last executing test programs: 4m48.525886768s ago: executing program 0 (id=338): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd5", 0x27}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000180), 0x10001, 0x20800) 4m47.380184824s ago: executing program 0 (id=340): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217", @ANYBLOB="3ff4"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x3, 0x1, 0x2, "257fd08897a9356b84a33d9ce9853cfe5b5651cff2d6d9fb5e15effd25f3a703", 0x3147504d}) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 4m45.033870673s ago: executing program 0 (id=351): futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$search(0xa, 0x0, &(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x1}, 0xfffffffffffffffc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040804100000819ff7ba969383baee04fb8256f75c22094be6f974bbfe7089e582d457fd437ed829348483304a"], 0x7) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x12400, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 4m42.838356422s ago: executing program 0 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_open_dev$MSR(&(0x7f00000000c0), 0x7fffffffffffffff, 0x0) (async, rerun: 32) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000400)='./file0\x00', 0x4) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async, rerun: 64) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000580)=@raw=[@ldst={0x1, 0x3, 0x0, 0x5, 0x8, 0x50, 0xffffffffffffffff}, @generic={0x3, 0x5, 0x2, 0xe9c5, 0x4000000}, @call={0x85, 0x0, 0x0, 0x5e}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @generic={0x15, 0x4, 0x5, 0x8, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x3, 0x3, 0xf, 0x1}, {0x3, 0x1, 0xd, 0xb}, {0x2, 0x2, 0x1, 0x9}, {0x5, 0x1, 0x7, 0x2}, {0x2, 0x4, 0x6, 0x6}], 0x10, 0x5}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) (async) getpid() (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m42.669632501s ago: executing program 0 (id=357): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000001440)=0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000180)=""/247, 0xc}], 0x100000000000031b, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="ad17c9a226c631ca318297515ee32a849e9efb8fb6e44c1d1939446beb16075f4f8c7f6b92885c39dc00afebf8764a6591fb128a2ce8cf2c5780172086ef6e0c801f082eb04c69c30b470fa56e4bcd839ce396b3e3fb0868e4edabbb11f5c79feb43d542382a2aa609df14e3fe3128a1006e19434b8359c78a4844c5717cffd906b890f7ca82f8dc62b1d85f98c8c233e7a6b9e3a5d806845f7dd117c028e1412236304a9f60e2109a0124eee4f3dd4675702a", 0xb3}, {&(0x7f00000003c0)="18e8b225e9af7eeff369e64e593dbfe236b0304a2e270c2ef7f13acfe031c149944e61ba949ff3d71699f0f2109c13fe9f9fbc01b1347acbd39b3dd57bdeef88af88f94e9edaa9a2967ad5dcb9546a7da51061cb00441f95e0386769638af47ec1267c91f0f2fb08d8a793d6ca39c44d2fca6ec4a0a2d892ce572e1d49dca34e6d191868675eb4a70130aae43767cc116ffad9c541be386e5dd4eef9f92b7b60d6502ddfcea5b30fe1d7a28b7226b87f4777f242d996a7ecdde106c10024c7e948a93bc4a92de760aaceb237d3217f4c7d3a52e22d0223b120e60afd987c67814f8bc73dc08aef1acface8535f881466db7da42e1551bae760d935381c0ad9004a1bb413d7238879d0e757292febb145d9248ddda163db4c53e0dec00e31542d30f49f9494dce52a01fbe2d60149672cd28777f2865443ef4e0ef44ceead2947436d6be626b0829466517b2bb4cbec5ac86b50f726e49b13e63c79922528c4fb490ff56feb84295a0d1f55dac0c0c20706bfa1d9d419882efdabb1231cdca9098dbd64aae58537d2644ab6a896fd9e6ffc85e3bb8f2e907fd984c8fb421b9151b00df6697c250a568797195ae51033dbb063cf99725702edece2868d84e9711e1043897c6fc165d4435ef92648ef92d46a67b16975f596aa6bf1dd58a61fef03e860d005c6290a8b960d91c60e8d43076d93600a75ebb59623aec0cc5290b1b6664996e77999aa8171a91efba99809b20702abacdd5a1b64db81c0b6c1f8aee42d7fde71827a6960abd0b1f5803613954f6624ea34f5bff6c4021fd0bbf526ada242b1d74a163f6136a44e57cfd9f7e25714d3d3bba469df1904ab3b2bb3d404427a9139a6a4d48f7ccd8ad2cfe40afbab79592397f7b2214b48ee350b810a5655