fc6dc538a2e15cf28aedd1a8483a748d4bebe4cc06992085cc130e9c57a3cfd882f4658fe37c3f8a889154390eb7d4a55e77a050b808c286dc0d94b9d46c2198632fb6150bd73d8c259e969cf5c8300b38dc9d2272894166d7b8f856fe86365ef43e0f0923db38752dec69a5ca1210d6acb1f87dc46ff15437b79f170f8a1fa616eda434cf47af6948abc6973d8d6d13c141b98b6b6612"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000680)={0x20, 0x81, 0x1, 'Q'}, &(0x7f00000006c0)={0x20, 0x82, 0x1, "ec"}, &(0x7f0000000700)={0x20, 0x83, 0x1, 'h'}, &(0x7f0000000740)={0x20, 0x84, 0x3, "31aa8d"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "89cd2c"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 2m17.588416551s ago: executing program 4 (id=676): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "941f6721e757691d02"}, {0x18, 0x84, 0x600, 'b'}], 0x38}, 0x41) 2m17.063020794s ago: executing program 4 (id=678): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0xc8, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x7, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf370, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0xad76b6be1129420, 0x4, 0x2, 0x400, 0x80, 0x7}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, 0x5, [0x4, 0x9, 0x6, 0x9, 0xa], 0x3a}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x2, "b4c1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9, 0x6, "f129433136921909"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x6, 0x4, {0x7, 0x25, 0x1, 0x1, 0xbc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1a, 0x0, 0x1002}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0xd, 0x1, "3520a0595783"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xc0, 0x7f, 0xb, {0x7, 0x25, 0x1, 0x1, 0xfb, 0x9}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x30, 0x7, 0x8, 0x7}, 0x3e, &(0x7f00000001c0)={0x5, 0xf, 0x3e, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0xffff, 0x7800, 0x26a, [0xff0000, 0xf, 0xc0c0, 0xff60cf, 0xc0c0, 0x14000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x5, 0x70, 0x3f, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x3, 0xb}]}, 0x5, [{0xab, &(0x7f00000003c0)=@string={0xab, 0x3, "3edf683edfdb7cc8b5e1b1ae3ddab80b6df1168192fa3a61626b5dd5274265fe82da2fcd315f6e625dc3f1ad404115174fe37e249f32153c44b2a6648a9e86cc8d659cd074d13d222b9e901154f4ad691b55cbc70225ef9123b8ac9edabed2222a2e76280a63d065c411861f47decb85fac7a1948602caa058a9f6e21451a96018654eda28c3a1fce2d053ce018df31fd8418a05c2a83f0683f5310b225728efa16ac88783666d2082"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3866}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x409}}, {0x88, &(0x7f00000004c0)=@string={0x88, 0x3, "4a26a187a5bda69468bbca2529db1a5cc67c34cde46a3c834e16b0a808f7e21d16e43a0b77f750c8b51f2029f4b32ffaca65c6142321beab2a2557f792ec433f7648dad1501b11a882f76fb2e9553b09327a4bd9bc9578435f0c46e4064ee97a4e5df8c4d47220e9bd967b31c293add6404abec97ae83c3a552dbcbf73596253d2063638be5c"}}]}) write$proc_mixer(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a50d77d5614494e20274d61737465722043617074757265272030303030303030303030303030303030303030300a4f4741494e0a545245424c45202753796e7468204361707475726520c855eae47db732f5de981953776974636827"], 0x178) dup3(r3, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2m14.935155512s ago: executing program 35 (id=637): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x24) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0xdac, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) 2m13.707185446s ago: executing program 4 (id=688): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101, 0x1000000}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000003c0)=""/4096, 0x45, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2m13.555376651s ago: executing program 4 (id=690): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x2f, 0x5c, 0x68, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010101, @remote, {[@end, @end]}}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0xe, 0x4, 0x0, 0x26, 0x7, 0x65, 0x1f7, 0x2d, 0x16, 0xbb80, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x24, 0x6f, 0x0, 0xf, [0x9, 0x7, 0xf, 0x10, 0xfffffffa, 0xffffffff, 0x9, 0x5]}]}}, "29693ff5"}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x68, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 2m12.254816437s ago: executing program 4 (id=698): madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0xfffffffffffffeac) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r1, &(0x7f0000000280)={0x7, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xeb, 0x8}, {0x4b38, 0x1, 0x4, 0x5}}}}, 0x15) sync() syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b000100000000090400"], 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sync() sync() r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',\x00']) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000010000100000000020000040000000000", @ANYRES32=0x0, @ANYBLOB="000000010003000008000a00", @ANYRES32=0x0, @ANYBLOB="050027000000000008000500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31", @ANYRES32=0x0], 0x15c}}, 0x0) 2m11.754747521s ago: executing program 7 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000009000900030073797a32000000006c000000060a010200000000000000000100000a0900010073797a300000960040000480100001800b003cac8228c493bf9200010062697477697365001c0002800800034000000002080001400000001c08000240000000120900010073797a3000000000140000001100010000000000000000000700000a"], 0xe0}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='(', 0x1, 0xfffffffffffffffb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r2, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000021c0)="57e52cea7f4857d6733fa02153e82b62b77884ff8d8fdee541b5b285043dae2a7f499115f3d35d339f9487f47318bfba132c29a197dd6cf781d23c96986e5b2f77c2bcc5e4f6dd2a39d774ab0e19bdfad6cdf2d89ddbc90b4d5c6a711f9f2d7b971d1f625ba2c8c7c93a2c1b93fe3801549b56b7287992cef5c34a688b452f6aab31c75959fe6dacd8f3815b5e537a974665323ef477ce44300311735ca748b7748d3568f7be3edb2edd4b4a4b634ce5c67c2d714d7ee25dc45794131779dad470251839d70d1fad69e18c9713c2c3b34805e3373ce6bdb68bf26107a141934dde08e6bda0880ce1830a6b2af03a174d8e3168e443f7320861afc56d04520bc2184e17b3470ffe1faecf2dec25c3c94a34b5c83574962d2ff0be05d8bb5581db2746f9274ab391bcbd44bc6d1c8da380b26ebe651b02af031555593fbfd9ae2c75e545da67d89f54c2d3173f1555dea29aee1c4eaefafc012b88b22827e904384cf0a1a56435857100f31c386e94f01b5ffa990d62741d1d01f8728a1b65c7ac64f8c97591f93e1c136413d7b60fbe8f6b92b17784a870e55c34484a2fbbc1a2038d557c5faaa91a01fb45b106531af8c79646a8c3ce9a29d085c700f24dde9ca96419fff336b8196ee940090b111f17acfc56518324e478bc70376994058973b84edc9b9fa53c2093ea30348d4b3c123876972ed559cf5b35f3001a00995221cb57bc0df0441de76cb5f95b5c35264f7095ca4d6cd9253d9381a10d906a6f1a26d8d759d68122576eb60cf41e4bf0233cac4a2afc1280387a612208498565029690fd56bc8b15da1a1ffa0610ff7b6e0f0a5b81aae7495918f7a7e02e562a3587c6d89b9705d06f41cca90511534bbcb1d1f02e34421bc627b27821751cbe7065f00f8ce1bfa7bcb288ece5a2da1fdbd88d996053fef1bfef4ffaab45123f36522858956d62d3a9bcd0df5664ecb5986ff665f35729b5f6766b6c655034ceb215e7f8a14a8c956464fda15afe2a4e3237001c42798604aeddb852cb4f3a7bcb497356af4ff0d0bc6c3ecb96bc0f9dcfd9ea8cd1126dea6d23a55e8cdbd502b0a06edf8eec1335fd38813d4b7d4d7e199df9c9098cd3a1e13e01c810d4370a967588cfa15a8c868f1f2018b5d0531eb71f090f143f9437ad49cfbead36b299cf2c2269ebb209f40442e58c134260d3f434ff75414eef93768adf8cfe581bc194bc27bea290a907f72846e4cda3f8a05feb50fb4c31c434c12d47a5645b922e7302aaf83be2c6ffd80ae41f95af189d71df23552b8e90c2bd110cc7abbf510695c01d680139f352b392068f0f0023b4d9256e7706906a64ff326ff9074068250289109bca29dc9ab6e993a3dbf9414f2dadaef45b1667aa975dd687bcbfc6d6b22a0176ad3bb7a21812f09009db0ecae75efaebdb57bfd52cf1b489fa517eb1a05d2e67ec7bbc87eb69695664e0f6ceca47e616a25c873d058300812f985ce9287db7f8bd4045ed10cb7e0bd422f44eb693cbd952c63f0443ff5689adbb59c7d605fca4aeb97cb4cb987a034bf873c5d145c3503e4481642af743ff8cad95819f4cf00d66856bd6002b833ae9347f6b322986742a7cb6e69b79ca5374381212c637c2a9d2ce541ca277393cc4b04cb66a1f4cd4f54e63ff79392cec691a151b3401dc7912b6a36bdcdc0b13d8aa3bbf159f1c9e13e9824c6bab3ae6be662b593ca0fd0a0e0c60d9a5cbdb750a5a8b24d6d3793fd00c44a2c16961b519f8b7b1b41ebc3bd61abd245c1f49bc2a97dfa1ae40c461caac2d7692670d9cd51b1a451c0fb690593e2b6992fdd10bede706162097c322be1531b3fe57d6cea798afa8e3b14087602ef2eca102245a7f5ae68f212999f9714345f3cac91e4a5a0f9ebf972ae97a294396fc7182caec46bc5828a0c092cdb71ba3ead870f607de21fb24654024513d52797f9dab358e7dda2cae1f9915fa9939274d1401f4940f203e15e0bbf828cfb6024505bb928023c856ca32cf47d6e9660602667235e77276491be28d883887fe4267415ec6402fc9ee095033771dc7014a1af5bc680a6cf46ccf7b3d5dbf2fbdf07a75b18f078ab6068a448c9c4a3bd3412207ec7040d09d88fe2781ccb421970b1cada589f66431952890d773e8ca66dd7b3669e7f47b7b9d7461cca9c69abdfee00999f71d9cf8cff46a8b86bd20c3a22a9b01f7d84b560c089f31328d4b9bafe89c92fbb1c8e9e8dd5592a69b9dc8d98949788ae11a463199ba22a0473529e65d06ba59272569d9851e9215c5d2e919c3ed250bc53dc46df985ce277e4874a38f5341c75be8d5efc56c4b56c7aec58f7f029d2d6527d9c3552cd692d23adf263719930cc8b7036ff5a9ac954bee0ebb46455c443f3b7d8f2ccf2f74f58f651ad19be07581dfe63b1b60a5dec77d09636c5e845e53edc54b8e554040dea333d84b4579f7523eeb609ff802b1883be5a48bf34005033f9dc9cdc206366e1890efe499412834f01c53f31e7456c20284968556da92f211794dc92a6d51869f6dd2b957427cc09fb63ab3137e6bbdaf1d096a8c437fb583c8510c94689595c9819d48f577760133d77be3dc1970039a8f3e7151fe4714a97f9a9cfb12cd7cb65bed36a99334b478f9e7dfda7e846af3639f78c413562e4240aff695d4236e03fd53acc1be31f8ac44db8e9049f1e6947a27a2e729106ff4977dd377acd3b7f5a1b2318227f8acbf0e69e57fc6d004157fd3f10037de67d755c3071f9227bf8f850a2dc810488bfb93a52fed61fc2c11334ff34291e854a2da0aa15b85f71b19f68801179413db2d1a736a276b3bda17cb81ed4d390e06727d00415bf12a803f3e2ba94685c029cc9567fc9d09dc1fd41e925556cf289bab3a373580a7acddc145ebd8e41d1ac2bb00829dfda28b1987e988c876c04ce8b50c85b6f0713d9a7aa0977f1b1b4b0a6c8a52969931b2d1680aa3a43566b8479fbcd6a264a9ce929aa6aceb17daf5ac463fa82b746ffa97e393d6239f9188b030166e49ac83451f27f243a811bc30f32712351a811c924332a528eeadb8977c4fb84c7bbfc3d63c824362c334e2dbd858dc75d3651e477180cf2afba90c0912f3f1a723071f0d062dfbddd9ab595e03d1b1dbe1993558f9a8a948f852d3d58650698c2bfe15e044a0b5c3a33509edd12991a076ecb24ca6e1a9768b9f44f93ab5f06fa041b93d76b93e029a815a02c50ae172aaedf03d188ffb8470068bc5fba65bc2372b12ff6b85efef2d36cb500881e65698db5e6e29e725b14a5c42700887068fd8de3e802f4c6035cd416d128bd315ab7eb8a1f979801e2b8bbf211f8aa83558159ccf9fca6157ee3de65e9aa963f2aff417bb6bd116302b03c6a9cc07259309d399c6f59905b54d2e651b5127666ac982c71740f53c315cd0ec9171b4bb791eca8217b15bc5cfee1e6624baca54ca9c299430c670ccc0b5b3c27cf78558f27971e5339afdcd6d05d48eddc0810cdad081a28b890169cc74a1ed0288a14481a771b6bca45bf7fb5509b683cc81ca2bf71d74effb74bfc858aacd4578e169a6641722c069424793daf8b397f1b9481ed6ee6612bd53f68c2f03d25fc1da1bcee8913c14afcd9d9a284d804f16c18e4c8baf98273f119fd5e332bf1e1ff2e28c88b11dd27a88207026c9de701d9d22fa71b743191897face4d820750748509d4560670e22238b7abc872107f4aeb201032f51e78ef74e9f4ac440c0ef945e39a27309bc3982d1602080f20e16b8808a831067524df7d838d7ec3eeb2040633ec21b9f305b2bb95d3b078eb379cdd3e0e0fb8fb34e81a66697423841e6b59862a6d01d263c2611678accc8eb8283dc4011eeee1e0cb7e91a490a465168df0977b237d05e7aab1f3ad75865d1df5afb37a9b298d4800d6011fea03c24e001b3a17a7b7e04b2b7db7218c8c8da81ed0bdde7aca356a31e911718f8304bcaae5aaf041dd0d7418ea4fd366db5d3163938bf7b082c6950e5876e6927a2055d5662a1b7789c4786ce0c66378183cacf048848203756369785c3196fbc50ed8aad38e929bb3718190d2d6fd68cfdc0a157e667b7e44f7aefbb2333c1bcffdd57af147e3485d081ee47464d921e2105c167b2c3933028e0aec7f52c84d655190e9f28f98810f44f5532cdeb85bbf31013ed81cdf6bda5bed7f33dac15e6f9a0bc245139623ab879aff497154a65a811fc7cf4b361f84bc3e34d891427c72765ac04ed1cdd4b8b4d67ad034ded2f6c0b73ef45b61fdeb9545dde7e2507d6117cfd2b029d1441d403fa4c6a6ef3e50277c1954e6d7403ce7a6bcf83e6dd54e09842e76c3374f5ffed068ff5716451e61c53eb7bf7b72e369977582b7c47553dde5d2a7143368663f6af00654cbf049feecd7a0922238ec78c0ec2ba81e0e455db58e59efe99a2635cdabbfef0c8fae5d0092f3f1648101c52fd4865f06003b2e9ee5314d4f0dbb58a77c994c5b899c1e1496093dd292e085472f8449470be1012f4ff908b4eb50d509920cf079912cd66f2d0ced004fc4295d8d4efa2c3b6310a58647ad72e6dcbd7d2536dea3346fefe5f7e255458c4223770fe93e1e99b3697b64ab6a7366bb48556c4bdb9a519d53e1e2c8f702d44adc9454fd5eb2a2c1a9c4be72e17d1af1f1480173ba93c96998b4ad10bf388a3f5228590a2f1a12c26f93d5a07f53d8139faa08d370ea39630732c2f378e2253040c94ef9a3e7bbab35efb6d632e3f977cb144869302c4ad371d3958521af5cf6af3f41f2263ecfb297ff0812b839d91938a43ea44d34ab9bee7c864c3769b4d09067b6bd317f90946b07e53de433418f75de1a2459c6e15e6c91317128fdd1d45067fff27fded6aaf2f47bc125b55c5759f127f6e7c25f478ef178d47c0b2a4fba4d65c4a3eb3ea0048142bb9f88b3c145b92f644b63fb186e2524edc32cb6dd8bb8305973fa72324569d63fc59da3946008ec73c25f01a90f80f791e59d76f5c534d5be132800a32d3dd471617812184030c033b6ba72d3c3e79dda524d5776de707bdb35190263755af9c0a7e2e312da5172cb5fd57494e1376321d69ed89452d4839a15ed5dafbec78093c14d9ad907ba9982d875de7b6273e412372fcf8ebca8fb2bb9ae8d62a24384be5766cc9c355406e7e1648ff72eb153eee9f875c1c0f49d7c122282b5201cf3498387c9b2a0f9660ed3779df159a9bea4b85616ab26eb60d2e8ce19bf443e3846a49064103f416d54be7028d597c9940de35ea2d517461dcf15f508bdfc1c4a67bd16315f1c650d55d0329a9ca097753420208a79f01a408f6a4c9f29b65356713cd1e70f8507527cb5fc969047dc731311587e28db908c36bbce4102d85f79ff46d1ed4bff5741c537a554d7135b4ac172b03c3b75cd7fbb5ff21d8278492f4a4d382a14f404a7597f6988f1486c3d4e0533250789ea3bb0e9f888de1046e3cd953d5920eabe1f5e34678ab191a09077969597776d5cb7f8357a37874020e6c6905221c0d6be1cb6be821826164f5443f6e1a61fc58e5e3501f426ff8a0451d342c10c146bc8c70e674b858ae7e2106b2ca8b8097beff309f58e22d2e1107ff188b2cde2bf6f5491fe32a18b92d9c45af501871350803394938d22bfd49fdb4c46bd77da7a55eb6a03c090f639826882d171e6c2c7d3233ed460c606a386d4596761afff570b3e99554cab0bbae8c47f6e0ea5387785fad25b8ba78884c29d99c96eafd819028673f81b16cff45033f60b7020a899651ce5b1764559585617e94a267282f5a532cb1f5b0a8ba79c37f3760416b5cd245e1a54f19cce5b1eac03eca8c8860f755efd10eaa1985e07d7c96a0b321f55bf7d3286350ab8ef6512f1f0a9aed7a82e906eb2a74dfa6fdefb3813e7c80031519951d0c1e58d800f0ffc26daf380713759bd0b76890737ee2627721a565ee8ee62dcfbc4fb43526876d1b8c782c0c31572cb7fd40a8545c523b72157408a8bbb9b0e3f8c9444cf17981bc1c29ebc68566715f823855170288ec445bb7f37ce17d1fd8c8676b1132dcceb0a9a2387bc2ee1f6b6715220af622b8daf7e0dd6ebb8dd26686f0cef4af32e6810d21fe47ae5d9b84283603e5219cf81f76b43c71f37d29b6901d912ec3fb8f10c3dd03d0da6baed174b12e6f0cd8a370ad49f629d35359c17be84c1defe0e74c45e139bbd1fa01317ea82e3aacf32bd5b6bd1a3169cab19cb51ed7af8d8071d9a585732769784b4d8db0c1e14392785a22ce423a528eaef60d029c6449f2848703dfcbc04d8ab18bb59b32efabe5e15304be27d6aace843b69455994e1abbbb64cb3b401c084d974385768de4e2e00c664f3fef1d7b0da746b75c4ba62c8cb30942181748a7725a9157b3ab94235a8ffd67e1634bc68c69091e221055c2fbd08652d0ebff9625394912105d932498f994c3a49f76af38d785d94334312f54b33f7d60cc463f49db590afa9fc90f4e236a97e67065ae796c46644334de2d66163f6e46bd1d0ba1d55cf9f7129555c28963f300971131e58f4dde52b66cc526f299bad4f76ddbcf8be9c3ca3fa9a37e7c8269978a20b7f1fb9ebe7306a54868fc2c0b43eba69d0fa435e121e1cb2cce138ebb00f097937c362b1e3565742b2371ab14afdac9d7f3094b6a5cd1637b929f4c86f3cae062f3ff0a57270f4ca6c14abef8d2f1f3c9a9f82d582db3a025e326c697ea90ff993ad4cc4e3e65f2f7d4d0b61427e81eade9c04e94b2cc29a1649f9bd2424968e2f8421b76e433baa4208169f1e7529ba58497e0922659fe7be96debdcb1b9da617320fe455662c50af551c1168367b4e97bb8ac905e89fa54e6750a7f07eb88e24e8868ee4ecab6612a0fe608544ec7ccc3718fccb5b45d6cf2acd2bfa515d4ef092d5cd2ab0b406241cc23877abcc6f3279b01a0fe01199752d671a690bfaf4b0237faf5b21433d70b8e4fa24e126ff970347ffffdc52075c95f676fd36322793978a50ef40d20831ddb505ef90e97528093823e042532ff632d454b774c10fe740bc8cf2b3bd071ef56fd6022b0ea81760bea8c3bd1de7f641db58f9ce98e9fe2754a1ad2258ca8437e7f1eca6128844e13afd96d529f197c77fc9a38cc10099d4a90775bf66b51e9d4dd988e472214fbb39bcea5dff218b950cd4c6e52fe83e93a2c352b7474b9374e39261dcec127f8b7a674d23b45a5175ca10006a0e3c190c16f08db04b58607f0b823965093fa3cdfe01b99e2ed11f12876c76ba0155336cc90b2dc0b76583c78ffa2aaa5abf92853406c303e2fd85cd58fc726f16bfecaad7444d52f316d4b9153d273d7fef8275c41f5947b2381fb75263612b3c0e866b798c234dbf3878b09ceae2cf06ec34e96729d218a62e20d81ce50f60a3f7de1ce72d4f471ea59f2fce71942e528df8a5dce920fd5de4eee72bf95ea4267db7d15ca5e93e11a477b9028f97a43869d4317576cfc9e525abbd239800e61f5a4ba7a31e53fe27dc28b288cac7502a30312e8b5ed49be72fdf1365bd0626faa1614060bc2ddf185b36378499f3d611ca87c169259e9cc9a58e0fee624b71d68fcfcc505e4dac5321a75cd71c8e9254dcd82df5621d404a61a25a3c2fb6cff338b3c5756c54f53860e925b195e1a07459aeb165fb70bda8660c62754b05c85061e1a269896cff64825291deb132fdadae7b6763dd3cecf8318e356115bbdfbb94d818f4a90c04adc4e90e17e7a85d97f835af6834d769147e5335dc873c301df77f0aa691da961eda3af3008490cbcfd6718e26f70d50e083d2f63a378d8f2302b16855280a742aceadd3e140da75a3cd70ffc14c724b456e3a6e3fffc5c9cbcc016e9254c791c2170350b30328fa5b375383cb8350a71e2e1efd07404f88501170fdbb7e12819306253ee967d804cf02021ff924694bc71e9d01908e588cb00fe1dc731657f7575ded65f1cb086dfa1b60fac9f733779dfaf917267aa95f92eea181256b11840568fef023b51428f142f3ed826fba4416c405e60a787b1188b2ed5174c8b2c8094beaeff4e727e1dacffd5c09a6bd1149b5f81cb1ef2b3139c6ba9257f19d884568b089b79a8ac50f6f62c62abe373ad5ccd7607a9ea1a9b2db650eba85f59ecea845e320072196ffa07ca3117995cd93949793ef82e3b78bbc8148d2744a0067b53ce83351650d7ea5787587be7fbcbc4a860037427c06743a28fa8be49a2183be2ed74912cecca600b57898746d7dcff2ef1045c273dce239443aa10aca6f5cbd4ded7eab6e921648b75dd6dc7b607671ed5138480c0e7286d35eb5d2628af03ec7af91382290f69441675332d03d1d030b010df2a127b845c314191de55b53b6ad71e1eddac39fd41d3cd009f708b3d48c54ad39dc1eda528354a9b04ed2af5d0b9a7ffe4e9cdc0084568703558c6d874bc9524058fe61aa9c4dba57430042f112cf293081701e11e4aff47541e7e9e7b2fcb96e6a7dfdc334e8227fb37fabcef299065c3f1603518cdb0a2b439e04cb0acb3e35cf71f8d152e63c7e68fa5fe6367655228091660713f5261f613241f5ea9e0dff3120a246ce7d1e83b32d81a558ade7df90040eb9e9912f634dbeafd6f40b5e8542dcc4251b6c0a730a8c480ae5ff94e69e43b363c77b21be6bbaf32fa38814fc3a81a4c7b10c85e150963f1445ce9212bdbfdbf386a4ab282da7f93aacf7af56f1fe5d0802d3cc1ad4a2541053ce1436ed0c5f1bc99e9769b5038962b3b4c221762ad510d1c8aae28b9a0ee91365bc853eab10ec628c79130c05e14c6eac18d88b0e9ccdecf77cdf0abcda4aed4d846aae5309d2955644fddee0fb3c084949c290145ecf931a1b06095750e8d7e6a1dd975bc0e1b0b747dcc3da33a1a4fd01817db7c8f0a30193bce34ce9efbb0fa25617aa41f63d5c9ce98fb2b04802f8657063ba6810997bf6b397a69b028fa23888b44080051ce93b55be98ea6915c33c898942ef73c8941724f21c56f5ca2402801c328d40c82cd59040ae20efaed582889e19f034bc99ef7bbed3603017e6e98a09b9372d4d38cb05ae0cd0b5247d111e2931fa04ee02893559a1561801f60a6e23a7ff1270ab483988a4a54320a9808803df45a3466aa961d911b0c740225030c39c739c6ea8a52642f20bfc3a5bbdc893b131f43b286eeb9dfc44a8ec0fd44b7981a2ee35303a4d1c17bfe55bfb4035826698dce6ae643a49229798bdfa3724962ff86bfc6314121ecd3bdd4d85108dec61be54465a7796bf63274f4c24fb501e49c84d572a14f93950d425a91d400b447944de43f7b3efe9c2a3c3172c28e6f071dc5cc08df138ab719e5dff49009306a213b4ed3f68eec56a57ecf21c2f7baf9ca47c4ec2bf5ac2f6e761b0f859d2021513d026f49b4e9a90845765f4080329f4211429e2b940adf0c95ade15d62aaaac0005aa5bcc7e232fa229630c5cb11237fbd3961d75d6e409884a13508b4d3ae7cd0a7e7b1e52b5d0bf9b42c5801edbb7430d2e7819151cdc31645f652e9ab2786434a8f499f5bc821651cadc6e7b886fa4b898e6508c838726f1908b56c639c689b5c1f15b0eff603813a360223d41e172627b7e18293dd2854b5d701bbd4f6b30ca34a755afac1da64f430a1a5f390d4e20d0cf6d73ac90bf85eb550d765ebb17b544c4091fb613abb1733d77fe6e5e4bea2488e582c0e50ebc1c60feb90b5f416f66eb93fa8ffc6a7644a11697fec793c47c251c3cb9090c0cda039d9d33688d477de27fa2a7ace69261535e617c440b413cc3de2b015ae8874fcb746bcd8214ba80109640f748f358fd069e8a6b3aa11cfed5b18b071d98b7fcaf95e60401abb467ad3267f34aff426e25e0978fc8388537541b5ef0d6c05e70c55e1e38dbfbffa70de3d7e88d0c594b48ef2843f995a17d63fa38029d473adedbea97bd726492cb222bba2dd9af28e7aaf98a7e38e90a510a3ae3b3a4a358bd33e8360c8794c8cd14dff13afea9d56dada0df49c307af72d9cd98a1b809e0aaf0d2be006b0189493fab0b7fe1399b85bf90770801994ce57f11152765f8f7bcb3730a54f73b228898b33eb5588dbca6438584e903bb4dc28afda2b7bbc9a80b653f0309ad1bda2ee3cbcbafd0484821d553bbe6fbb5d47182dbb9037bd29fbfb16e92eac1224f48e0a3c7fdb52e0fb378a264ed99dee548815931c295a6f2920da9a53c8eff8e5c67b476e55efa9ad42c1b3572a87dea7726f7f56edaaca04ab7f7e2bc93985f89c292b5ff853e265278d8781259e015d2505e91c8b1e7ea6f216399c443ff400d39d21d67a4c6aa473b8d0ccfa955faa031091fb3b623b28962f834723b4357857f6cf0b4633ff62e3d52c3ed4f84b340e639fccd7c52f94a9c486357adf7a0941cdf8a2ab809c4cd196c5b1da5139a7f99bc2e8296d2da26ec85da4d91b75b4e408e00755f79ac57dee0c4ebd759a6a0a0b1f1014aa3db3cc1f0d4f019cdfff5182aa9c06e0b0ca225b4680057cdec998c67686c5f6623ad3f5bb266fea0faa87a9291ccbf3d45cd27bfccf126ab56d83e7364bcfc713a60b231bdb43f0945c0ec8be93e3d1bfb93a8a5987cd0437bb368946d7ff15bd49e61b94eae0fffebdce6c9af92457d1e0399297436c7e4c51367fda400d81c8de1c6d4a60a3714703678a155eacc0ae4f10dabdec46550fe15bec4d93b006cb349ed11810e6b5dbd97e2a8fc5aa2f891e86a0a77fcaac07aaba0ce6dd784c1a0bb7c5b9b9fd94f2bc124ce2279d9c5ae3229b48c6ced5f75048e44d22761f2e8a0a7a119dd8247eecc9b43ea0821cfca852076f413269c0865792431a528b836d04004fd5c709026cb7091fcefab101188dda14aa807b940d9c2b0cc51da4eb5fd74d3b4c301e1172c3497d749a5fafbe33db653b4003b9669b98fc9f7b5a6e9f9402204c42c5923ef9b6d38cd3ab9277de6471ab17f7cdbc0be9f33a4f7d52750c2abaf3588aa626f7f34344dc8498da9e22da03a53e4616eb8afdd1b64d52ccf622c043569173db5c73feb592ed7d006943bb23fe91c5d018fba73fb91be9ce29aa2d85dc3f3bd55da35ba38359b30df652294298c45d4e49fd817c707534349e05cc71b850a5a4d4e56cde315ab141983e46de58fff218c2fc696d451b424cfa5c378d06c3d5caee6abac86ee1c4a142db460c3237ce82fc5ab07a02be4592d7d54e93f668e1177d279e8a4e51ed6742313f24ce133d11cf57d6f6932a46aadc140f8e89fa84d5da95ceb846b9f0bcf69dff169e6ac50a0e8631a7e2c8021e8691803e57b5b79e6e7ca051971520ec8ea051ddc2dc309d4a18c7e737115e5e97ecb47247f6f71e3fb685fa1bff4874d153abbf6f37543fec6d7a083b3fbe6ccf59484aeeb4e8cec014a6c8c48baa2548f2f1d3ad0bfef6c393bece7ca5948823841efe1492edd498d78e8a1078d524588231fb8913fb715ea47b5ab940a39a298a3c0a4296822cbbe4f7a5d341556dc7354838f005a2db24ae26795ff938cdafe29fea50a00259a2d75b152ef36a5326b7497ee315a430b73cfd6acf3a1663735aec2cc20e114dac8b205baa8bdccc337f541940fd12", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x90, 