687a3578c8f19ec8ed9dc2c02fdb48a849bf15df5f500a6da21f328786854df8f5d4829639d026f9af60824fac98376211d8f7ad9bbaea8eef017ce5d98ef4022cf4bf8c6d5fda957fb951c74937a0e87f07291f4754342b717b4303eb3d00ee83d019c82a9d98db15d515bf73315efec22611c3fe97685f85078bf28aee1a579a722faf29fa966dc63a33f30a0ff82d598c707d20858863776b1e207182515b42c755dac4bac6328eb994d841442c1f7f610c74a52b8946b6cd4a72e8b8622017a3e574240f8ea2ad567e59cf5c022b4671c72804fea03b6cdd6a61a9da42fd0c27abf7441d39c7702edb27dcf9ad29cf57329c82f027705a8d990323123bef4a0eee007c22b31c2e1ff07f72addcddcd5a0089bbb840acbc398c70e9771eb6132fe5c661f4b65ce8ced4fd73e04db948ecfa67324cb662724185aa13a7e2475780c37bd7f5c80ae4c9c13da7e194b3a305c9d9149c5d8646a3d52d7052c45d4d2aedaf5619b97ee21a1240a15b3a85d23f5f4759a9761ca411183151c5e16cf42ba237ce541fff79dfec9b25659e7d2734e486b217e678f354bf1c6428203cb6d5fb31e3f5c9e65d9eb30db246ecb90dac3d4a706f25b710e75fb3c7442d8df08528357f30c197d87cdcd7b5ef25f5812119d029ba333d637aa80e0a86c24cc22eea60d3856f49596786036b5be144a9b9040513a8f9bb8727f0d3d6c1272d0841d9ac06e29cf721500ed016b961a1143442e3bf73e7b63bfedbe6a520501f8ea4a517c91defe5fb14096668cccf3289e7eb8930410dbb0824f988d27822c74a82939e3bc2c884ed45106ab50e535ba17b18bb2df84111f91ad54247fe36fd2ed97e92cab2644b2409630508b8fa0e1d62094dff61865b9e15a198c6ef532f5954d5981780a3257d2660c4ca8927f344ecd83ef2b9e30f00f5c4c52a1967ca72e7c052e68dac6631441b085304119f44e0f5428517213a62a0a29f4bb3347089267467e7094b3b8d26a7d3e42642f0b3024826cde790469e646e66c6cf47c068b0d143cbbf27f977966db21d03b31cd832ac0be55be9e7b47887f885bcb7240cfe93c9bfd9db88751bff321802e1a68f15b57fd78f2952c56cc2f78979d97945f9a966f34d16950cb958ab42a84c979056cda91569595bc26576b240aacadb5a35de30a769087ee9e34cd58180a2f21f7c1f168f623222118649347cf1fe9d698f7b94dde1146f30ea9948f023db04582e633a4b0b5f2185b0794c7c276e0e3e03296b41b6bd6f297313157913a89c1c53bc07e4cee2156603d1746cacd07f740867b034bac3c8d9c2336ca7bfcd0bd03bc0d4ee4413f30907728b5b18625ec9318f4b5c3e96045575e144fa853906afe96dce115e25f04ca557f998c692371b5639177bede709258aff94cc644d6ef54d37835ab2371b4e37b3d2db3e406af2d4638f00ae42468668853a3e7276c4d049490439e591ec6fd5cfc676468fd12bb74b34b0992701cfa24378e7af6f5a9a5fcad220268a790fb5c7623105f50ec57ab6a12f85b3b3c34969e10e22ee73955e3af1d9a12590a5d9b72297a9adaa34f92925f82c5a5473205760edde9312d2ac733a08c5984f6e0cd03f6840426aa9fd462c573af05a358f17e1184c5af8f52a8c59ac4f71c59422fbe58d9bdbf31eb0f2f7c9ad52d05b776d8783bf0871fb8cc395a875ccbde2ae047a6adebcfbe44ece8b86538f37fc6d0c7b44552680c1d37e8fade39a3419f70ea7334eb5925b8482854eb483a316ad6a2182c0b9d623f4942bd05efce8ffea502aad332fbf55b59f1e10061869606a4007d6edde844ae716e9a722e9a5e72807d1ed73e200eb45b0310d84201e1216a8b4ecb93642d474de191c41dfc5653e090a482e70d80b6ca29591482002107d67e566e421ce4172869bfc186c682b4b41ef9ec546fb722927facbb4299aaca40bcf25784f3cc0e97801b5217e20c03617e0d9c758d80b7b1267881e5aa409c6b712e8b4d7d2c077a65b96b196b2c0ac41588ce328b42dd35a34c3b5ce5ba9e0f87d652f8efa6f3dc6825afccf6457a4acea78815d71017621a177bce5fca77cf7f59e46e2142948881997e67415e876b989a3b3636583ea3ec0456a52c3a72c0c87bbdcead2e6178c675431caeaa6e821d7ce533f2ddf8ba4c9e69426d6aa3356f7e97a3efffb16898e6223f92270d2f69b1f394ba7b5da3373283e263f1ac96c0256267991ea5913c28f33746cc46a10407a7ef152990d8c5906044b055065d2d56e959d652542effc48c9636f39c34f4324a64e13a2a502864a3f5ff2d1b1857f6114891744bb2d61df5ca1996f7b6b8216b44a7bf40b1e289adc234ec204aeff8f4922f337d64e338d12976a59d129e817ddc39d4d7718d5e14a645afb298d507a7a56bd1368c533d5e94574346003902613dac2f49862bfaeb4504385ae0499c90b93301e75b129660f0c540877bc6035e0b08c117075e0548740aaa4ff58d2d5fdab598f1044ea10b730e7e6a311992397cf0983d90f5514a70125621470a597d6c53ab9a3204d3fb2510985afadc1d6a576234ec9a210e2f25bf68f7d4e3af145b90d7a3469e056c2723f3629709f500cb9d5166cde627613d78b1a2e8b9200335515472e395cb703ed4bf0a19080089e54f21ac56000036033c3d979ca2631022a99fab98eaaa834e4461ad98273f34314755cf5ed3be