0x0, 0x4, {0x1, 0x2, 0x8, 0x0, 0x200, 0x808001, {0xffffffffffffffff, 0xfff, 0xfffffffffffff7ec, 0xfff, 0x9d81, 0x4, 0x0, 0xff, 0x2, 0x2000, 0x5, r6, r7, 0x9, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x40000, 0x2, 0x13}, 0x18) getpid() r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m9.828077224s ago: executing program 7 (id=703): keyctl$KEYCTL_PKEY_QUERY(0x20, 0x0, 0x0, &(0x7f00000005c0)='\x00', 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f00000027c0)="3f2acf06ee1c45ed32b4f7c32cbaa3877802a6aed591a7fb61d009cbf2fee88c4d461355f294b592443b44e0ac80b90717b6e6a65af5f7c5d7956671d30c2606faf5a24298557c187b63ee3ddd864de0494c8ed970227c0e3d22ed6fef963d12c4a718bd233231d56c6ec974401cb358eb6d2672a73ff59fbfab6a33a5bd65a4c6bc6294457ba63f34c66e98905b8a68292629ba30194b30e162fda6a37208b581c182dfba3441334f333fe9d1a1efe48c731d8d51b750bebe1eb1f6f62037ef7b39dcc05f314dd186888ca7edd69a63e91321730999ad3d9a8f3077d2304c149ab2333853db7b3c436ce984ace1fc1feed8f04806b22941", 0xf8}, {&(0x7f00000028c0)="b6ef2111190fd1c704fbb705978058b59e0f30f9c489d538bb70f1ec4706e2ae84d52a4e86b69af23819c06453a5383122ddf24d82c7ca19e817ae11db15e04c61315e980229d520631889818341966973ca494531473466fbcb83a4c60b99187a693892dfc00360ace6b8fbec51478250c1066c98cfa2f9595d0b2d2788929306bff26cee516c40c0627425981fb4bfb4f0b01b99584f6d413c3991ad5673e72107588944eb5b929679deb86109e47b7806540a04be76df4ca67f12f4cbe2d1", 0xc0}, {&(0x7f0000003a80)="dda92d244aa4979e643bd36b6ad21c4fb69c2608ae5ec6463071f6ba26bdc1786aefa2cb744e4e939f11a8e9451d2b4cc83ccc07837a529acdb6aa8fd73c47765544405587f43ed28cce753a243c1d7f23411bb4b0244e7472414782ffae5057e9232e2ad15a27c84b49b4", 0x6b}, {&(0x7f0000003b00)="f958e8bdbeba4884f28faba887382bc9037706d6465b7650459b55d88ae0f93d069cf8c7d5057ee5eafe19179a0b91ccb4e042855c173a54171170d77b025c44340dc00ae167b2363e8db45cbd5b13744fa993badee3f8eced129e7163cd733f8778f984a538129bb6593afd2e852692c116b6158efb910697b8520c1145b1c4a75438d3917a3503b8f6edf683f6546b0e4466cfabd734027fd8557f639457124df6c4c9175496f2e48c3e23e63d9e108f81f47c59889df3d96d8564376452b7184ce19415cc86a4679ac48073a68fe99033024afe4fe73eaf93ce1de9ea79a8dd375be2b85ee2d9ab8e914bed26301b5c546f9f7af875", 0xf7}, {&(0x7f0000003c00)="45f9cad32aec85ebbad236509edaf4d506e5d9e5e8f028456c836ff1f39c5f6dccee1570bcd8aa0097f5af37a37d036fddb6844a96e95f17b608989c0a799def969a6f50a9a1fdada5cc5b95d3ab45045876b92987326f829476a5d49fcbf6a3e05994ee7df1679d2c5a85f8cb0f9affedb352af2ea49e1f7b2259c69c2a2437dd7b9397f9f0dc0648fe4af5f65d893c7f5ea629bf1afc3a33f8d6f2", 0x9c}, {&(0x7f0000003cc0)="b3e33f3d054715727bdc3672a530910eac00de12f79b1604b9e515355815f86709255dd8a6f28ec1ab1b4dcbc7cad92d6b1bdcd81e85590fa290ccefa763ff831ffbcd65ef1e963d9b37c1c0dd9b8ebdc28899ffbb1abc14bbe0890602027a7710ca64b658f94c6b13f195a729563c55850e3cb3f090ec65efda5d9daa9eec6e93e6aece1e02143df082398bf36c46362d23767eecad044e0044d74a362be150903d52f1a987b4698359d2bc49c059ee1030de1c6efffaf8e6d0d3f6", 0xbc}, {&(0x7f00000006c0)}, {&(0x7f0000003d80)="0de7d720808a57405231ee58915aa24c6892c0b781686d7372b6fb4811abf0d878934bed354196e65028d8ab86293e4f78862464aed11f8ca41684490e6ef914fa60026ef328bd441560882865a9", 0x4e}], 0x8, &(0x7f0000003fc0)=[@rights={{0x1c, 0x1, 0x1, [r3, r4, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, r3, r0, r3, r4, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x24, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, r4, r1]}}], 0xb8, 0x20000000}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000007400)=[{&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000007380)="3f68cff156359852fa8475be897b8e5eadbbe3fbfcd953815bbe3139b1b89309c80631cedfaa37dda1d106b882da4a80faee982f95ceb5353ad1c8aea907b2a4fbcc286d7cb5e98ad1b7dfc6671083ea04580febb452f06603", 0x59}, {&(0x7f0000006280)="28edd3959f4952cff1ed4b5b790e1a30db281c4be31dd2f0bfaaeacac554ebd1ccc3e9d5b365e47083700f388b29e176f2ac223f8efed1", 0x37}], 0x3, &(0x7f0000007440)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38}}, {{&(0x7f0000007480)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000007680)=[{&(0x7f0000007500)="baa875221ba43c39b3c5dc7363d93c616a7d7d09c5316dcf25578329f2968a753c8af557d274fc3d185e5759c1c734cd8aa1d7fb732fcc8ab4402b6aa943359b7bb97e6d80a93e4db4d90d635802fb2e8521612ddc3578e9bddf3124ac7f122577a076d215d4a5c26acb448fd8d0291608c0048d96a8da35977dfaa936a4714ffeabde622a67f1f8c011dcf22bd76932737fae155d3f72c7b2f3f40d40564178a9ec5b5c47358cd46ba2fef920", 0xad}, {&(0x7f00000075c0)="d19737ad0ab47fb301c99a91216c586d573fd40aba6caa2d607512955fb85e9afa407e0ee562bdd1ed3aad27398a56dfa48efc9dac51cf3a6b98b75dfc2269a461027b94fe2062099d22ca60277b2ffe647a45616b5f2058b629d52d267b7b48c5abeea0e9b88930825cfc6061c26e51d2e87457211950a4c1cf1658febc1a1d8d64855c76d4fca391a43dfd82a9effd00ec0803e7f7da239a27928245d0bec894cdfd5bb7a2bd074561c423214e98d3ef", 0xb1}], 0x2, &(0x7f0000003e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r3, r4]}}], 0xe8, 0x4}}], 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000600)=""/172, 0xac}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000880)=""/36, 0x24}, {&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/147, 0x93}], 0xa, &(0x7f0000000a80)}, 0x5f}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000ac0)=""/151, 0x97}, {&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/58, 0x3a}, {&(0x7f0000001c40)=""/107, 0x6b}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/32, 0x20}], 0x7, &(0x7f0000001d80)=""/246, 0xf6}, 0xffff}, {{&(0x7f0000001e80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001f00)=""/93, 0x5d}], 0x1}, 0x1}, {{&(0x7f0000001fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002040)=""/108, 0x6c}, {&(0x7f00000020c0)=""/93, 0x5d}, {&(0x7f0000002140)=""/59, 0x3b}, {&(0x7f0000002180)=""/130, 0x82}, {&(0x7f0000002240)=""/55, 0x37}], 0x5, &(0x7f0000002300)=""/186, 0xba}, 0x4}, {{&(0x7f00000023c0)=@pppol2tpv3, 0x80, &(0x7f0000002580)=[{&(0x7f0000002440)=""/148, 0x94}, {&(0x7f0000002500)=""/92, 0x5c}], 0x2, &(0x7f00000025c0)=""/175, 0xaf}, 0x4}], 0x5, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc048aeca, &(0x7f0000000200)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000240)={0xb, 0x3, "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"}) r12 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, 0xd, 0x6, 0x3}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r12) 2m9.275759973s ago: executing program 7 (id=705): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x11, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff7539000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x5bed, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYBLOB=',wfd', @ANYRESHEX=r3]) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x129302, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000380)=0x20) write$binfmt_elf32(r5, 0x0, 0x4cd) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000600)={0x300}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 2m8.864397529s ago: executing program 7 (id=707): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000400000000000100000000000000feffffffffffffff7a0000000000000000c03b00000700000000000000000000ff7f00000000000008000000000000000101030000000000"], 0xb8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010788507000000000000006b000000003f446a374861ba4d179f3475cf54c880d9d26c251d02a612ef2b5fa902326b8a94aca023be72aa8d24bc446df39ce227c16f350e746e303d9fa0ede8fbd846a94dda06730f795dde47673b1d4cbda81bdea74febd184d8c28d556fbc6eee7b42526f1b8639eb83afeddec5591a41ca56f681921f32981fe45f8d51fcf84c44d106bb8597ae34eec3ad91", @ANYRES32, @ANYRES8], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) 2m8.564275154s ago: executing program 7 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0xfffff931, 0x10, 0x10040, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, @void, @value, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000000000000000000031f975bc520089"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002000000000000000000000005a447967", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f00000005c0)=ANY=[], 0x100}], 0x2}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x7, 0x0, "46a2c64241a4671f64040600e5b90274b83aaa73e76ced9744782e5968a46df120e600eff88e02486e0f978cba33871ce533968643bca6b0010bc6a4884b4db18f7f51184b143123b85d7cf7b362f6e7"}, 0xd8) 2m7.601099733s ago: executing program 7 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x3, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xa38a}], 0x1, &(0x7f00000002c0)={r9, r10+10000000}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) 1m57.03756458s ago: executing program 36 (id=698): madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0xfffffffffffffeac) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r1, &(0x7f0000000280)={0x7, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xeb, 0x8}, {0x4b38, 0x1, 0x4, 0x5}}}}, 0x15) sync() syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b000100000000090400"], 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sync() sync() r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',\x00']) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000010000100000000020000040000000000", @ANYRES32=0x0, @ANYBLOB="000000010003000008000a00", @ANYRES32=0x0, @ANYBLOB="050027000000000008000500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31", @ANYRES32=0x0], 0x15c}}, 0x0) 1m51.83702821s ago: executing program 37 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x3, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xa38a}], 0x1, &(0x7f00000002c0)={r9, r10+10000000}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) 14.485332978s ago: executing program 9 (id=1079): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e03fab2140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x2) openat(0xffffffffffffff9c, 0x0, 0x14b042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000044000e3031070000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000100)=""/24, 0x30}, {0x0, 0x2}], 0x2, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) poll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x50}, {r4, 0x100}], 0x2, 0x5) ioctl$TUNSETGROUP(r7, 0x400454ce, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x5c) 12.960268259s ago: executing program 6 (id=1084): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x80000000, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = getpid() prlimit64(r1, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x141442, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x0, 0x0, 0x2000000000903, 0x1, 0x0, 0xfffd}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80044d76, &(0x7f0000000080)) 11.536917449s ago: executing program 9 (id=1087): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0x3, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e801400018008000100ac1414aa08000200000000000c000280050001"], 0x90}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x20008885, &(0x7f0000000100)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) 10.087351808s ago: executing program 9 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x10008, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x44000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x8dff) 8.271128291s ago: executing program 1 (id=1094): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x0) (async) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r1, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r2) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0xf, 0x4, "c242fdac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00}}}], 0x20}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) write$binfmt_elf64(r5, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) (async) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0601000000000040120c300000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, &(0x7f0000000180)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="20f7b190d6ebe84b6442bc06a1c40e92f235740a9576264235b972f0f6d004ac5b25c0bff03277729ede2697df"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x20, 0xc, 0xc3, {0xc3, 0x8, "9a88e617916c877e4fda921d2289c1875d808a45cd0be1e4431a08f14e73dddb5a8f07bc34e32a272f4c7a9f9516fb6944a6fbc8b29123e972355bdcafe22ccb7da19453cd33625a5cedfdfd41719a46c9f4f08df5ead9b4280fcb3bf8ca6d2745e6df20a6672723c1e5b390f140ce81b14c13bb7e5020672c27b90713aa283e127c58cff83dcd353af7e33e95303856a7c177614eda4dba0e5fface68ac7c65881f148fc94ba7283f5e17b40496caa210823e0ccb30a0df0dc63cfdac4c8e78d1"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x31, 0xbc, "de1b318b332ad1664cd0f2382fcdb605f900df67086b33ed1e1864099ece30277a3dc588e821d55ca313756e87c361da7ee26b5fd8896c0db95a3b4d861bc9789ca1d325e8311a045b588979cb71e2059812db1e9047d3a61d7c64a8ea36737514605ffb8553b7061ca2ddf473c8dcec1aa14a39bd48358147bc347a7060468b0ff987f78aa0b30b07d614e947f299aa32e9db47ee24df436cd46b65f1c8fc41e904a6e003419d2a895c18e1c52dd71c022aea26b00fbb7b3dad25dd"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xe, 0xf, 0x9, 0x4, 0xffff, 0x5, 0x80, 0x6c5, 0x855, 0xb, 0x400, 0x64}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) 8.233127436s ago: executing program 9 (id=1095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = dup3(r3, r2, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) unshare(0x28040680) unshare(0x2a020480) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000480)={[{0x2, 0x8000, 0x0, 0xfc, 0x0, 0xb, 0x26, 0x41, 0x0, 0x2, 0x0, 0x5, 0x400001}, {0x8200, 0x0, 0xff, 0xfd, 0x9, 0x0, 0x81, 0x0, 0x20, 0x2, 0xff, 0x4, 0x5}, {0xa, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0x1, 0x0, 0x0, 0xe0ee}], 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.80786544s ago: executing program 1 (id=1097): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) timer_create(0x0, &(0x7f0000000280)={0x0, 0x2b, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1aaeb49d3b2fc0cc, &(0x7f0000000540)={{0x0, 0x989680}}, &(0x7f0000000580)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1, 0x5, 0x3c) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xb, @sliced={0x9, [0x7f, 0xee3, 0x5d0, 0x5, 0x10, 0x2b, 0xffff, 0x1e, 0x8, 0x6, 0x288b, 0x3, 0x0, 0x1, 0x6, 0xff, 0x7, 0x79, 0x3b, 0x8000, 0x3, 0x101, 0x6, 0x3, 0xc, 0x8, 0x7, 0x9, 0xc, 0x1, 0x6, 0x5, 0x415, 0x9, 0x7, 0xc7c1, 0x3, 0x1000, 0x1, 0x3, 0x8, 0x3, 0x0, 0x0, 0x4, 0xc, 0x4, 0xfff5], 0x800}}) syz_clone3(&(0x7f0000000480)={0x80114800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0, {0x32}, &(0x7f0000000180)=""/167, 0xa7, &(0x7f00000003c0)=""/164, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) kcmp(0x0, r2, 0x2, r0, r0) 7.003758718s ago: executing program 1 (id=1098): socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000080)=""/97, 0x61}, &(0x7f0000000100), 0x20}, 0x20) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x36]}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000032680)={0x2020}, 0x8a0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r1, &(0x7f0000000bc0)=""/102370, 0x18fe2, 0x30b) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.975231979s ago: executing program 2 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000097000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="cbe86ec4baaccef02d8fb9a9f40f4e18af29de7b993b68c4c58a58330c425f3119f00bab91a193415c868022a58625b3a97333ec6b00d7ef48333b7d2c08000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x548bbffe, @void, @value}, 0x94) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x33, 0x2, 0x0, "bc3e098e0000f4ba89591da86b97000000002b00030400"}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), 0x4) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2, 0x3, 0xa, 0x1a, 0x3, 0x64, 0x2, 0x106, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4007) epoll_create(0x4) syz_open_dev$MSR(0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/../file0\x00', r8, &(0x7f0000000100)='./file0\x00') openat(r8, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) 6.896176844s ago: executing program 8 (id=1100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xf7b}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="090bea78fda66016", 0x8}], 0x1}}], 0x1, 0x40000014) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001900)=ANY=[], 0x1000f) 6.882187069s ago: executing program 8 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffe4c, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1027}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_BUCKETS_LOG={0x5a00, 0x8, 0x1c}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x5}]}}]}, 0xa2}}, 0x0) 6.801151389s ago: executing program 6 (id=1102): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff6a, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r3 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r4 = dup(r3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002680)={r4, 0x20, &(0x7f0000002640)={&(0x7f0000002480)=""/225, 0xe1, 0x0, &(0x7f0000002580)=""/183, 0xb7}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a00)=@bpf_tracing={0x1a, 0x23, &(0x7f0000002c40)=ANY=[@ANYBLOB="180000000800000000000000090000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003a850000850000000600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001831000002000000000000000000000085000000d200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000a200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009752fffff0ffffff851000000500000067340600ffffffff186400000900000000000000ff070000180001000080000000000000980b00009500000000000000422d7dbb6d725048f769f0ef0a9cbb1b3a69763a077824866a14d95520a2ac138375c33f08b160a537902e7c751ad830fa7931565323d2b88dd095073254120d"], &(0x7f0000002800)='GPL\x00', 0x5ab, 0x88, &(0x7f0000002840)=""/136, 0x41000, 0x26, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000002900)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002940)={0x5, 0xb, 0x4, 0x5}, 0x10, 0x20ba8, r1, 0x3, &(0x7f0000002980)=[0x1, r4, r3, r4, r4, r4, r4, r4], &(0x7f00000029c0)=[{0x4, 0x4, 0xb, 0x5}, {0x3, 0x2, 0x8, 0x9}, {0x3, 0x5, 0x2, 0x4}], 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r12, {0xd, 0x9}, {0x6}, {0x0, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x9, 0xc, &(0x7f00000001c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000240)='syzkaller\x00', 0xb60, 0xa5, &(0x7f0000000280)=""/165, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock=0x2, r4, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x9, 0x400}, 0x10, r5, r6, 0x7, &(0x7f0000002ac0)=[r4], &(0x7f0000002b00)=[{0x3, 0x2, 0x0, 0x2}, {0x5, 0x5, 0x2, 0xa}, {0x1, 0x1, 0xc}, {0x5, 0x4, 0x4, 0x3}, {0x0, 0x5, 0xe, 0x8}, {0x2, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x9}], 0x10, 0xe, @void, @value}, 0x94) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r13}}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x40}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c00010000000000000000000400008008001a8004000480"], 0x1c}], 0x1, 0x0, 0x0, 0x24000801}, 0x0) 6.707826834s ago: executing program 8 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000bc0)={0x3, 0x5, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000500), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000040)={0x3, 0x1, 0x2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000840)={0x0, 0x7, 0xea2, 0x4, 0x2, 0x101}, &(0x7f0000000880)=0x14) sendmmsg$inet_sctp(r7, &(0x7f0000000940)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000380)="7c8ed0ea48d8d3be373f6e81d39d73b86a2d7eab08ee5b3ff680251a5907a2d43865ef0d78883ec4bbc3d1bf1543353ed8c0e62e1650a9e72128f4fa279bf6eb9b46eb33ff8a0f6b1f32d9baf9276095a7567b1ae618727469f49517b351f1b4d780733ae15674cf8510f5fdea68390e139342d15561d40cc65f2735eb35c45d8c", 0x81}, {&(0x7f0000000440)="d3ba9daf3a0456b434d0b628e3c8f02d4aace90ca7b4d1e2138c1a5dac10898ea2fcf7702f34be2ad96db4d79ae8f5aa2e321d7ad42e601ea1ab667bf91b3a690ca8c69a3bcc1057ce179b4313438b35329bfd55804c25ac4dbbd7242866b12ebadd5ae3e21d85fd11fe072ea2eac4b034b3bcb00a2f942da517008bee8d38ce6e6d36cdfdff6b797d1b18f535c4d28b422f9f1c", 0x94}, {&(0x7f0000000500)="6a564f91d07291ac0ddf65a2162f7694ed60b2ec1eaabfe8a44f8ff88c043b3b5577a235f83c1fcc32e6049a74bf4c3f93d7de32d3fe08da90adfbbb1e5c9d14011dfc7b8f5a4d0d7be1d68dc5c03d7f130a3a2527705aacbd9b54d69a99a983fab207fef77ffdbf2db4ac853a8992b31cf7d7c4d3f492770b85a6dfdcf2eb789958e9111653f553a2a46faa7a849110c3586ecf25c4b2103a27498f8a0a733e78618487c804db729776649a7f991e3481c8d5811c72c0f559700de9113016370daf3a448277fe47922b438c44dfdd48f7f5e5c9755f3778de4857bc92f3f2efda58385422a75cc5a55f213803", 0xed}, {&(0x7f00000000c0)="054027b92c9f9829fd2e5ed057821549380a136e53241c0f8f4c5ea533c3ee87f31e13", 0x23}, {&(0x7f0000000600)="f5d97fb55b9630e195c0d2ac1be92bb654aa0ce27ea1aafb42432685712a9d483144f549bd1c93fb1813002a2560ae61cff3236880b9f35dcb1ee89f91b4e6bcd9f8166a3d158446e557d91bac0e5e8c5f682546d919915e6a68993ee845d7b7662bd67d5e93a6627e8ddab8eec2601ae0c676969511fe0ecca572c1b97fb86dce103aba17e4146f1aa8c4144923a7a637ecf1909b18149bff7129e19a929a5b46adc8f84b7061dec05420b78d330d792255c9140ebc2315", 0xb8}, {&(0x7f00000001c0)="dd6663274a672c923e144f34f8b0c05b8410427586e9c51bda40c8ecc7b21dc9480c0fef0a9d07f3d87c9b0c32eb49c4b0a6a2b248d90136a6f5f80c23926c1750a5578196b052412b4ab3267fe99bd4aff637de6b6a23945c0f3f784d6692d2d1b4498c157b04debf9f2e", 0x6b}, {&(0x7f00000006c0)="70e93d86fd192a80ffb262808a1a936691901b431b9573335a3552089cda294a3575373161267768e6d87b0d5345fadad3b88b07cbb91d7403b7b43f661dcd99bfe03c73e182f6839811db18d252f3a21265b9eac1c169f470737251b36d9c23cdc36e3c48d9057a4af21148dca451ee2db2fe3a70930152f588466735b1be1ffa2430e09212981b7362747e85faf491", 0x90}], 0x7, 0x0, 0x0, 0x8880}, {&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, 0x4}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000280)="7e4ecfd414cb7d357e5872fc352b676d129a32c314733d337243900628225aa01c529428cf80de427d85b7", 0x2b}], 0x1, &(0x7f00000008c0)=[@authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0xe48, 0x800b, 0x6, 0x1, 0xaac, 0x6, 0x8, r8}}], 0x48, 0x20000000}], 0x2, 0x4000040) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={r9, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r9, 0xff}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f00000009c0)={r9, 0x9, 0x5}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x40010) 6.672188491s ago: executing program 9 (id=1104): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x85) pipe2$watch_queue(&(0x7f0000000000), 0x80) getresuid(0x0, 0x0, &(0x7f0000000300)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x22020400) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='system.posix_acl_access\x00', &(0x7f0000001780)={{}, {0x1, 0x8}, [], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x7}}, 0x24, 0x2) 5.73017642s ago: executing program 8 (id=1105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xc, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x29, 0x1f, 0x0, 0xff0f) creat(0x0, 0x188) chdir(&(0x7f00000003c0)='./bus\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x64}}, 0x400080c5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 5.653047426s ago: executing program 6 (id=1106): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x1, r4}) 4.593947218s ago: executing program 9 (id=1107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000090601020009a14cc96912d1b300ffff180007800c00018008000140e000000208000a40000000020900020073797a31000000000500010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) modify_ldt$write(0x1, &(0x7f0000000240)={0x0, 0x1000, 0x1000}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x0, 0x20001000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x46) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}}}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x8000000010000001, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000400)={@local, @local, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x400000000009) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 4.520293488s ago: executing program 2 (id=1108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000004000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x27) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) 4.233048794s ago: executing program 6 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xd35c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4.227662717s ago: executing program 8 (id=1110): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001d619008c0071215090400000116f50d000905820349613ab904964bc01bf228789bad451e1c4499101e279e000a8e74ff80386c42336662432071754927639f0f996e91d3e9048347c98b9f5ced660ece312346901187037c23ca09d2ee222c3980b10c73f754039f5fd2ddaa3c805f15"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={r7, 0x29f7, 0x30, 0x7, 0x8001}, &(0x7f0000000200)=0x18) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="868a9a14efe4", 0x6) 3.490294408s ago: executing program 2 (id=1111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/240, 0xf0}], 0x1, 0x0, 0xeffd}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000340)=""/32, 0x20}], 0x1}}], 0x2, 0x100, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.240212024s ago: executing program 2 (id=1112): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x50, 0xffffffffffffffff, 0xdd6da000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x26, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) (async) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) socketpair(0x18, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendfile(r3, r3, &(0x7f00000001c0)=0x3, 0x7c) (async) sendfile(r3, r3, &(0x7f00000001c0)=0x3, 0x7c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) openat$cgroup_procs(r6, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) geteuid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$SG_IO(r0, 0x2285, 0x0) 2.349124681s ago: executing program 6 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x380, 0x3a8, 0x3a8, 0x380, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x700, {}, [@common=@eui64={{0x28}}, @common=@unspec=@connlimit={{0x40}, {[0xff, 0xff, 0xff000000, 0xffffffff], 0x2, 0x2, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00', {0x18000}}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x8003, [0x7fffffff, 0xad1], 0x10, 0x20, 0x8, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}], 0xf}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x4c7, 0x3, 'snmp\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a000a4fbe22e00d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7b62edac751478af9c62f", 0x40, 0xfffffffffffffffc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf25120000000c00018008000100", @ANYRES32=r10, @ANYBLOB="ed4932242128e35583bb381b126e9823c26c6b6a1aff400c159ee181af937b025ce2667594323732faf093f3bc0147db0ed3edda3cc04f840110a254c75250ac4e199eb2edaadb36ce024ed4149ad14c3fd3af20030000004cdb8ed6a8b800"/109], 0x20}}, 0x4804) 2.222704921s ago: executing program 2 (id=1114): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) syz_usb_connect(0x7, 0x7a4, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xe0, 0x27, 0x46, 0x0, 0x5c6, 0x9069, 0xac93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x792, 0x3, 0xa, 0x9, 0x80, 0x6, [{{0x9, 0x4, 0x7, 0xe, 0x10, 0xbd, 0xf7, 0x86, 0xf9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, ';'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x1ff, 0x4, 0x90}, [@mdlm={0x15, 0x24, 0x12, 0x800}]}], [{{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0x7, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x79, 0x4, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0xf1, 0x4}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x2, 0xb, 0x4}}, {{0x9, 0x5, 0x8, 0x11, 0x20, 0x2, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x80}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x7}}, {{0x9, 0x5, 0x0, 0x1c, 0x400, 0x7f, 0xc, 0x8, [@generic={0x102, 0xc, "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"}, @generic={0x98, 0x3, "e41abf37e81a28bef7621c089b7895562bbddce7fe4c9b1e7f2ec3bda883ba0d6ef90949b8fb09e85d2737923b29ecd462e944e406140e9bb2a69907ea424e356ebee1330f42decdc491107511dbb07662b4ca954f6375a42b52292de67932d70b1c02f164e044c6a4d2fc94c4ba0da84f72138bea2256dd2c182672f9b73f93f76e521d56d6a029001c32412afb67168e60ea2361af"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x8, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x0, 0x8}, @generic={0x1c, 0x10, "61df88b7ef142c3f29d280b266f99d64c03648ca4c7fdb00f476"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x4, 0x0, 0xbf, [@generic={0x74, 0x21, "672bc3a95f8e178dd35e99a5aff8e8572601bf055d1ed50d7e63ee90fa663dde754e833dd4f1403f96352c549a5620efe8359d4506e487d681723f74cff9031524901432f99d46e54e93dec651c21a1f4b263bc36028aad6f6129a0b052bb56b15d3c55f1536a31f239e860034fa579ae9c6"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xfc, 0x3, 0x40, [@generic={0xbb, 0xd, "d70be3dddfd2bac1a2497dc4508f70fe2f44f493c6fb622a926fb44e6255b72fe21b845b28a6d758715a92b5162509d67b1eee1300c9efc4e376f89e35e7d294e1d97496a6deb112e82f61b9eb2f0c23c2a2cc792fad588efe0854ee1e6d1f919048171705dec9afabd1ef7471f5d06880ea65623f18cdc2cec5dee6c743a8d6c4bb79c163a75a045fc279555b88dcb1f47caf8aaf7995009b1ed13e4b42ea4a884f30363cf77e5781245f8a1968cdccbb87874d10819f9d1d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xfffe}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xa, 0xfb, 0x2c}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xf, 0xe1, 0x42, [@generic={0x30, 0x1, "4c4b2e042fd3ea84f47bc774322ce70c9ac01eac937ef0eff715d4003f7dbce25b09b8b46049a9148cd4114aa9e4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0xd, 0x1}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x20, 0x7f, 0x7, [@generic={0x1c, 0x6, "d97a8e7f41a042812bd7832b04df1f8e08f99d649bd14724dc55"}]}}]}}, {{0x9, 0x4, 0x5e, 0x5, 0x4, 0x6b, 0x71, 0x7, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0x6, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xe8d}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xe, 0x0, 0x6, [@generic={0xb2, 0x0, "2c4362325fc1ae76a7083eea0c511bb82bc88fcef5c683f98f43aa042944c065dab76001c98fe82028149f66fa3360e16334aae5574768f362de4812328a7ee15e339eb54d2d742a199d09059f908d486a9fe6f74f03b06f37fda9a308262dafc8fd3092fa3a40b539b58ae894d50089b85686b3e4ba35f1b53e30ce92fb3a506f847d76e20cb5700faad3cfde4bd9447e4324163b2061bf56bfe5b89324aed74e778400a8ddc8854a19ba6fcebf6520"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x9, 0x65, 0x8, [@generic={0x6, 0x9, "a7aabde8"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x80, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6c81}]}}]}}, {{0x9, 0x4, 0x26, 0x7, 0x5, 0x68, 0x35, 0x56, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0x64, 0x81}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf, 0x8, 0x8, [@generic={0xba, 0x21, "30002abc147be19b49d6031932d5a92c068a3e6f4c4edd96592738ddbf8b20414521f47cb3ff4001524e295ae85750f391ede42e067032ea6698f4faf0cea67fe0eeb8fbaa5c1591141c591e188e852fd752692c5d27627d8f465fa20cdf7a2a8c2e7d86c1b7c2358c75e26df87f4aaa7a797449f3f910cbc8dfc8f01afce8b2dfb4c30a0dfb65209d498d431419d94f60d7279c85b1d478b13ae448bf280432bf67879cf4b5067fcd2993412a37b4a90c0056d3a0467d61"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0xcd, 0x0, 0x7f}}, {{0x9, 0x5, 0x1, 0x2, 0x228, 0x8, 0x40, 0x10, [@generic={0xba, 0x10, "ef4e05e749cf6624ef745d45d0f4bb5a619ac80c0b4e9c71faca303bcaf8dc860a33b63adf4f27930d4048aba13846795e98c788f03a90ed54341ffbe8962bee353083e0356ad64dd0abe5cee89ad03ed94e7f3a6d0721fb279778d1020cbc42aec2508ad45ffd5cd29afc4079b18b1d8e593ea06a6032086ea1d15f424de071cee38133cb992491ca721c3c4a4f8e80cb34a37aabed23a567d835fe87fca978bc165d83bf0e4ec5d0aa00db1fb9f63b08aaad4fffc7eb57"}]}}, {{0x9, 0x5, 0x5, 0x1f, 0x40, 0x2, 0x8, 0x4, [@generic={0xd9, 0x1b, "1ba2cc1d5b235c08b230afe5f17d10bda8ee1b108adf80b5478eb45779b66ef74ce9eaad0cfc344c2269043d30f55db40f2dad77503c482545ad98cad1aaace4f728af76d5befb21619a46b5eab17b1cef2fa0ae19f1ebf691d4f465b4e05f27eac8b2462fa5ebb40213827b86c4ac776d4a052ed2f93ae97ccdcf0496abc9dbb15b129c4e8fa20b7474df4dcf8e4f8e3878a08c37f73647d13f756262218495ceeee0043059a46ea60f50647acc141981cdca56c445e79eb6583640e9b13c95107c92df8d500127eeba525527c97411de5156d33c6bab"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xfe, 0x7, 0xa5, 0x8, 0x9}, 0x31, &(0x7f0000000880)={0x5, 0xf, 0x31, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x9, 0xda1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0x1fae}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x0, 0x88, 0x440}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x6, 0x4, 0x1}]}, 0x1, [{0xf9, &(0x7f00000008c0)=@string={0xf9, 0x3, "3ce36d979c75ce23257c01c35598cdf7d2667ad4aeecca29e247f58e8bd182ee104119459c58d102294c78a8c01549af9967aa78d3593edc1fb648f9f3bf88fb7c7f8022b516894c1c2bc4a9798991aa25b1877e92b5c096dfba319f19132279cb54f49eaa1dbe677d4d15b00f4aabcb83eb7d1be637db817999c91ca5c1025bb3da9dd6aa1128a9d26d60fbed90d82bc10bce665dcfbd49a8b1648cb7f00f6d17a8195c51edf7b168ebf2ef2bc26f6e3f664306cc37b6c7a7c72c8bb9d32b201f279801d29fd1f9527a7fe6a83d2676881f5d1f60a7602931469a3753931d7a936d010d32f44b7083af19db0d84e488714a1fafcb7d41"}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io'}, 0xb) (async) syz_usb_connect(0x7, 0x7a4, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xe0, 0x27, 0x46, 0x0, 0x5c6, 0x9069, 0xac93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x792, 0x3, 0xa, 0x9, 0x80, 0x6, [{{0x9, 0x4, 0x7, 0xe, 0x10, 0xbd, 0xf7, 0x86, 0xf9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, ';'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x1ff, 0x4, 0x90}, [@mdlm={0x15, 0x24, 0x12, 0x800}]}], [{{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0x7, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x79, 0x4, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0xf1, 0x4}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x2, 0xb, 0x4}}, {{0x9, 0x5, 0x8, 0x11, 0x20, 0x2, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x80}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x7}}, {{0x9, 0x5, 0x0, 0x1c, 0x400, 0x7f, 0xc, 0x8, [@generic={0x102, 0xc, "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"}, @generic={0x98, 0x3, "e41abf37e81a28bef7621c089b7895562bbddce7fe4c9b1e7f2ec3bda883ba0d6ef90949b8fb09e85d2737923b29ecd462e944e406140e9bb2a69907ea424e356ebee1330f42decdc491107511dbb07662b4ca954f6375a42b52292de67932d70b1c02f164e044c6a4d2fc94c4ba0da84f72138bea2256dd2c182672f9b73f93f76e521d56d6a029001c32412afb67168e60ea2361af"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x8, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x0, 0x8}, @generic={0x1c, 0x10, "61df88b7ef142c3f29d280b266f99d64c03648ca4c7fdb00f476"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x4, 0x0, 0xbf, [@generic={0x74, 0x21, "672bc3a95f8e178dd35e99a5aff8e8572601bf055d1ed50d7e63ee90fa663dde754e833dd4f1403f96352c549a5620efe8359d4506e487d681723f74cff9031524901432f99d46e54e93dec651c21a1f4b263bc36028aad6f6129a0b052bb56b15d3c55f1536a31f239e860034fa579ae9c6"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xfc, 0x3, 0x40, [@generic={0xbb, 0xd, "d70be3dddfd2bac1a2497dc4508f70fe2f44f493c6fb622a926fb44e6255b72fe21b845b28a6d758715a92b5162509d67b1eee1300c9efc4e376f89e35e7d294e1d97496a6deb112e82f61b9eb2f0c23c2a2cc792fad588efe0854ee1e6d1f919048171705dec9afabd1ef7471f5d06880ea65623f18cdc2cec5dee6c743a8d6c4bb79c163a75a045fc279555b88dcb1f47caf8aaf7995009b1ed13e4b42ea4a884f30363cf77e5781245f8a1968cdccbb87874d10819f9d1d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xfffe}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xa, 0xfb, 0x2c}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xf, 0xe1, 0x42, [@generic={0x30, 0x1, "4c4b2e042fd3ea84f47bc774322ce70c9ac01eac937ef0eff715d4003f7dbce25b09b8b46049a9148cd4114aa9e4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0xd, 0x1}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x20, 0x7f, 0x7, [@generic={0x1c, 0x6, "d97a8e7f41a042812bd7832b04df1f8e08f99d649bd14724dc55"}]}}]}}, {{0x9, 0x4, 0x5e, 0x5, 0x4, 0x6b, 0x71, 0x7, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0x6, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xe8d}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xe, 0x0, 0x6, [@generic={0xb2, 0x0, "2c4362325fc1ae76a7083eea0c511bb82bc88fcef5c683f98f43aa042944c065dab76001c98fe82028149f66fa3360e16334aae5574768f362de4812328a7ee15e339eb54d2d742a199d09059f908d486a9fe6f74f03b06f37fda9a308262dafc8fd3092fa3a40b539b58ae894d50089b85686b3e4ba35f1b53e30ce92fb3a506f847d76e20cb5700faad3cfde4bd9447e4324163b2061bf56bfe5b89324aed74e778400a8ddc8854a19ba6fcebf6520"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x9, 0x65, 0x8, [@generic={0x6, 0x9, "a7aabde8"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x80, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6c81}]}}]}}, {{0x9, 0x4, 0x26, 0x7, 0x5, 0x68, 0x35, 0x56, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0x64, 0x81}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf, 0x8, 0x8, [@generic={0xba, 0x21, "30002abc147be19b49d6031932d5a92c068a3e6f4c4edd96592738ddbf8b20414521f47cb3ff4001524e295ae85750f391ede42e067032ea6698f4faf0cea67fe0eeb8fbaa5c1591141c591e188e852fd752692c5d27627d8f465fa20cdf7a2a8c2e7d86c1b7c2358c75e26df87f4aaa7a797449f3f910cbc8dfc8f01afce8b2dfb4c30a0dfb65209d498d431419d94f60d7279c85b1d478b13ae448bf280432bf67879cf4b5067fcd2993412a37b4a90c0056d3a0467d61"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0xcd, 0x0, 0x7f}}, {{0x9, 0x5, 0x1, 0x2, 0x228, 0x8, 0x40, 0x10, [@generic={0xba, 0x10, "ef4e05e749cf6624ef745d45d0f4bb5a619ac80c0b4e9c71faca303bcaf8dc860a33b63adf4f27930d4048aba13846795e98c788f03a90ed54341ffbe8962bee353083e0356ad64dd0abe5cee89ad03ed94e7f3a6d0721fb279778d1020cbc42aec2508ad45ffd5cd29afc4079b18b1d8e593ea06a6032086ea1d15f424de071cee38133cb992491ca721c3c4a4f8e80cb34a37aabed23a567d835fe87fca978bc165d83bf0e4ec5d0aa00db1fb9f63b08aaad4fffc7eb57"}]}}, {{0x9, 0x5, 0x5, 0x1f, 0x40, 0x2, 0x8, 0x4, [@generic={0xd9, 0x1b, "1ba2cc1d5b235c08b230afe5f17d10bda8ee1b108adf80b5478eb45779b66ef74ce9eaad0cfc344c2269043d30f55db40f2dad77503c482545ad98cad1aaace4f728af76d5befb21619a46b5eab17b1cef2fa0ae19f1ebf691d4f465b4e05f27eac8b2462fa5ebb40213827b86c4ac776d4a052ed2f93ae97ccdcf0496abc9dbb15b129c4e8fa20b7474df4dcf8e4f8e3878a08c37f73647d13f756262218495ceeee0043059a46ea60f50647acc141981cdca56c445e79eb6583640e9b13c95107c92df8d500127eeba525527c97411de5156d33c6bab"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xfe, 0x7, 0xa5, 0x8, 0x9}, 0x31, &(0x7f0000000880)={0x5, 0xf, 0x31, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x9, 0xda1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0x1fae}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x0, 0x88, 0x440}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x6, 0x4, 0x1}]}, 0x1, [{0xf9, &(0x7f00000008c0)=@string={0xf9, 0x3, "3ce36d979c75ce23257c01c35598cdf7d2667ad4aeecca29e247f58e8bd182ee104119459c58d102294c78a8c01549af9967aa78d3593edc1fb648f9f3bf88fb7c7f8022b516894c1c2bc4a9798991aa25b1877e92b5c096dfba319f19132279cb54f49eaa1dbe677d4d15b00f4aabcb83eb7d1be637db817999c91ca5c1025bb3da9dd6aa1128a9d26d60fbed90d82bc10bce665dcfbd49a8b1648cb7f00f6d17a8195c51edf7b168ebf2ef2bc26f6e3f664306cc37b6c7a7c72c8bb9d32b201f279801d29fd1f9527a7fe6a83d2676881f5d1f60a7602931469a3753931d7a936d010d32f44b7083af19db0d84e488714a1fafcb7d41"}}]}) (async) 2.176336872s ago: executing program 1 (id=1115): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) getsockopt$sock_linger(r3, 0x1, 0xd, 0x0, &(0x7f0000000100)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 607.787172ms ago: executing program 1 (id=1116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xc, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x29, 0x1f, 0x0, 0xff0f) creat(0x0, 0x188) chdir(&(0x7f00000003c0)='./bus\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 435.966286ms ago: executing program 6 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) write$nbd(r4, &(0x7f0000000000)={0x67446698, 0x1, 0x4, 0x2, 0x3}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.119445ms ago: executing program 2 (id=1118): socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x4, 0x0, 0x1}}, 0x2e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x83000000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) 7.403168ms ago: executing program 1 (id=1119): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x85) pipe2$watch_queue(&(0x7f0000000000), 0x80) getresuid(0x0, 0x0, &(0x7f0000000300)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x22020400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='system.posix_acl_access\x00', &(0x7f0000001780)={{}, {0x1, 0x8}, [], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x7}}, 0x24, 0x2) 0s ago: executing program 8 (id=1120): ptrace(0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xfffffffffffffff8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f00000001c0)={0x0, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0xbea, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x20) kernel console output (not intermixed with test programs): 4 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389b8cde9 code=0x7ffc0000 [ 239.159955][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 239.303264][ T5848] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 239.313326][ T5959] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 239.343338][ T5870] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 239.454086][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 239.466342][ T5848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.483064][ T5848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.494069][ T5848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.504896][ T5959] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 239.513063][ T5959] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.524308][ T5870] usb 8-1: Using ep0 maxpacket: 32 [ 239.529502][ T5848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.553295][ T5959] usb 7-1: config 0 has no interface number 0 [ 239.559509][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.572307][ T5870] usb 8-1: config 0 has no interfaces? [ 239.577855][ T5959] usb 7-1: config 0 interface 120 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 239.592140][ T5870] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 239.601804][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.610866][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.619594][ T5959] usb 7-1: config 0 interface 120 has no altsetting 0 [ 239.633119][ T5959] usb 7-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 239.643370][ T5870] usb 8-1: config 0 descriptor?? [ 239.648455][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.656813][ T5959] usb 7-1: Product: syz [ 239.663567][ T5959] usb 7-1: Manufacturer: syz [ 239.668190][ T5959] usb 7-1: SerialNumber: syz [ 239.676060][ T5959] r8152-cfgselector 7-1: Unknown version 0x0000 [ 239.682647][ T5959] r8152-cfgselector 7-1: config 0 descriptor?? [ 239.690768][ T5959] hub 7-1:0.120: bad descriptor, ignoring hub [ 239.697141][ T5959] hub 7-1:0.120: probe with driver hub failed with error -5 [ 239.842170][ T5848] usb 5-1: GET_CAPABILITIES returned 0 [ 239.854671][ T5848] usbtmc 5-1:16.0: can't read capabilities [ 240.150576][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.160903][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.784215][ T9438] 9pnet_fd: p9_fd_create_tcp (9438): problem binding to privport [ 240.861919][ T9380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=9380 comm=syz.6.674 [ 240.878180][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.893430][ T9380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9380 comm=syz.6.674 [ 240.906328][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.934262][ T9395] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 240.954274][ T9380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9380 comm=syz.6.674 [ 240.972660][ T9395] ALSA: mixer_oss: invalid OSS volume '' [ 241.021830][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.051969][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.061039][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.070067][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.123691][ T5865] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 241.148902][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.158009][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.167083][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.176153][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.191781][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.200870][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.209945][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.219017][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.228091][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.237146][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.246207][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.578186][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 241.605273][ T5865] usb 5-1: USB disconnect, device number 20 [ 241.740876][ T9461] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 242.021151][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.048896][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.061024][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.074958][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.083392][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.126473][ T9468] netlink: 148 bytes leftover after parsing attributes in process `syz.2.685'. [ 242.159187][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.171715][ T9] usb 8-1: USB disconnect, device number 2 [ 242.415226][ T9462] chnl_net:caif_netlink_parms(): no params data found [ 242.435870][ T9482] FAULT_INJECTION: forcing a failure. [ 242.435870][ T9482] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 242.479467][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.2.689 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 242.479489][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 242.479498][ T9482] Call Trace: [ 242.479503][ T9482] [ 242.479509][ T9482] dump_stack_lvl+0x16c/0x1f0 [ 242.479533][ T9482] should_fail_ex+0x50a/0x650 [ 242.479559][ T9482] _copy_from_user+0x2e/0xd0 [ 242.479576][ T9482] copy_msghdr_from_user+0x99/0x160 [ 242.479598][ T9482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 242.479623][ T9482] ? __pfx___lock_acquire+0x10/0x10 [ 242.479652][ T9482] ___sys_recvmsg+0xdc/0x1a0 [ 242.479673][ T9482] ? __pfx____sys_recvmsg+0x10/0x10 [ 242.479694][ T9482] ? __pfx_lock_release+0x10/0x10 [ 242.479715][ T9482] ? trace_lock_acquire+0x14e/0x1f0 [ 242.479749][ T9482] do_recvmmsg+0x2f8/0x740 [ 242.479774][ T9482] ? __pfx_do_recvmmsg+0x10/0x10 [ 242.479798][ T9482] ? vfs_write+0x306/0x1150 [ 242.479826][ T9482] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 242.479853][ T9482] ? __fget_files+0x206/0x3a0 [ 242.479874][ T9482] __x64_sys_recvmmsg+0x239/0x290 [ 242.479898][ T9482] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 242.479926][ T9482] do_syscall_64+0xcd/0x250 [ 242.479946][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.479967][ T9482] RIP: 0033:0x7f13b198cde9 [ 242.479980][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.479995][ T9482] RSP: 002b:00007f13b2844038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 242.480010][ T9482] RAX: ffffffffffffffda RBX: 00007f13b1ba5fa0 RCX: 00007f13b198cde9 [ 242.480019][ T9482] RDX: 0000000000001003 RSI: 00004000000048c0 RDI: 0000000000000007 [ 242.480029][ T9482] RBP: 00007f13b2844090 R08: 0000000000000000 R09: 0000000000000000 [ 242.480038][ T9482] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 242.480047][ T9482] R13: 0000000000000000 R14: 00007f13b1ba5fa0 R15: 00007ffcb7e8e228 [ 242.480068][ T9482] [ 242.696834][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.691'. [ 242.717936][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.747475][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.776936][ T9462] bridge_slave_0: entered allmulticast mode [ 242.807916][ T9462] bridge_slave_0: entered promiscuous mode [ 242.816465][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.823611][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.831759][ T9462] bridge_slave_1: entered allmulticast mode [ 242.840261][ T9462] bridge_slave_1: entered promiscuous mode [ 242.863586][ T9496] vivid-000: disconnect [ 242.892219][ T9462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.941149][ T9462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.017351][ T9462] team0: Port device team_slave_0 added [ 243.035983][ T9462] team0: Port device team_slave_1 added [ 243.044783][ T9495] vivid-000: reconnect [ 243.093614][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.100572][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.126426][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.144066][ T9462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.161184][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.170440][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.228316][ T9462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.359745][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.373825][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.704651][ T9462] hsr_slave_0: entered promiscuous mode [ 243.710775][ T9462] hsr_slave_1: entered promiscuous mode [ 243.760135][ T9522] netlink: 'syz.6.697': attribute type 1 has an invalid length. [ 243.768294][ T9462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.779725][ T9462] Cannot create hsr debugfs directory [ 243.797718][ T9524] kernel profiling enabled (shift: 7) [ 243.857446][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.6.697'. [ 243.933352][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 244.080001][ T9462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 244.094019][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 244.107571][ T9462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 244.110848][ T5866] usb 3-1: config 0 has no interfaces? [ 244.119872][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 244.151253][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.151857][ T9462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 244.170352][ T5959] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 244.184564][ T5866] usb 3-1: config 0 descriptor?? [ 244.210664][ T9462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 244.241862][ T5830] Bluetooth: hci3: command tx timeout [ 244.261313][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.7.702'. [ 244.274307][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 244.274319][ T29] audit: type=1400 audit(1739967854.339:872): avc: denied { getopt } for pid=9541 comm="syz.7.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.305871][ T29] audit: type=1400 audit(1739967854.359:873): avc: denied { getopt } for pid=9541 comm="syz.7.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.363435][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 244.378660][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.415866][ T9462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.435095][ T5959] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 244.468413][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.480204][ T9462] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.638195][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.645310][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.442439][ T5959] usb 5-1: Product: syz [ 245.446755][ T5959] usb 5-1: Manufacturer: syz [ 245.451383][ T5959] usb 5-1: SerialNumber: syz [ 245.472138][ T5959] usb 5-1: config 0 descriptor?? [ 245.848959][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.856100][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.859771][ T5959] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 245.873304][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.882506][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.069164][ T5959] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 246.313434][ T5830] Bluetooth: hci3: command tx timeout [ 246.370983][ T9562] 9pnet_fd: Insufficient options for proto=fd [ 246.380225][ T9556] i2c i2c-0: Invalid block write size 34 [ 246.444729][ T9562] netlink: 272 bytes leftover after parsing attributes in process `syz.4.698'. [ 246.519781][ T9565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2077 sclass=netlink_xfrm_socket pid=9565 comm=syz.6.704 [ 246.742858][ T9462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.829295][ T9577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 247.197125][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.707'. [ 247.316801][ T5848] usb 3-1: USB disconnect, device number 32 [ 247.352119][ T9462] veth0_vlan: entered promiscuous mode [ 247.397829][ T9462] veth1_vlan: entered promiscuous mode [ 247.573232][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 247.590940][ T9462] veth0_macvtap: entered promiscuous mode [ 247.628486][ T9462] veth1_macvtap: entered promiscuous mode [ 248.012621][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.074919][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.129921][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.146990][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.159464][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.170074][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.180157][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.190755][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.200748][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.205800][ T9] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.211722][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.230914][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.238250][ T9] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 248.243889][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.269502][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.280152][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.291290][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.302177][ T9] usb 7-1: config 0 descriptor?? [ 248.345801][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.371385][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.381569][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.392160][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.402086][ T5830] Bluetooth: hci3: command tx timeout [ 248.402595][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.418542][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.428704][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.439321][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.458214][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.473346][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.492499][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.557920][ T9462] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.609400][ T9462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.632893][ T9462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.643870][ T9462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.739296][ T9] elecom 0003:056E:00E6.000A: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.6-1/input0 [ 249.504871][ T29] audit: type=1326 audit(1739967858.969:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 249.528075][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.620840][ T6369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.634018][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.645265][ T29] audit: type=1326 audit(1739967858.969:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 249.740613][ T9] usb 7-1: USB disconnect, device number 11 [ 249.926047][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.975195][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.106601][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.134325][ T29] audit: type=1326 audit(1739967858.979:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.148786][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.158921][ T29] audit: type=1326 audit(1739967858.979:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.188754][ T29] audit: type=1326 audit(1739967858.979:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.233341][ T29] audit: type=1326 audit(1739967858.979:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.323210][ T29] audit: type=1326 audit(1739967858.979:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.385737][ T29] audit: type=1326 audit(1739967858.979:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.453285][ T29] audit: type=1326 audit(1739967858.979:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 250.477124][ T5830] Bluetooth: hci3: command tx timeout [ 250.520404][ T29] audit: type=1326 audit(1739967858.979:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 251.733253][ T5866] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 251.932337][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 251.940086][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.970260][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.518807][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.529575][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.542917][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.552155][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.811857][ T5944] Bluetooth: hci6: Frame reassembly failed (-84) [ 252.835140][ T5944] Bluetooth: hci6: Frame reassembly failed (-84) [ 252.862963][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 252.875104][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 253.220814][ T5865] usb 3-1: USB disconnect, device number 33 [ 254.877673][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 254.878524][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.890624][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.514831][ T6369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.528236][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.774284][ T9768] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 255.903349][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 255.903364][ T29] audit: type=1400 audit(1739967865.939:902): avc: denied { create } for pid=9772 comm="syz.8.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 256.149074][ T9783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.953317][ T29] audit: type=1400 audit(1739967866.199:903): avc: denied { read } for pid=9767 comm="syz.2.726" dev="sockfs" ino=24241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.312800][ T9786] netlink: 168 bytes leftover after parsing attributes in process `syz.6.728'. [ 257.785889][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.730'. [ 257.984079][ T9799] sg_write: process 543 (syz.2.729) changed security contexts after opening file descriptor, this is not allowed. [ 259.359115][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.370650][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.383338][ T5866] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 259.384552][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.401841][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.411061][ T5830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 259.418255][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.625975][ T5866] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 259.636562][ T5866] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.644954][ T5866] usb 9-1: Product: syz [ 259.672358][ T5866] usb 9-1: Manufacturer: syz [ 259.685440][ T5866] usb 9-1: SerialNumber: syz [ 259.710989][ T5866] usb 9-1: config 0 descriptor?? [ 259.728927][ T5866] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 002 [ 259.771149][ T9821] chnl_net:caif_netlink_parms(): no params data found [ 259.845638][ T9821] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.852845][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.860341][ T9821] bridge_slave_0: entered allmulticast mode [ 259.867199][ T9821] bridge_slave_0: entered promiscuous mode [ 259.874765][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.882120][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.889955][ T9821] bridge_slave_1: entered allmulticast mode [ 259.896849][ T9821] bridge_slave_1: entered promiscuous mode [ 259.924400][ T9821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.933786][ T29] audit: type=1400 audit(1739967869.999:904): avc: denied { audit_write } for pid=9812 comm="syz.8.735" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.956906][ T9821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.986692][ T9821] team0: Port device team_slave_0 added [ 259.999216][ T9821] team0: Port device team_slave_1 added [ 260.038582][ T9821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.047901][ T9821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.076599][ T9821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.093373][ T9821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.100313][ T9821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.150181][ T9821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.170500][ T5866] (null): failure reading functionality [ 260.183945][ T5866] i2c i2c-1: failure reading functionality [ 260.201631][ T5866] i2c i2c-1: connected i2c-tiny-usb device [ 260.211786][ T5866] usb 9-1: USB disconnect, device number 2 [ 260.230143][ T9821] hsr_slave_0: entered promiscuous mode [ 260.240972][ T9821] hsr_slave_1: entered promiscuous mode [ 260.251955][ T9821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.260849][ T9821] Cannot create hsr debugfs directory [ 260.476032][ T9821] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 260.503756][ T9821] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 260.517245][ T9821] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 260.542724][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 260.548895][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 260.560214][ T9821] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 260.633964][ T6369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.690704][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.698072][ T9821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.706326][ T9821] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.713710][ T9821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.737138][ T9864] ceph: No mds server is up or the cluster is laggy [ 260.750877][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.846157][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.140696][ T9821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.189903][ T9821] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.221610][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.228705][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.274299][ T6144] block nbd0: Possible stuck request ffff888025ca7000: control (read@0,4096B). Runtime 90 seconds [ 261.277510][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.297285][ T9891] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 261.297778][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.311997][ T6369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.345417][ T9821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.474593][ T9891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.513411][ T5826] Bluetooth: hci6: command tx timeout [ 261.514878][ T9897] bond3: (slave gretap1): making interface the new active one [ 261.643421][ T9897] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 261.738993][ T9901] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 261.817994][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 261.824123][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 261.853044][ T9904] ceph: No mds server is up or the cluster is laggy [ 261.933895][ T9821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.020243][ T9912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.745'. [ 262.325269][ T9821] veth0_vlan: entered promiscuous mode [ 262.342612][ T29] audit: type=1400 audit(1739967872.399:905): avc: denied { watch } for pid=9924 comm="syz.6.749" path="/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.357256][ T9821] veth1_vlan: entered promiscuous mode [ 262.433231][ T29] audit: type=1400 audit(1739967872.399:906): avc: denied { watch_sb watch_reads } for pid=9924 comm="syz.6.749" path="/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.514181][ T9821] veth0_macvtap: entered promiscuous mode [ 262.523062][ T9821] veth1_macvtap: entered promiscuous mode [ 262.535892][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.568718][ T29] audit: type=1400 audit(1739967872.629:907): avc: denied { node_bind } for pid=9927 comm="syz.8.750" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 262.574793][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.613303][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 262.625140][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.635982][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.653178][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.663957][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.673843][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.693168][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.702995][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.718329][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.728312][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.746951][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.764057][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.793704][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 262.800181][ T8] usb 3-1: config 0 has no interfaces? [ 262.805819][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 262.815332][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.824531][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.845852][ T8] usb 3-1: config 0 descriptor?? [ 262.851599][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.867519][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.878687][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.878698][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.878710][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.878718][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.878729][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.878748][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.878759][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.878771][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.878781][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.878794][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.878804][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.879524][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.881457][ T9821] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.881521][ T9821] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.881544][ T9821] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.881566][ T9821] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.421626][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.422455][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.065268][ T5826] Bluetooth: hci6: command tx timeout [ 264.099315][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.099334][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.286778][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.286798][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.553110][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 264.574287][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 264.583885][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 264.596009][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 264.609405][ T5830] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 264.620204][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.771803][ T5959] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 264.836541][ T9951] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 264.879105][ T9951] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 264.890628][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 264.904305][ T9951] kvm: requested 20952 ns i8254 timer period limited to 200000 ns [ 264.906711][ T9967] Invalid ELF header len 8 [ 264.920032][ T29] audit: type=1400 audit(1739967874.969:908): avc: denied { module_load } for pid=9962 comm="syz.8.755" path="/11/bus" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 264.943270][ T5959] usb 10-1: Using ep0 maxpacket: 8 [ 264.952438][ T9951] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 264.954405][ T5959] usb 10-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.972521][ T9951] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 264.982265][ T5959] usb 10-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.999949][ T9951] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 265.007056][ T5959] usb 10-1: config 0 interface 0 has no altsetting 0 [ 265.008160][ T9951] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 265.021914][ T5959] usb 10-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 265.032448][ T5959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.054305][ T5959] usb 10-1: config 0 descriptor?? [ 265.074211][ T9951] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 265.088869][ T9951] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 265.100069][ T9951] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 265.220208][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.253094][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.328679][ T5870] usb 3-1: USB disconnect, device number 34 [ 265.401683][ T9948] bridge_slave_0: entered allmulticast mode [ 265.440426][ T9948] bridge_slave_0: entered promiscuous mode [ 265.482588][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.508237][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.524512][ T9948] bridge_slave_1: entered allmulticast mode [ 265.524559][ T5959] apple 0003:05AC:029F.000B: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.9-1/input0 [ 265.538234][ T9948] bridge_slave_1: entered promiscuous mode [ 265.667888][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.697785][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.751374][ T5866] usb 10-1: USB disconnect, device number 2 [ 265.763332][ T5870] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 265.851658][ T9948] team0: Port device team_slave_0 added [ 265.862702][ T9948] team0: Port device team_slave_1 added [ 265.911188][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.921010][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.933327][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.963962][ T5870] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 265.979387][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.011402][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.012678][ T5870] usb 3-1: config 0 descriptor?? [ 266.058393][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.065157][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 266.073666][ T5826] Bluetooth: hci6: command tx timeout [ 266.088766][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.115286][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.280461][ T9948] hsr_slave_0: entered promiscuous mode [ 266.327007][ T9948] hsr_slave_1: entered promiscuous mode [ 266.362902][ T9948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.383385][ T9948] Cannot create hsr debugfs directory [ 266.389197][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.9.762'. [ 266.407571][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.504713][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 266.516008][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 266.538347][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 266.556923][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 266.714223][ T5826] Bluetooth: hci7: command tx timeout [ 266.773220][ T5870] pwc: recv_control_msg error -32 req 04 val 1300 [ 266.795481][ T5870] pwc: recv_control_msg error -32 req 04 val 1400 [ 266.830608][ T5870] pwc: recv_control_msg error -32 req 02 val 2000 [ 266.852013][ T5870] pwc: recv_control_msg error -32 req 02 val 2100 [ 266.953495][T10003] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.079047][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.545705][T10031] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 268.155675][ T5826] Bluetooth: hci6: command tx timeout [ 268.217070][T10038] netlink: 20 bytes leftover after parsing attributes in process `syz.9.764'. [ 268.316809][T10043] nbd: must specify a device to reconfigure [ 268.324327][T10040] syzkaller1: entered promiscuous mode [ 268.336497][ T29] audit: type=1400 audit(1739967878.399:909): avc: denied { getopt } for pid=10042 comm="syz.6.767" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.369924][T10040] syzkaller1: entered allmulticast mode [ 268.709650][ T29] audit: type=1400 audit(1739967878.769:910): avc: denied { connect } for pid=10055 comm="syz.8.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 268.759442][T10057] ipvlan2: entered allmulticast mode [ 268.765236][T10057] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 268.789005][T10057] batman_adv: batadv0: Adding interface: ipvlan2 [ 268.795652][ T5826] Bluetooth: hci7: command tx timeout [ 268.829624][T10057] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.863232][T10057] batman_adv: batadv0: Interface activated: ipvlan2 [ 268.941821][ T9948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.050425][ T9948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.099799][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 269.122335][ T9948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.244070][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 269.254384][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 269.261123][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 269.268621][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 269.825742][ T9948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.845124][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 269.859679][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 269.911515][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.062148][ T5870] pwc: Registered as video103. [ 270.257969][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 270.290785][ T5870] usb 3-1: USB disconnect, device number 35 [ 270.570655][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.679259][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.712252][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.719318][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.782522][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.789583][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.823310][ T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.847419][ T9948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.878414][ T5826] Bluetooth: hci7: command tx timeout [ 271.047388][ T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.077471][ T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.106117][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.139540][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.211190][T10084] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 271.239974][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.363050][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.411259][ T9948] veth0_vlan: entered promiscuous mode [ 271.426362][ T9948] veth1_vlan: entered promiscuous mode [ 271.485810][T10110] netlink: 'syz.6.775': attribute type 2 has an invalid length. [ 271.495080][ T25] usb 9-1: USB disconnect, device number 3 [ 271.531128][T10110] netlink: 'syz.6.775': attribute type 1 has an invalid length. [ 271.665392][ T9948] veth0_macvtap: entered promiscuous mode [ 271.697710][ T9948] veth1_macvtap: entered promiscuous mode [ 271.740056][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.784141][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.827382][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.883266][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.910904][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.935335][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.956008][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.979572][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.002084][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.013016][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.022941][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 272.079943][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.107299][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.138010][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.153660][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.163164][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.194843][ T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.211825][ T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.215540][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.242348][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.329259][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.343519][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.349899][T10084] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 272.377281][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.379820][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.427281][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.454895][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.487933][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.515662][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.538372][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.589771][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.599386][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.610709][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.643526][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.685194][ T5866] usb 9-1: USB disconnect, device number 4 [ 272.714463][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.793081][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.793862][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.812579][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.829430][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.841026][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.851045][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.861879][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.879261][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.906212][ T9948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.952274][ T9948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.961840][ T5826] Bluetooth: hci7: command tx timeout [ 272.973266][ T25] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 272.983848][ T9948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.000908][ T9948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.062780][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.9.779'. [ 273.092532][ T9948] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 273.123514][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.155312][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 273.163992][ T25] usb 7-1: not running at top speed; connect to a high speed hub [ 273.184972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.193935][ T25] usb 7-1: config 12 has an invalid interface number: 216 but max is 0 [ 273.202201][ T25] usb 7-1: config 12 has no interface number 0 [ 273.217142][ T25] usb 7-1: config 12 interface 216 has no altsetting 0 [ 273.223167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.226620][ T25] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice= 0.75 [ 273.270476][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.280338][ T5154] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 273.312168][ T25] usb 7-1: Product: syz [ 273.322919][ T25] usb 7-1: Manufacturer: syz [ 273.331417][ T25] usb 7-1: SerialNumber: syz [ 273.347138][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.379083][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.443634][ T5154] usb 3-1: Using ep0 maxpacket: 32 [ 273.456115][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.472915][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.491788][ T5154] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.501777][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.509119][T10167] syz.8.782: attempt to access beyond end of device [ 273.509119][T10167] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 273.526643][ T5154] usb 3-1: config 0 descriptor?? [ 273.534484][ T5154] hub 3-1:0.0: USB hub found [ 273.587936][T10167] XFS (nbd8): SB validate failed with error -5. [ 273.605366][ T25] kvaser_usb 7-1:12.216: error -ENODEV: Cannot get usb endpoint(s) [ 273.681819][T10167] hfs: can't find a HFS filesystem on dev nullb0 [ 273.689818][ T25] usb 7-1: USB disconnect, device number 12 [ 273.763565][ T29] audit: type=1400 audit(1739967883.799:911): avc: denied { read } for pid=10165 comm="syz.8.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 273.784723][ T5154] hub 3-1:0.0: 1 port detected [ 274.923096][ T25] usb 3-1: USB disconnect, device number 36 [ 274.929313][ T5154] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 275.912024][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 275.923400][ T29] audit: type=1400 audit(1739967885.989:912): avc: denied { bind } for pid=10217 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.061674][ T29] audit: type=1400 audit(1739967885.989:913): avc: denied { name_bind } for pid=10217 comm="syz.1.789" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 276.569662][ T29] audit: type=1400 audit(1739967885.989:914): avc: denied { node_bind } for pid=10217 comm="syz.1.789" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 276.591112][ T29] audit: type=1326 audit(1739967886.069:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 276.766960][ T29] audit: type=1326 audit(1739967886.069:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 276.818388][ T29] audit: type=1326 audit(1739967886.069:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 276.845528][ T29] audit: type=1326 audit(1739967886.069:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 276.881996][ T29] audit: type=1326 audit(1739967886.069:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 277.030630][ T29] audit: type=1326 audit(1739967886.079:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13b198cde9 code=0x7ffc0000 [ 277.582164][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.580411][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.912719][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 278.912732][ T29] audit: type=1400 audit(1739967888.969:940): avc: denied { ioctl } for pid=10258 comm="syz.6.797" path="socket:[27100]" dev="sockfs" ino=27100 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 279.843781][T10274] tty tty3: ldisc open failed (-12), clearing slot 2 [ 280.003277][ T29] audit: type=1400 audit(1739967889.979:941): avc: denied { getopt } for pid=10280 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.877070][ T29] audit: type=1400 audit(1739967890.939:942): avc: denied { append } for pid=10292 comm="syz.2.806" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.906370][ T29] audit: type=1400 audit(1739967890.959:943): avc: denied { map } for pid=10292 comm="syz.2.806" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.936948][ T29] audit: type=1400 audit(1739967890.959:944): avc: denied { execute } for pid=10292 comm="syz.2.806" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.316359][ T29] audit: type=1400 audit(1739967891.379:945): avc: denied { remount } for pid=10300 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 281.341277][T10282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.385392][T10282] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 281.511409][ T29] audit: type=1400 audit(1739967891.569:946): avc: denied { unmount } for pid=9948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 281.543586][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 281.677750][T10322] syzkaller0: entered allmulticast mode [ 281.711443][T10325] netlink: 'syz.9.813': attribute type 4 has an invalid length. [ 281.719149][T10326] netlink: 'syz.9.813': attribute type 4 has an invalid length. [ 281.727172][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 281.742444][ T25] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 281.798009][ T25] usb 9-1: config 0 has no interface number 0 [ 281.834824][ T25] usb 9-1: config 0 interface 184 has no altsetting 0 [ 281.890299][ T25] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 281.931704][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.959613][ T25] usb 9-1: Product: syz [ 281.968707][ T25] usb 9-1: Manufacturer: syz [ 281.999162][ T25] usb 9-1: SerialNumber: syz [ 282.284133][ T25] usb 9-1: config 0 descriptor?? [ 282.359205][ T25] smsc75xx v1.0.0 [ 282.896616][T10350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.095722][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.419601][T10350] capability: warning: `syz.6.817' uses 32-bit capabilities (legacy support in use) [ 283.532218][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz.8.807'. [ 283.548219][ T25] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 283.695203][ T25] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 284.315614][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.463955][ T5865] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 284.513224][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 284.593253][ T5865] usb 2-1: device descriptor read/64, error -71 [ 284.676057][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.698814][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 113, using maximum allowed: 30 [ 284.747911][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 284.765147][ T25] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 284.782373][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 284.795110][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.807268][ T25] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 284.813808][ T8] usb 3-1: config 0 descriptor?? [ 284.822256][ T25] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 284.844817][ T25] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 284.853231][ T5865] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 284.866934][ T25] usb 9-1: USB disconnect, device number 5 [ 284.993465][ T5866] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 285.026997][ T8] usb 3-1: string descriptor 0 read error: -71 [ 285.034057][ T5865] usb 2-1: device descriptor read/64, error -71 [ 285.043667][ T8] usb 3-1: USB disconnect, device number 37 [ 285.151277][ T5865] usb usb2-port1: attempt power cycle [ 285.195898][ T5866] usb 10-1: config 0 has an invalid interface number: 39 but max is 0 [ 285.223296][ T5866] usb 10-1: config 0 has no interface number 0 [ 285.243634][ T5866] usb 10-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 285.258275][ T5866] usb 10-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 285.277903][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.293204][ T5866] usb 10-1: Product: syz [ 285.307768][ T5866] usb 10-1: Manufacturer: syz [ 285.333176][ T5866] usb 10-1: SerialNumber: syz [ 285.342698][ T5866] usb 10-1: config 0 descriptor?? [ 285.525599][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 285.556101][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.569903][T10389] ipvlan2: entered promiscuous mode [ 285.576021][T10389] ipvlan2: entered allmulticast mode [ 285.582001][T10389] bridge0: entered allmulticast mode [ 285.591670][T10389] bridge0: port 3(ipvlan2) entered blocking state [ 285.595469][ T5865] usb 2-1: device descriptor read/8, error -71 [ 285.603285][T10389] bridge0: port 3(ipvlan2) entered disabled state [ 285.740954][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.829'. [ 285.753382][T10420] netlink: 'syz.8.829': attribute type 1 has an invalid length. [ 285.759765][ T5866] usb 10-1: USB disconnect, device number 3 [ 285.767210][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.829'. [ 285.817982][T10423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 285.922484][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 286.109262][ T8514] udevd[8514]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.282717][ T5865] usb 2-1: device descriptor read/8, error -71 [ 286.416082][ T29] audit: type=1400 audit(1739967896.469:947): avc: denied { ioctl } for pid=10433 comm="syz.6.832" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.453669][ T5865] usb usb2-port1: unable to enumerate USB device [ 286.730413][T10455] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 286.768560][ T29] audit: type=1400 audit(1739967896.829:948): avc: denied { getopt } for pid=10451 comm="syz.8.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.915152][ T29] audit: type=1400 audit(1739967896.969:949): avc: denied { create } for pid=10459 comm="syz.8.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 287.043530][ T5865] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 287.195886][T10472] syz.8.839: attempt to access beyond end of device [ 287.195886][T10472] nbd8: rw=0, sector=16, nr_sectors = 1 limit=0 [ 287.244663][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.250871][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 287.264936][T10472] qnx6: unable to read the first superblock [ 287.272978][ T5865] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 287.285416][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 287.293595][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.357748][T10472] syz.8.839: attempt to access beyond end of device [ 287.357748][T10472] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 287.452602][ T5865] usb 3-1: config 0 descriptor?? [ 287.493910][T10472] qnx6: unable to read the first superblock [ 287.576723][T10472] qnx6: unable to read the first superblock [ 287.618967][ T29] audit: type=1400 audit(1739967897.679:950): avc: denied { shutdown } for pid=10483 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.648030][T10479] veth0_to_team: entered promiscuous mode [ 287.653832][T10479] veth0_to_team: entered allmulticast mode [ 288.444497][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 288.471020][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 288.497540][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 288.546716][ T5865] usb 3-1: USB disconnect, device number 38 [ 288.555063][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.623315][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 288.648963][ T8] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 288.702083][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.733114][ T8] usb 2-1: Product: syz [ 288.737377][ T8] usb 2-1: Manufacturer: syz [ 288.761547][ T8] usb 2-1: SerialNumber: syz [ 288.768986][ T8] usb 2-1: config 0 descriptor?? [ 288.795583][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 289.345173][ T8] gspca_sq930x: reg_r 001f failed -110 [ 289.354615][ T8] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 289.466835][ T29] audit: type=1400 audit(1739967899.529:951): avc: denied { watch } for pid=10517 comm="syz.2.845" path="/185/file1" dev="tmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 290.050232][ T29] audit: type=1400 audit(1739967900.109:952): avc: denied { setattr } for pid=10525 comm="syz.2.847" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 290.073739][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.147922][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.412752][ T29] audit: type=1400 audit(1739967900.469:953): avc: denied { ioctl } for pid=10542 comm="syz.8.849" path="socket:[28381]" dev="sockfs" ino=28381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.541842][ T29] audit: type=1400 audit(1739967900.599:954): avc: denied { read } for pid=10548 comm="syz.6.850" path="socket:[27492]" dev="sockfs" ino=27492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 290.623354][ T5959] usb 2-1: USB disconnect, device number 7 [ 291.353940][ T6144] block nbd0: Possible stuck request ffff888025ca7000: control (read@0,4096B). Runtime 120 seconds [ 292.271757][T10577] netlink: 'syz.1.855': attribute type 11 has an invalid length. [ 292.279694][ T29] audit: type=1400 audit(1739967902.329:955): avc: denied { setopt } for pid=10575 comm="syz.1.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 292.429294][ T29] audit: type=1400 audit(1739967902.489:956): avc: denied { ioctl } for pid=10567 comm="syz.6.852" path="socket:[28429]" dev="sockfs" ino=28429 ioctlcmd=0x5005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.915529][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.390563][ T6452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.553382][T10616] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 297.205624][ T29] audit: type=1400 audit(1739967907.199:957): avc: denied { bind } for pid=10632 comm="syz.9.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.611816][T10640] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 298.512938][T10644] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 299.051318][T10644] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 299.074299][T10644] bond4: (slave ip6gre1): making interface the new active one [ 299.121753][T10644] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 299.639264][T10667] sp0: Synchronizing with TNC [ 300.314811][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.513929][T10679] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 300.514084][T10681] IPVS: stopping master sync thread 10679 ... [ 301.145288][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.194735][ T5848] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 301.356431][ T5848] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.373776][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.402083][ T5848] usb 3-1: Product: syz [ 301.412225][ T5848] usb 3-1: Manufacturer: syz [ 301.417892][ T5848] usb 3-1: SerialNumber: syz [ 301.429092][T10661] orangefs_mount: mount request failed with -4 [ 301.441341][ T5848] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.466609][ T5870] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 302.436669][T10705] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 302.664164][ T5870] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 302.707509][ T5870] ath9k_htc: Failed to initialize the device [ 302.870860][ T5870] usb 3-1: ath9k_htc: USB layer deinitialized [ 302.965799][T10711] use of bytesused == 0 is deprecated and will be removed in the future, [ 302.996666][T10711] use the actual size instead. [ 304.206381][ T25] usb 3-1: USB disconnect, device number 39 [ 304.407842][ T29] audit: type=1400 audit(1739967914.469:958): avc: denied { mounton } for pid=10725 comm="syz.8.882" path="/43/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 304.482436][ T29] audit: type=1400 audit(1739967914.519:959): avc: denied { read write } for pid=10725 comm="syz.8.882" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.547754][ T29] audit: type=1400 audit(1739967914.519:960): avc: denied { open } for pid=10725 comm="syz.8.882" path="/43/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.713239][ T25] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 304.921970][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 304.940209][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.954698][ T25] usb 3-1: Product: syz [ 304.964619][ T25] usb 3-1: Manufacturer: syz [ 304.969347][ T25] usb 3-1: SerialNumber: syz [ 305.486165][ T25] usb 3-1: config 0 descriptor?? [ 306.473518][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.511504][ T25] airspy 3-1:0.0: Board ID: 00 [ 306.523259][ T25] airspy 3-1:0.0: Firmware version: [ 306.837075][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.371143][ T29] audit: type=1400 audit(1739967916.769:961): avc: denied { write } for pid=10729 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 307.408851][ T29] audit: type=1326 audit(1739967916.769:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.2.881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13b198cde9 code=0x0 [ 307.623599][ T25] airspy 3-1:0.0: usb_control_msg() failed -110 request 11 [ 307.720199][ T25] airspy 3-1:0.0: Registered as swradio24 [ 307.726069][ T25] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 307.767484][ T29] audit: type=1326 audit(1739967917.829:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10780 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be98cde9 code=0x7ffc0000 [ 307.866468][ T5866] usb 3-1: USB disconnect, device number 40 [ 307.968312][ T29] audit: type=1326 audit(1739967917.869:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10780 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc6be98cde9 code=0x7ffc0000 [ 307.991678][ T29] audit: type=1326 audit(1739967917.869:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10780 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be98cde9 code=0x7ffc0000 [ 308.015764][ T29] audit: type=1326 audit(1739967917.869:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10780 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be98cde9 code=0x7ffc0000 [ 308.090750][ T29] audit: type=1326 audit(1739967917.869:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10780 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc6be98cde9 code=0x7ffc0000 [ 308.479104][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 309.483310][ T8] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 309.633230][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 309.664682][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 309.713204][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.749500][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.773558][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.811943][ T8] usb 3-1: Product: syz [ 309.851099][T10839] netlink: 'syz.9.901': attribute type 1 has an invalid length. [ 309.852328][ T8] usb 3-1: Manufacturer: syz [ 309.868847][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.9.901'. [ 309.882976][ T8] usb 3-1: SerialNumber: syz [ 309.901361][ T8] usb 3-1: config 0 descriptor?? [ 309.926068][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 309.944536][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 310.435345][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030045400: rx timeout, send abort [ 310.446867][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880351e4400: rx timeout, send abort [ 310.945107][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030045400: abort rx timeout. Force session deactivation [ 310.957012][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880351e4400: abort rx timeout. Force session deactivation [ 311.246467][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 311.246483][ T29] audit: type=1400 audit(1739967921.309:989): avc: denied { connect } for pid=10854 comm="syz.8.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.833859][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 311.836464][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.952476][ T8] em28xx 3-1:0.0: Config register raw data: 0xea [ 311.966102][T10846] netdevsim netdevsim1: Direct firmware load for . [ 311.966102][T10846] failed with error -2 [ 311.976936][T10846] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 311.976936][T10846] [ 311.991866][ T29] audit: type=1400 audit(1739967922.029:990): avc: denied { ioctl } for pid=10845 comm="syz.1.903" path="socket:[29820]" dev="sockfs" ino=29820 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.032403][ T8] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 312.143769][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 312.244477][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 312.403238][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 312.872503][ T25] usb 7-1: config 0 has an invalid interface number: 5 but max is 0 [ 312.945678][ T25] usb 7-1: config 0 has no interface number 0 [ 312.951787][ T25] usb 7-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.044120][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'. [ 313.059871][ T25] usb 7-1: config 0 interface 5 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.084486][ T25] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 313.113459][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.124321][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.160953][ T25] usb 7-1: config 0 descriptor?? [ 313.765422][ T8] usb 3-1: USB disconnect, device number 41 [ 313.785612][ T25] usbhid 7-1:0.5: can't add hid device: -71 [ 313.842851][ T25] usbhid 7-1:0.5: probe with driver usbhid failed with error -71 [ 313.925266][ T25] usb 7-1: USB disconnect, device number 13 [ 314.183212][ T5865] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 314.372455][ T5865] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 314.504109][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.515151][T10934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.524887][ T5865] usb 2-1: Product: syz [ 314.529059][ T5865] usb 2-1: Manufacturer: syz [ 314.534466][ T5865] usb 2-1: SerialNumber: syz [ 314.700533][T10940] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 314.873375][ T5154] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 315.039989][ T5865] usb 2-1: config 0 descriptor?? [ 315.363630][ T5154] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 315.383929][ T5865] hso 2-1:0.0: Failed to find BULK IN ep [ 315.829728][ T5865] usb-storage 2-1:0.0: USB Mass Storage device detected [ 315.830728][ T5154] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 315.851816][ T5154] usb 7-1: can't read configurations, error -61 [ 315.945794][ T5865] usb 2-1: USB disconnect, device number 8 [ 316.113238][ T5154] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 316.133217][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 316.293654][ T5154] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 316.327722][ T5154] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 316.343289][ T5154] usb 7-1: can't read configurations, error -61 [ 316.343683][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.356056][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.356168][ T5154] usb usb7-port1: attempt power cycle [ 316.373349][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 316.390614][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.428953][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.447923][T10959] netlink: 40 bytes leftover after parsing attributes in process `syz.8.920'. [ 316.457441][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 316.481642][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.536645][ T9] usb 3-1: config 0 descriptor?? [ 316.566156][ T9] hub 3-1:0.0: USB hub found [ 316.755465][ T5154] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 316.802505][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 316.837796][ T5154] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 316.847521][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 316.910137][ T5154] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 316.916850][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 316.991895][ T5154] usb 7-1: can't read configurations, error -61 [ 317.204193][ T5154] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 317.205018][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 317.260061][ T9] usb 3-1: USB disconnect, device number 42 [ 317.285832][ T5154] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 317.307661][ T5154] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 317.353358][ T5154] usb 7-1: can't read configurations, error -61 [ 317.382264][ T5154] usb usb7-port1: unable to enumerate USB device [ 317.393234][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 317.593589][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.613284][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 317.630559][ T8] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 317.650699][ T8] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 317.734510][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.094362][ T8] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.133246][ T9] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 318.143684][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.232059][ T8] usb 10-1: Product: syz [ 318.282432][ T8] usb 10-1: Manufacturer: syz [ 318.299291][ T8] usb 10-1: SerialNumber: syz [ 318.303381][ T5826] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 318.321257][ T29] audit: type=1400 audit(1739967928.369:991): avc: denied { listen } for pid=10994 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 318.770256][ T9] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.794049][ T9] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.805852][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 318.813694][ T9] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 318.822787][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.835632][ T9] usb 9-1: config 0 descriptor?? [ 318.875311][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.143833][T10968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.184084][ T8] usb 10-1: 0:2 : does not exist [ 319.233587][ T8] usb 10-1: USB disconnect, device number 4 [ 319.282213][T11004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.473530][ T8514] udevd[8514]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.500353][ T9] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 319.513744][ T9] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 319.538844][ T9] hid-steam 0003:28DE:1102.000C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 319.928579][ T9] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 319.984891][ T9] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.000C/input/input22 [ 320.138339][T11020] misc userio: No port type given on /dev/userio [ 320.866726][ T9] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 320.921795][ T9] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 321.073329][ T9] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 321.084894][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.934'. [ 321.251447][ T9] usb 9-1: USB disconnect, device number 6 [ 321.828258][ T6144] block nbd0: Possible stuck request ffff888025ca7000: control (read@0,4096B). Runtime 150 seconds [ 321.875201][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.939'. [ 321.887469][ T5870] kernel write not supported for file /amidi2 (pid: 5870 comm: kworker/1:4) [ 322.433511][ T5870] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 322.474383][ T9] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 322.718257][ T5870] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 322.753215][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.783299][ T5870] usb 7-1: Product: syz [ 322.802041][ T5870] usb 7-1: Manufacturer: syz [ 322.823245][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 322.830770][ T5870] usb 7-1: SerialNumber: syz [ 322.859757][ T5870] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 322.921506][ T5154] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 323.035273][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 323.070180][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 323.120809][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.159193][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.216515][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 323.237634][ T29] audit: type=1400 audit(1739967933.299:992): avc: denied { read } for pid=11089 comm="syz.1.947" laddr=172.20.20.32 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.251327][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 323.282632][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 323.358439][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.606897][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.682277][ T5848] usb 7-1: USB disconnect, device number 18 [ 323.749234][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.879957][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 323.928700][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 323.938905][T11098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.950980][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 323.992271][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.995845][ T5154] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 324.011579][T11098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.022676][T11098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.076512][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.191944][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 324.227622][ T9] usb 9-1: string descriptor 0 read error: -22 [ 324.259853][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 324.260260][ T5154] ath9k_htc: Failed to initialize the device [ 324.348638][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.380979][ T5848] usb 7-1: ath9k_htc: USB layer deinitialized [ 324.411061][ T9] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 324.510236][ T29] audit: type=1400 audit(1739967934.569:993): avc: denied { shutdown } for pid=11106 comm="syz.6.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.634336][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.338879][ T29] audit: type=1326 audit(1739967934.829:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.388321][ T29] audit: type=1326 audit(1739967934.829:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.522557][ T9] usb 9-1: USB disconnect, device number 7 [ 325.563240][ T29] audit: type=1326 audit(1739967934.839:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.593347][ T29] audit: type=1326 audit(1739967934.839:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.623691][ T29] audit: type=1326 audit(1739967934.839:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.649516][ T29] audit: type=1326 audit(1739967934.839:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.673371][ T29] audit: type=1326 audit(1739967934.839:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.698084][ T29] audit: type=1326 audit(1739967934.839:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.724523][ T29] audit: type=1326 audit(1739967934.849:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.9.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3798cde9 code=0x7ffc0000 [ 325.958752][ T5154] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 326.759904][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 326.810179][ T5154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 326.843562][ T5154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 326.886079][T11141] netlink: 'syz.6.958': attribute type 1 has an invalid length. [ 326.893817][T11141] netlink: 224 bytes leftover after parsing attributes in process `syz.6.958'. [ 326.924770][ T5154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.963223][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.985859][ T5154] usb 2-1: Product: ᐊ [ 326.990034][ T5154] usb 2-1: Manufacturer: ퟘഋ믓퐌쬇勽閆 [ 327.036854][ T5154] usb 2-1: SerialNumber: 损쾓扽㑍芍曔늦Ⱬ햵刜솊孴魡貓뇲謠ࣟ保ꪰ₤岸嗴㩯⌵̶諍㼛褑쫄ﶏ埑䭪嶩쵕᪷곭頓땜㐯띚ꉻᆾ沛䮠穬슢寉᪂蜢䀝酽鲵褁⊩Ẁ [ 327.158619][T11147] mkiss: ax0: crc mode is auto. [ 327.164872][T11117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.591576][T11153] syz.9.960: attempt to access beyond end of device [ 327.591576][T11153] loop9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 327.609859][T11153] hfsplus: unable to find HFS+ superblock [ 327.618468][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 327.633208][ T5959] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 327.734340][T11117] netlink: 'syz.1.953': attribute type 11 has an invalid length. [ 327.757051][T11117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.953'. [ 327.803358][ T5959] usb 7-1: Using ep0 maxpacket: 16 [ 327.809263][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.832874][ T5959] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.860829][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.862734][ T5959] usb 7-1: config 0 interface 0 has no altsetting 0 [ 327.886208][ T5959] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 327.901139][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.937648][ T5154] cdc_ncm 2-1:1.0: bind() failure [ 327.982585][ T5154] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 327.994941][ T5959] usb 7-1: config 0 descriptor?? [ 328.074690][ T5154] cdc_ncm 2-1:1.1: bind() failure [ 328.215345][ T5154] usb 2-1: USB disconnect, device number 9 [ 328.291134][ T5826] Bluetooth: hci3: unexpected event 0x0b length: 1 < 11 [ 328.478742][ T5959] itetech 0003:06CB:73F4.000E: unknown main item tag 0x0 [ 328.587069][ T5959] itetech 0003:06CB:73F4.000E: unknown main item tag 0x0 [ 329.096809][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.467211][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.473181][ T5959] itetech 0003:06CB:73F4.000E: item fetching failed at offset 2/5 [ 329.493537][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.570747][ T5959] itetech 0003:06CB:73F4.000E: probe with driver itetech failed with error -22 [ 329.613425][ T5959] usb 7-1: USB disconnect, device number 19 [ 330.075242][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 330.075258][ T29] audit: type=1400 audit(1739967940.139:1020): avc: denied { create } for pid=11207 comm="syz.8.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 330.318435][T11213] tmpfs: Bad value for 'mpol' [ 330.929087][ T29] audit: type=1400 audit(1739967940.989:1021): avc: denied { create } for pid=11216 comm="syz.8.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 330.971764][T11219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 331.913450][ T5866] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 332.093295][ T5866] usb 10-1: Invalid ep0 maxpacket: 64 [ 332.403209][ T5866] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 332.569704][ T5866] usb 10-1: Invalid ep0 maxpacket: 64 [ 333.136562][ T5866] usb usb10-port1: attempt power cycle [ 333.516695][ T5866] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 333.750864][ T5866] usb 10-1: Invalid ep0 maxpacket: 64 [ 333.891113][ T5866] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 333.903191][ T5959] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 333.909646][T11283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11283 comm=syz.1.987 [ 333.961711][ T5866] usb 10-1: Invalid ep0 maxpacket: 64 [ 333.967897][ T5866] usb usb10-port1: unable to enumerate USB device [ 334.073199][ T5959] usb 9-1: Using ep0 maxpacket: 16 [ 334.097559][ T5959] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 334.132259][ T5959] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.162776][ T5959] usb 9-1: Product: syz [ 334.184420][ T5959] usb 9-1: Manufacturer: syz [ 334.189036][ T5959] usb 9-1: SerialNumber: syz [ 334.218125][ T5959] r8152-cfgselector 9-1: Unknown version 0x0000 [ 334.248430][ T5959] r8152-cfgselector 9-1: config 0 descriptor?? [ 334.889999][T11306] openvswitch: netlink: IPv4 tun info is not correct [ 334.925716][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.503744][T11310] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 335.595405][T11310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.649684][ T5866] r8152-cfgselector 9-1: USB disconnect, device number 8 [ 335.761324][T11314] syz.9.991: attempt to access beyond end of device [ 335.761324][T11314] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 335.774616][T11314] FAT-fs (loop19): unable to read boot sector [ 335.811769][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.991'. [ 335.842984][ T29] audit: type=1400 audit(1739967945.809:1022): avc: denied { create } for pid=11307 comm="syz.9.991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 336.113672][ T29] audit: type=1400 audit(1739967945.819:1023): avc: denied { mounton } for pid=11307 comm="syz.9.991" path="/44/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 336.170740][T11310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.199682][T11310] bond5: (slave batadv1): making interface the new active one [ 336.204758][T11313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.992'. [ 336.221982][T11310] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 336.259356][T11313] vlan2: entered promiscuous mode [ 336.264966][T11313] bond5: entered promiscuous mode [ 336.271192][T11313] batadv1: entered promiscuous mode [ 336.580791][ T29] audit: type=1400 audit(1739967946.619:1024): avc: denied { unlink } for pid=9821 comm="syz-executor" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 336.661971][ T5866] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 336.676382][ T5866] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 336.776104][T11348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.995'. [ 336.800431][ T29] audit: type=1400 audit(1739967946.829:1025): avc: denied { accept } for pid=11330 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 337.359955][T11353] netlink: 'syz.2.999': attribute type 10 has an invalid length. [ 337.361534][T11353] veth1_vlan: entered allmulticast mode [ 337.410952][ T5866] hid-generic 0000:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 337.670945][T11353] team0: Device veth1_vlan failed to register rx_handler [ 338.150341][ T5870] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 338.829790][ T5870] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.843443][ T5870] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.860376][ T5870] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.879755][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.899965][ T5870] usb 9-1: SerialNumber: syz [ 339.126909][T11385] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1004'. [ 339.942270][T11389] sp0: Synchronizing with TNC [ 340.633840][T10662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.710370][ T5870] usb 9-1: 0:2 : does not exist [ 340.751604][ T5870] usb 9-1: unit 5 not found! [ 340.902827][ T29] audit: type=1400 audit(1739967950.929:1026): avc: denied { write } for pid=11401 comm="syz.2.1008" name="file0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 340.943473][ T5870] usb 9-1: USB disconnect, device number 9 [ 340.975480][ T29] audit: type=1400 audit(1739967950.929:1027): avc: denied { open } for pid=11401 comm="syz.2.1008" path="/215/file0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.077729][ T29] audit: type=1400 audit(1739967950.929:1028): avc: denied { ioctl } for pid=11401 comm="syz.2.1008" path="/215/file0" dev="tmpfs" ino=1180 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.353905][ T5870] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 341.413684][ T5154] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 341.518170][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.543383][ T5154] usb 7-1: device descriptor read/64, error -71 [ 341.563374][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.603273][ T5870] usb 9-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 341.612327][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.656071][ T5870] usb 9-1: config 0 descriptor?? [ 341.823300][ T5154] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 341.956894][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.116086][ T5154] usb 7-1: device descriptor read/64, error -71 [ 342.159370][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1009'. [ 342.235342][ T5154] usb usb7-port1: attempt power cycle [ 342.414647][T11406] netlink: 'syz.8.1009': attribute type 1 has an invalid length. [ 342.543946][T11406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.628185][T11438] bond1: (slave veth3): Enslaving as an active interface with a down link [ 342.643351][ T5154] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 342.674978][ T5154] usb 7-1: device descriptor read/8, error -71 [ 342.682323][T11439] bond1: (slave ip6erspan0): making interface the new active one [ 342.706324][T11439] ip6erspan0: entered promiscuous mode [ 342.712119][T11439] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 342.853235][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 342.923297][ T5154] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 342.966248][ T5154] usb 7-1: device descriptor read/8, error -71 [ 343.010187][ T5870] usbhid 9-1:0.0: can't add hid device: -71 [ 343.014479][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 343.023469][ T5870] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 343.034807][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.064030][ T8] usb 2-1: config 6 has an invalid interface number: 41 but max is 1 [ 343.072120][ T8] usb 2-1: config 6 has an invalid interface number: 6 but max is 1 [ 343.100478][ T8] usb 2-1: config 6 has no interface number 0 [ 343.116972][ T8] usb 2-1: config 6 has no interface number 1 [ 343.137935][ T8] usb 2-1: config 6 interface 41 has no altsetting 0 [ 343.163847][ T8] usb 2-1: config 6 interface 6 has no altsetting 0 [ 343.182405][ T8] usb 2-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 343.188190][ T5154] usb usb7-port1: unable to enumerate USB device [ 343.199881][ T5870] usb 9-1: USB disconnect, device number 10 [ 343.231373][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.249643][ T8] usb 2-1: Product: syz [ 343.256536][ T8] usb 2-1: Manufacturer: syz [ 343.261216][ T8] usb 2-1: SerialNumber: syz [ 343.424407][T11476] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 343.490861][ T8514] udevd[8514]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.993477][ T5830] Bluetooth: hci5: command 0x0419 tx timeout [ 344.002353][ T8] smsusb:smsusb_probe: board id=15, interface number 41 [ 344.017827][ T8] smsusb:smsusb_probe: board id=15, interface number 6 [ 344.028220][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 344.123633][ T8] usb 2-1: USB disconnect, device number 10 [ 344.274982][T11497] netlink: 'syz.6.1021': attribute type 1 has an invalid length. [ 344.297907][ T5866] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 344.324789][T11497] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 344.387414][T11497] veth3: entered promiscuous mode [ 344.394502][T11497] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 344.470450][T11506] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 344.513194][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 344.519639][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.629964][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.659418][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.680474][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.711997][ T5866] usb 3-1: config 0 descriptor?? [ 344.754975][ T5866] hub 3-1:0.0: USB hub found [ 345.059965][ T5866] hub 3-1:0.0: 1 port detected [ 345.094381][T11522] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11522 comm=syz.9.1024 [ 345.173207][T11526] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1023'. [ 345.620592][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1024'. [ 345.633289][ T29] audit: type=1400 audit(1739967955.679:1029): avc: denied { write } for pid=11521 comm="syz.9.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 346.048315][ T29] audit: type=1400 audit(1739967955.989:1030): avc: denied { lock } for pid=11531 comm="syz.6.1025" path="socket:[31167]" dev="sockfs" ino=31167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 346.049807][ T5866] usb 3-1: USB disconnect, device number 43 [ 346.220389][T11539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11539 comm=syz.1.1026 [ 346.403952][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.904160][T11551] vlan0: entered promiscuous mode [ 347.279295][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.378724][T11557] FAULT_INJECTION: forcing a failure. [ 347.378724][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 347.391517][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.1.1029 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 347.391537][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 347.391546][T11557] Call Trace: [ 347.391549][T11557] [ 347.391554][T11557] dump_stack_lvl+0x16c/0x1f0 [ 347.391569][T11557] should_fail_ex+0x50a/0x650 [ 347.391587][T11557] ? __pfx_filemap_map_pages+0x10/0x10 [ 347.391601][T11557] should_failslab+0xc2/0x120 [ 347.391613][T11557] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 347.391623][T11557] ? __pfx___might_resched+0x10/0x10 [ 347.391639][T11557] ? __anon_vma_prepare+0xae/0x5e0 [ 347.391651][T11557] ? __pfx_filemap_map_pages+0x10/0x10 [ 347.391664][T11557] __anon_vma_prepare+0xae/0x5e0 [ 347.391677][T11557] ? __pfx_filemap_map_pages+0x10/0x10 [ 347.391691][T11557] __vmf_anon_prepare+0x11c/0x240 [ 347.391706][T11557] do_pte_missing+0x8a2/0x3e10 [ 347.391717][T11557] ? __pfx_lock_release+0x10/0x10 [ 347.391734][T11557] __handle_mm_fault+0x1166/0x2c60 [ 347.391747][T11557] ? __pfx___handle_mm_fault+0x10/0x10 [ 347.391767][T11557] handle_mm_fault+0x3fa/0xaa0 [ 347.391780][T11557] __get_user_pages+0x773/0x36f0 [ 347.391792][T11557] ? __pfx_mt_find+0x10/0x10 [ 347.391804][T11557] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 347.391818][T11557] ? __pfx___get_user_pages+0x10/0x10 [ 347.391835][T11557] ? __mm_populate+0x21d/0x380 [ 347.391847][T11557] populate_vma_page_range+0x27f/0x3a0 [ 347.391858][T11557] ? __pfx_populate_vma_page_range+0x10/0x10 [ 347.391868][T11557] ? __pfx_find_vma_intersection+0x10/0x10 [ 347.391883][T11557] ? vm_mmap_pgoff+0x29b/0x3a0 [ 347.391900][T11557] __mm_populate+0x1d6/0x380 [ 347.391911][T11557] ? __pfx___mm_populate+0x10/0x10 [ 347.391922][T11557] ? up_write+0x1b2/0x520 [ 347.391941][T11557] vm_mmap_pgoff+0x2d3/0x3a0 [ 347.391967][T11557] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 347.391986][T11557] ? __fget_files+0x206/0x3a0 [ 347.391998][T11557] ksys_mmap_pgoff+0x32c/0x5c0 [ 347.392012][T11557] ? __pfx_ksys_write+0x10/0x10 [ 347.392029][T11557] __x64_sys_mmap+0x125/0x190 [ 347.392046][T11557] do_syscall_64+0xcd/0x250 [ 347.392059][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.392073][T11557] RIP: 0033:0x7fc6be98cde9 [ 347.392081][T11557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.392090][T11557] RSP: 002b:00007fc6bf775038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 347.392100][T11557] RAX: ffffffffffffffda RBX: 00007fc6beba6080 RCX: 00007fc6be98cde9 [ 347.392106][T11557] RDX: 000000000000000b RSI: 0000000000400000 RDI: 0000400000200000 [ 347.392112][T11557] RBP: 00007fc6bf775090 R08: 0000000000000004 R09: 0000000000000000 [ 347.392117][T11557] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000002 [ 347.392123][T11557] R13: 0000000000000000 R14: 00007fc6beba6080 R15: 00007ffe3cc77aa8 [ 347.392135][T11557] [ 348.090226][T11565] pim6reg: entered allmulticast mode [ 348.104853][T11566] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 348.114106][T11566] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 348.122488][T11566] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 348.130959][T11566] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 348.819298][T11581] sp0: Synchronizing with TNC [ 349.733400][ T5154] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 349.769990][T11603] vlan2: entered promiscuous mode [ 349.783718][T11603] vlan2: entered allmulticast mode [ 349.791028][T11603] hsr_slave_1: entered allmulticast mode [ 349.860475][ T29] audit: type=1400 audit(1739967959.919:1031): avc: denied { setopt } for pid=11601 comm="syz.9.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 349.922118][ T5154] usb 9-1: unable to get BOS descriptor or descriptor too short [ 349.934415][ T5154] usb 9-1: not running at top speed; connect to a high speed hub [ 349.964152][T11607] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 349.983492][ T5154] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 349.995176][T11607] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 350.037045][ T5154] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.052935][T11611] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1040'. [ 350.060883][ T5154] usb 9-1: config 1 interface 0 has no altsetting 0 [ 350.087260][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 350.104888][ T5154] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 350.133625][ T5154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.141632][ T5154] usb 9-1: Product: з [ 350.174091][ T5154] usb 9-1: Manufacturer: 玾㭰Ŝ䣋했鿊淍ꠚﺼ㘷뵢햫꺼Ꙫ㭿鯍ꗂ逋嵱̶쑃齎䈇ꥬ⒅䖛沧穿（猑ﮦ䑒ぺ슂搗됗霷쨱 [ 350.211346][T11590] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 350.369287][ T5866] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 350.414536][ T29] audit: type=1400 audit(1739967960.479:1032): avc: denied { create } for pid=11628 comm="syz.6.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 350.603344][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 350.664492][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.897212][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.946443][T11629] tmpfs: Unknown parameter ' ' [ 350.973243][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 351.083287][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.094404][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 351.097451][ T25] usb 3-1: config 0 has no interfaces? [ 351.114927][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 351.126815][ T5154] usbhid 9-1:1.0: can't add hid device: -71 [ 351.139050][ T5154] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 351.200172][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.210436][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.368415][ T5154] usb 9-1: USB disconnect, device number 11 [ 351.393276][ T5866] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.393928][ T25] usb 3-1: config 0 descriptor?? [ 351.402740][ T29] audit: type=1400 audit(1739967961.449:1033): avc: denied { append } for pid=11634 comm="syz.1.1045" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 351.473086][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.499711][ T5866] usb 10-1: config 0 descriptor?? [ 351.511789][ T5866] hub 10-1:0.0: USB hub found [ 351.715725][ T5866] hub 10-1:0.0: 1 port detected [ 351.923479][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.932508][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.819849][ T5866] usb 10-1: USB disconnect, device number 9 [ 352.819889][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.826035][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.847379][ T6144] block nbd0: Possible stuck request ffff888025ca7000: control (read@0,4096B). Runtime 180 seconds [ 352.948290][T11655] netlink: 'syz.8.1048': attribute type 1 has an invalid length. [ 353.881759][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1052'. [ 354.413547][ T45] usb 3-1: USB disconnect, device number 44 [ 355.643250][ T5866] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 355.783226][ T5866] usb 10-1: device descriptor read/64, error -71 [ 355.993767][ T5865] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 356.063867][ T5866] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 356.143505][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 356.162320][ T5865] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 356.178706][ T5865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.202106][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.212369][ T5866] usb 10-1: device descriptor read/64, error -71 [ 356.243480][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.274497][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.324710][ T5865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.343455][ T5866] usb usb10-port1: attempt power cycle [ 356.353213][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.382849][ T5865] usbtmc 3-1:16.0: bulk endpoints not found [ 357.722629][ T5866] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 357.911935][T11734] syz.8.1066: attempt to access beyond end of device [ 357.911935][T11734] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 357.984117][T11734] syz.8.1066: attempt to access beyond end of device [ 357.984117][T11734] nbd8: rw=0, sector=120, nr_sectors = 8 limit=0 [ 358.040505][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.043222][ T5866] usb 10-1: device not accepting address 12, error -71 [ 358.064924][T11734] Mount JFS Failure: -5 [ 358.461179][T11743] sp0: Synchronizing with TNC [ 358.572203][ T5937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.958451][ T5866] usb 3-1: USB disconnect, device number 45 [ 360.557092][T11764] netlink: 'syz.6.1070': attribute type 8 has an invalid length. [ 360.565111][T11755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11755 comm=syz.9.1073 [ 360.618453][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1073'. [ 360.646486][T11759] kvm: kvm [11758]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14af [ 360.762636][T11759] kvm: kvm [11758]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcc82 [ 361.515765][ T5870] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 361.630081][T11780] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1081'. [ 361.923396][ T5937] ip6erspan0: left promiscuous mode [ 362.316212][ T5870] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 362.463556][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.497924][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 362.522768][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 362.532181][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.675781][ T5870] usb 3-1: config 0 descriptor?? [ 362.769698][ T29] audit: type=1804 audit(1739967972.809:1034): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1082" name="/" dev="pidfs" ino=11788 res=1 errno=0 [ 363.936039][ T5870] isku 0003:1E7D:319C.0010: item fetching failed at offset 6/7 [ 363.948229][ T5870] isku 0003:1E7D:319C.0010: parse failed [ 363.953968][ T5870] isku 0003:1E7D:319C.0010: probe with driver isku failed with error -22 [ 364.034287][ T29] audit: type=1400 audit(1739967973.979:1035): avc: denied { bind } for pid=11768 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.316342][T10662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.321125][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.517997][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 365.383237][ T8] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 365.458025][T11437] usb 3-1: USB disconnect, device number 46 [ 365.572197][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1087'. [ 365.616561][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.635560][ T29] audit: type=1400 audit(1739967975.699:1036): avc: denied { ioctl } for pid=11809 comm="syz.9.1087" path="socket:[32811]" dev="sockfs" ino=32811 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 365.670210][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.693833][T11819] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 365.700366][T11819] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 365.733677][ T8] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.776700][T11819] vhci_hcd vhci_hcd.0: Device attached [ 365.782474][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.820982][T11822] vhci_hcd: connection closed [ 365.821180][ T8] usb 7-1: SerialNumber: syz [ 365.832744][ T5944] vhci_hcd: stop threads [ 365.951114][ T5944] vhci_hcd: release socket [ 365.963571][ T5944] vhci_hcd: disconnect device [ 367.688723][ T8] usb 7-1: 0:2 : does not exist [ 367.693960][ T8] usb 7-1: unit 5: unexpected type 0x0b [ 367.725323][T11841] bond2: entered promiscuous mode [ 367.741983][ T8] usb 7-1: USB disconnect, device number 24 [ 368.137499][ T8514] udevd[8514]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.158719][ T29] audit: type=1400 audit(1739967978.219:1037): avc: denied { name_bind } for pid=11852 comm="syz.9.1095" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 368.307688][T11865] sp0: Synchronizing with TNC [ 368.938032][T11853] create_pit_timer: 12 callbacks suppressed [ 368.938047][T11853] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 368.953460][ T5866] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 369.047007][T11864] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 369.250007][T11877] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1102'. [ 369.474569][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.097148][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.218322][T11885] sp0: Synchronizing with TNC [ 371.324570][T11890] futex_wake_op: syz.6.1106 tries to shift op by -1; fix this program [ 373.088541][T11437] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 373.775891][T11437] usb 9-1: Using ep0 maxpacket: 8 [ 373.787170][T11437] usb 9-1: too many configurations: 22, using maximum allowed: 8 [ 373.815733][T11940] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 373.838084][T11437] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 373.857668][T11437] usb 9-1: can't read configurations, error -61 [ 373.934902][T11940] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 374.015868][T11437] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 375.483762][T11437] usb 9-1: Using ep0 maxpacket: 8 [ 375.493082][T11437] usb 9-1: too many configurations: 22, using maximum allowed: 8 [ 375.503443][T11437] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 375.511977][T11437] usb 9-1: can't read configurations, error -61 [ 375.541397][T11437] usb usb9-port1: attempt power cycle [ 375.872303][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.873615][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.923441][ T30] INFO: task syz.0.637:9146 blocked for more than 143 seconds. [ 376.931023][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 377.039781][T11966] sp0: Synchronizing with TNC [ 377.432932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.457203][T11974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.463245][ T30] task:syz.0.637 state:D stack:27856 pid:9146 tgid:9144 ppid:5824 task_flags:0x400140 flags:0x00004004 [ 377.486593][ T30] Call Trace: [ 377.491408][ T30] [ 377.501201][ T30] __schedule+0xf43/0x5890 [ 377.511125][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 377.559188][ T30] ? __pfx___schedule+0x10/0x10 [ 377.584897][ T30] ? schedule+0x298/0x350 [ 377.624525][ T30] ? __pfx_lock_release+0x10/0x10 [ 377.648702][ T30] ? __mutex_trylock_common+0x78/0x250 [ 377.719325][ T30] ? lock_acquire+0x2f/0xb0 [ 377.757801][ T30] ? schedule+0x1fd/0x350 [ 377.766309][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.772632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.847499][ T30] schedule+0xe7/0x350 [ 377.883503][ T30] schedule_preempt_disabled+0x13/0x30 [ 377.907902][ T30] __mutex_lock+0x6bd/0xb10 [ 377.953184][ T30] ? sync_bdevs+0xfd/0x360 [ 378.001130][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 378.023928][ T30] ? sync_bdevs+0xc7/0x360 [ 378.060968][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 378.109052][ T30] ? iput+0xd3/0x890 [ 378.135037][ T30] ? sync_bdevs+0xfd/0x360 [ 378.139483][ T30] sync_bdevs+0xfd/0x360 [ 378.205751][ T30] ksys_sync+0xb3/0x150 [ 378.209945][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 378.235074][ T30] ? rcu_is_watching+0x12/0xc0 [ 378.273184][ T30] ? do_syscall_64+0x91/0x250 [ 378.333228][ T30] __do_sys_sync+0xe/0x20 [ 378.381149][ T30] do_syscall_64+0xcd/0x250 [ 378.390494][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.447891][ T30] RIP: 0033:0x7f97dc78cde9 [ 378.489596][ T30] RSP: 002b:00007f97dd623038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 378.564967][ T30] RAX: ffffffffffffffda RBX: 00007f97dc9a5fa0 RCX: 00007f97dc78cde9 [ 378.572976][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.648501][ T30] RBP: 00007f97dc9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 378.662031][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.723385][ T30] R13: 0000000000000000 R14: 00007f97dc9a5fa0 R15: 00007ffecdea5d28 [ 378.791806][ T30] [ 378.818401][ T30] [ 378.818401][ T30] Showing all locks held in the system: [ 378.933473][ T30] 1 lock held by khungtaskd/30: [ 378.938357][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 378.971072][ T30] 2 locks held by getty/5586: [ 378.983434][ T30] #0: ffff88814e3be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 379.003426][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 379.023636][ T30] 1 lock held by udevd/5806: [ 379.028816][ T30] #0: ffff888025ae14c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 379.048965][ T30] 3 locks held by kworker/u8:11/6452: [ 379.063442][ T30] 1 lock held by syz.0.637/9146: [ 379.068389][ T30] #0: ffff888025ae14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 379.093185][ T30] 1 lock held by syz.4.698/9524: [ 379.098129][ T30] #0: ffff888025ae14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 379.133278][ T30] 1 lock held by syz.4.698/9528: [ 379.138230][ T30] #0: ffff888025ae14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 379.173215][ T30] 1 lock held by syz.4.698/9557: [ 379.178230][ T30] #0: ffff888025ae14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 379.206764][ T30] 1 lock held by syz.7.712/9620: [ 379.211715][ T30] #0: ffff888031cb4420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x346/0xa40 [ 379.263424][ T30] 1 lock held by syz-executor/9948: [ 379.268655][ T30] 6 locks held by syz.6.1106/11898: [ 379.283399][ T30] 2 locks held by dhcpcd/12006: [ 379.288270][ T30] #0: ffff88804041e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 379.313133][ T30] #1: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 379.338614][ T30] 1 lock held by dhcpcd-run-hook/12010: [ 379.356821][ T30] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 379.393146][ T30] 1 lock held by sed/12011: [ 379.397690][ T30] [ 379.400011][ T30] ============================================= [ 379.400011][ T30] [ 379.432623][ T30] NMI backtrace for cpu 1 [ 379.432635][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 379.432654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 379.432663][ T30] Call Trace: [ 379.432668][ T30] [ 379.432674][ T30] dump_stack_lvl+0x116/0x1f0 [ 379.432699][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 379.432724][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 379.432748][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 379.432774][ T30] watchdog+0xf62/0x12b0 [ 379.432804][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.432826][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.432845][ T30] ? __kthread_parkme+0x148/0x220 [ 379.432862][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.432886][ T30] kthread+0x3af/0x750 [ 379.432906][ T30] ? __pfx_kthread+0x10/0x10 [ 379.432929][ T30] ? __pfx_kthread+0x10/0x10 [ 379.432948][ T30] ret_from_fork+0x45/0x80 [ 379.432968][ T30] ? __pfx_kthread+0x10/0x10 [ 379.432987][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.433013][ T30] [ 379.433019][ T30] Sending NMI from CPU 1 to CPUs 0: [ 379.548062][ C0] NMI backtrace for cpu 0 [ 379.548073][ C0] CPU: 0 UID: 0 PID: 6452 Comm: kworker/u8:11 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 379.548088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 379.548097][ C0] Workqueue: bat_events batadv_nc_worker [ 379.548117][ C0] RIP: 0010:rcu_is_watching+0x5c/0xc0 [ 379.548133][ C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed e0 1c ab 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b [ 379.548145][ C0] RSP: 0018:ffffc900049af9c0 EFLAGS: 00000a02 [ 379.548155][ C0] RAX: dffffc0000000000 RBX: ffff8880b8637c28 RCX: ffffffff81969fc9 [ 379.548164][ C0] RDX: 1ffff110170c6f85 RSI: ffffffff8bd35400 RDI: ffffffff8dab1ce0 [ 379.548172][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c49e2 [ 379.548180][ C0] R10: ffffffff90624f17 R11: 0000000000000002 R12: ffff888024e887d8 [ 379.548188][ C0] R13: ffff888024e887c0 R14: 0000000000000000 R15: ffff888030757800 [ 379.548196][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 379.548210][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.548218][ C0] CR2: 00005632d08f9300 CR3: 0000000035dee000 CR4: 00000000003526f0 [ 379.548226][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 379.548233][ C0] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.548241][ C0] Call Trace: [ 379.548245][ C0] [ 379.548250][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 379.548269][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 379.548285][ C0] ? nmi_handle+0x1ac/0x5d0 [ 379.548302][ C0] ? rcu_is_watching+0x5c/0xc0 [ 379.548315][ C0] ? default_do_nmi+0x6a/0x160 [ 379.548333][ C0] ? exc_nmi+0x170/0x1e0 [ 379.548349][ C0] ? end_repeat_nmi+0xf/0x53 [ 379.548370][ C0] ? lock_release+0xa9/0x6f0 [ 379.548388][ C0] ? rcu_is_watching+0x5c/0xc0 [ 379.548401][ C0] ? rcu_is_watching+0x5c/0xc0 [ 379.548414][ C0] ? rcu_is_watching+0x5c/0xc0 [ 379.548426][ C0] [ 379.548430][ C0] [ 379.548435][ C0] lock_release+0x4e2/0x6f0 [ 379.548450][ C0] ? batadv_nc_purge_paths+0x1c6/0x390 [ 379.548465][ C0] ? __pfx_lock_release+0x10/0x10 [ 379.548480][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 379.548492][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.548504][ C0] ? lock_acquire+0x2f/0xb0 [ 379.548518][ C0] ? batadv_nc_purge_paths+0xca/0x390 [ 379.548533][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 379.548549][ C0] _raw_spin_unlock_bh+0x16/0x30 [ 379.548561][ C0] batadv_nc_purge_paths+0x1c6/0x390 [ 379.548578][ C0] batadv_nc_worker+0x913/0x1060 [ 379.548596][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 379.548610][ C0] ? rcu_is_watching+0x12/0xc0 [ 379.548622][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 379.548636][ C0] ? process_one_work+0x921/0x1ba0 [ 379.548652][ C0] ? lock_acquire+0x2f/0xb0 [ 379.548667][ C0] ? process_one_work+0x921/0x1ba0 [ 379.548683][ C0] process_one_work+0x9c5/0x1ba0 [ 379.548701][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 379.548716][ C0] ? __pfx_process_one_work+0x10/0x10 [ 379.548733][ C0] ? assign_work+0x1a0/0x250 [ 379.548749][ C0] worker_thread+0x6c8/0xf00 [ 379.548767][ C0] ? __kthread_parkme+0x148/0x220 [ 379.548779][ C0] ? __pfx_worker_thread+0x10/0x10 [ 379.548794][ C0] kthread+0x3af/0x750 [ 379.548808][ C0] ? __pfx_kthread+0x10/0x10 [ 379.548821][ C0] ? lock_acquire+0x2f/0xb0 [ 379.548838][ C0] ? __pfx_kthread+0x10/0x10 [ 379.548852][ C0] ret_from_fork+0x45/0x80 [ 379.548868][ C0] ? __pfx_kthread+0x10/0x10 [ 379.548882][ C0] ret_from_fork_asm+0x1a/0x30 [ 379.548899][ C0] [ 379.577873][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 379.577886][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 379.577904][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 379.577913][ T30] Call Trace: [ 379.577918][ T30] [ 379.577924][ T30] dump_stack_lvl+0x3d/0x1f0 [ 379.577947][ T30] panic+0x71d/0x800 [ 379.577964][ T30] ? __pfx_panic+0x10/0x10 [ 379.577979][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 379.578000][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 379.578018][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 379.578037][ T30] ? watchdog+0xdcc/0x12b0 [ 379.578058][ T30] ? watchdog+0xdbf/0x12b0 [ 379.578080][ T30] watchdog+0xddd/0x12b0 [ 379.578103][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.578123][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.578140][ T30] ? __kthread_parkme+0x148/0x220 [ 379.578156][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.578177][ T30] kthread+0x3af/0x750 [ 379.578194][ T30] ? __pfx_kthread+0x10/0x10 [ 379.578214][ T30] ? __pfx_kthread+0x10/0x10 [ 379.578231][ T30] ret_from_fork+0x45/0x80 [ 379.578248][ T30] ? __pfx_kthread+0x10/0x10 [ 379.578264][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.578293][ T30] [ 380.038188][ T30] Kernel Offset: disabled [ 380.043230][ T30] Rebooting in 86400 seconds..