5007bb3b0182f583c4df71ef0d2243b697aa1898ccb0ef72d00212d5fda6bdf7bae14a8e7c1b790cc39ab0410d31315ee4db38fa53d182b15c175c8e63b6390e8ff83f1194030280876509aac6c9917e02dd4117a9d8fde6121e49fac31dc3947c0b3161bc08aa4140db37103b8cc0b92eb3a0157e657e4b5fdb2d92ce94407a0df12d9c7df2077c9b1923f46495c6952e40c59c90effe826f448c7b1da44970a25aff8857ca44b07b8baa06bd7e339f75707436d4906f1ee54ab3df8b9f5af4aa9861a6b42b02c7c3bdea0eda2d4339340fe7d743b055ae6406135a0ecf720f0ded9987e479979fb479e5009a454c324fd82a396cf15e9607caae0742d2cb6e8ce73ff0f87dbd99a6cd5fece70b77d6f5a6d3f1dc058aad72ea0902b7c2b2a40b47ff2ef5fa17d8cca6547704ed6b3a9de1d4e6b3605db371b4c4ea9125a5d544d4084402bbd7a409fd8ba84149c42ed8999f36d84c346dd52f144a6cb9434f4047c9715289c1f2884141c75fa646a4cdf2b0de744a8a282d8ab01e91b8dad56f645352be436d15f0cbac542f21c1af1e5534739cb70468ba37386d8a9080b1ea2289107cea8c8f4b925663c6303aba61679b87042dcda2cb844cb10e0b838c03801ac42c61bdbef99ae3a4d3ca405667b906cbe7ddcd4c34c44617afdf8e8db95656092e4e09d30ab7b1ad8c13936d342e85e472b086f1f716aec19abb536b57ff31120e40a062f1a8a2514de0e82795b0ea92880272ce55442ec6badd22d9046e5876ea95359de2d43e7be65d9e32e2dff70937fe0aa1be1bd800cd14ed914dca2f6c8365d36dd62b5470738bc029239935b5ec39eb0be541434af724f8143683c490b9cdd0093d470e217ca06feae958d08632420ca1f49b274f6e1d9e018618812cf9ed575db2ddcbbd4fc317cfb0a85eb7344104c92d5d5a100a583051a74d76c8869f478bcdc3e20f271c1e939f3b3a22f97ad09ead859d197199d4b6c5a2d9478fbe6f1e7e02a4883dcec4a23fa3959929aaad1d9a173db23914444e47855584cdef5a585568b8babd6664acce7ee2f6e91cd079178722cf51c59445b823b6edaec770f27d911d5c4fde4ad8dbcc3615a27d5f85bda5782de0a8d592bff757aecd9aca367c4f4308e3fe0666e8fc45ac3740339993f62e4d4b586cac107c67eb72cf8dbf1b932c725619473d7978038c6dd20bdb38742297433eea4d10539a3e2399c391d9353e2a567efbfdbb0a75a0a6447b42e34649c5f42f547b32e887d6804a1ac94859122c2cd9583bf35aff349d47a0c91277c85ce2e5a86c93b8ec61630be50ec6a8f5ab59ce8708eb36844f14bb0d1cbae20e4eb87a6b5eeb58ac9cbcbb6d58dfff4cecbfc84ea2b976814d9209d69c993e11364118943406930643dc96c0ade9466b5cd40ac352938c08e23bc258149f9dc6334b4e285edf479f6fd175ac1c1b6deaf90f9c7005bd53babb0b7c6a4c76ca522b67c35a5e58f6805277603c4920915a4be8210f4d4bc6c33f8c8ad70efac266f2d8727bbfcd4f0563ea31133e4145a3aa60eec590caa650ea9c09b174d5ca64b72db9749f2cba9a01cd0e450d73dac570783b668ffe0ae61230966818d5f80be8f78958005c13715035dbe25e2721c230238252375b39e1bfc48afbc8e52059df311a7aa5f612c772aa60b576e466e83bd8b31ecc05d97ec89b5e07ca5019f3fcc051e2bd8cbfd74e1ce4b44a53c9137aff286544b7cbeededeb95d51f3f73ebb0a5dc9c4bb3a937b3ae967897a54fb50f958e844dc654a4a84e15fedfb335675a5045c6aa01a448f81835e25d8719cfd5f59e1b78a197a88eab20459a1a8876c92e44335a8869b3a797a8ae84f1b428fea2c659a01ee8fba0d248dc6505e4393602c6f56d2914b812ed6d32c67b37d14594d1f4a3eb035fe80caba2ac57414f57ff5248dc471840fa21cfc3f15f316a4957882506b52c04c8f1c93f2b2ebf8b6195dce267755a9a3ad0adce4682900efe70de030fca1bfa89079658644456f0d98802e72a3b315648f423a076c0192afe87847e41df99f2554a64bfdfb170e3b6ac3003f1f901792625eefe10f9e444a7bbc4fadc802507d928837a780ad9f07aa4393982d3f926f28f982a5ab06236b845289bd2fba7f30c2dbb", 0xffc}, {&(0x7f00000013c0)="1c57c0db8c6ad4679e02696f0deb0442c0d47a12459593a9e901917e6c04567bab8cd0026a62744480ae448fe954724d1870cac39c42d4440071416605183a87e507c2d08326c40cdc2670ccbbb27ae238f02d2db83875376fb62ca3de6b852719bee91ce2017642ce6c", 0x6a}, {&(0x7f0000000040)="d2481fffad1d17", 0x7}], 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x440080, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) r4 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r7}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x4c}}, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m41.937794283s ago: executing program 0 (id=364): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd5", 0x27}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000180), 0x10001, 0x20800) 4m41.687019179s ago: executing program 32 (id=364): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd5", 0x27}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000180), 0x10001, 0x20800) 3m0.030492963s ago: executing program 3 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x400c080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 2m59.777222715s ago: executing program 3 (id=714): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x669f, 0x8, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x1, {0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000240)={0x50, 0xffffffffffffffda, r8, {0x7, 0x1f, 0x0, 0x2076012}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r9, 0x40806685, &(0x7f00000003c0)={{0x8, 0x9}, 'port0\x00', 0x93, 0x61406, 0x7a0, 0x0, 0x10, 0x81, 0x2, 0x0, 0x4, 0xf}) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x1020, 0x0, 0xfffffe0000000000, {0x400, 0x0, 0x5a, 0x9}}, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0xc, &(0x7f0000000100)=0x6a05, 0x4) 2m58.149269327s ago: executing program 3 (id=720): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000100)=""/166, 0xa6, 0x81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 2m56.61223589s ago: executing program 3 (id=725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 2m56.129484869s ago: executing program 3 (id=726): ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x2, 0x5, 0x2, 0x80000001, 0x400, 0x3, 0x1}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x200202, 0x0) r1 = timerfd_create(0x7, 0x800) timerfd_settime(r1, 0x3, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fsopen(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b801000"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_socket_connect_nvme_tcp() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x5c781) 2m54.326516351s ago: executing program 3 (id=731): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0xfffffffc, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x202, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0x6]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x6, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e, 0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x1}, 0x28) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x208000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0xb601, 0x200, 0x2, 0x9c3}, 0x0, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x7308, &(0x7f0000000640)={0x0, 0x602a, 0x8e2a, 0x1, 0x40000331}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{&(0x7f0000000300)}, {&(0x7f0000000500)="a586d62512bf60ae1618ae51b1dbe97489e29ec0ade9f4b336e3d95e8c0175be56ccdfd3697c627a50b2cd9698dbd0f58d594c780803f496d030128a5e6637695d7e84a0ebfe0ba573e5328f4a8650d73223200bf211d53f6f9d39487ea8d9efd51d653d0abf412faca1aa05babe9fe7ce6cc4", 0x73}, {&(0x7f00000005c0)="a5cf96f92745fbe43aa0854f3da9c526ef194a004559320cd35f38aadbcf517e1222a2e2e0a5c358c018d63e47c14a6d831837e2f57f2ef414ba0cdbc9c5180884aeee2dfbfcfaca792135806258464d2a1cb141618fe4fc34ca072ca05dda1058a847e0aa24e767e486b46c0c78dc8414096f83792b688bca69236ff02e42e6a034027c9b8ce86ae6a4e980849ac21c3f92e49cc9362fdf7d07b1d379c5b2e1b936bd88e854c04f8bda972da99043cdd9a051e0c917982cba05e37401749bad98f66ca788ddbd58adbe1e04f39d4a2b45fc63a9f745d8474d5c8466aecf1fd1e334de015af1", 0xe6, 0x3}]}, 0x3, 0x2}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x14, 0x12, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000005f000000000000000100000018000000018000000000000081000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x9, 0xee, &(0x7f0000000940)=""/238, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xa, 0x3, 0x10000}, 0x10, 0x0, r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x46, 0x0, 0x1}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0xd8802, 0x0) 2m53.892423033s ago: executing program 33 (id=731): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0xfffffffc, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x202, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0x6]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x6, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e, 0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x1}, 0x28) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x208000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0xb601, 0x200, 0x2, 0x9c3}, 0x0, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x7308, &(0x7f0000000640)={0x0, 0x602a, 0x8e2a, 0x1, 0x40000331}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{&(0x7f0000000300)}, {&(0x7f0000000500)="a586d62512bf60ae1618ae51b1dbe97489e29ec0ade9f4b336e3d95e8c0175be56ccdfd3697c627a50b2cd9698dbd0f58d594c780803f496d030128a5e6637695d7e84a0ebfe0ba573e5328f4a8650d73223200bf211d53f6f9d39487ea8d9efd51d653d0abf412faca1aa05babe9fe7ce6cc4", 0x73}, {&(0x7f00000005c0)="a5cf96f92745fbe43aa0854f3da9c526ef194a004559320cd35f38aadbcf517e1222a2e2e0a5c358c018d63e47c14a6d831837e2f57f2ef414ba0cdbc9c5180884aeee2dfbfcfaca792135806258464d2a1cb141618fe4fc34ca072ca05dda1058a847e0aa24e767e486b46c0c78dc8414096f83792b688bca69236ff02e42e6a034027c9b8ce86ae6a4e980849ac21c3f92e49cc9362fdf7d07b1d379c5b2e1b936bd88e854c04f8bda972da99043cdd9a051e0c917982cba05e37401749bad98f66ca788ddbd58adbe1e04f39d4a2b45fc63a9f745d8474d5c8466aecf1fd1e334de015af1", 0xe6, 0x3}]}, 0x3, 0x2}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x14, 0x12, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000005f000000000000000100000018000000018000000000000081000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x9, 0xee, &(0x7f0000000940)=""/238, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xa, 0x3, 0x10000}, 0x10, 0x0, r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x46, 0x0, 0x1}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0xd8802, 0x0) 2m0.760586872s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getcwd(&(0x7f0000000380)=""/121, 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0x16}, {0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x66, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x101}, 0x4040800) 1m40.5901708s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getcwd(&(0x7f0000000380)=""/121, 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0x16}, {0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x66, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x101}, 0x4040800) 1m17.853291908s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getcwd(&(0x7f0000000380)=""/121, 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0x16}, {0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x66, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x101}, 0x4040800) 1m2.8384353s ago: executing program 5 (id=1078): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = epoll_create(0x207) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000005600)={0x30000008}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) r3 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) 1m2.371851368s ago: executing program 5 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2=\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m\x11\x8b\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\x00\x00', 0x3) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(0x0, 0x0) r4 = dup2(r3, r3) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES8=r2, @ANYRES64=0x0], 0x1b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000d00000026000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000010073797a32000000000900030073840000000000000000"], 0x2c}}, 0xc800) 1m1.308275389s ago: executing program 5 (id=1083): gettid() r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/ipc\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x17f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000140)={0x17e}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000406010100000000000000000700000a0500010007000000050001000700000005000100070000000900020073797a3100000000aef8d4bcef6a81804eb155aa6a6172e0cfd2a8ce0954a3d7a95a015dea8cadb342523c95aba01db1971f5cb23bd35cc7ec0cff484d4d8c73ce258dce3913d81be29ce1968339f80d3ba9d391ffaa8d95a4d150390eef8320c2e05886b1a50137d59f8d212a08fadac6c9fab2f454900bf532b235d160401d9a93d624ffe1032d5c29772ac40899ffafadba33ce9974a52cfe909fee7ed79405e086d98cd290dd48c70b"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r8 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r8, 0x1, 0x9) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 1m0.531567567s ago: executing program 5 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) munmap(&(0x7f0000331000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)=[@pktinfo={{0x24, 0x29, 0x3e, {@loopback}}}], 0x28}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x78) io_uring_setup(0x1585, &(0x7f0000000040)={0x0, 0x729b, 0x1000, 0x1, 0x3d0}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 59.739951658s ago: executing program 5 (id=1088): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) (async) utime(0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async, rerun: 64) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="22120000021d1f400000000000000000f7fd8bf963fbe8a90a693528d48d4c7490e9c51366ea2e2c522bb2501e9086d6f2656e5681cdf8514859f5a22d734079ed642ff4a6040017efeec9e14be17d2b90deb844c230786f8d0c2b8f8cf696b08b3a29919b46977ff7a5af8d736d296d5e93c4ba127a3a1e68a9befdd67a77266c5350976f9bf8b64e709db13ce866f2b18196a68e2c160d63176fd0b67123b9aa000000"], 0x10}}, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) 59.509947544s ago: executing program 5 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1508000065ffff0010000008003950323030302e75"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r8, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x81, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000160029062abd7000fcdbdf25ac1e0101000000000000000000000000640101020000000000000000000000004e22d64c4e2300040200200073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x84, 0x2b, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400f10006000000000000000000000d0000000300f0ff00000000000000000000000000000000bea454"], 0x0, 0x42}, 0x20) r10 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r10, 0xc1205531, &(0x7f0000000040)=""/112) 55.634122883s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getcwd(&(0x7f0000000380)=""/121, 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0x16}, {0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x66, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x101}, 0x4040800) 44.177165028s ago: executing program 34 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1508000065ffff0010000008003950323030302e75"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r8, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x81, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000160029062abd7000fcdbdf25ac1e0101000000000000000000000000640101020000000000000000000000004e22d64c4e2300040200200073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x84, 0x2b, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400f10006000000000000000000000d0000000300f0ff00000000000000000000000000000000bea454"], 0x0, 0x42}, 0x20) r10 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r10, 0xc1205531, &(0x7f0000000040)=""/112) 42.098751012s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getcwd(&(0x7f0000000380)=""/121, 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0x16}, {0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x66, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x101}, 0x4040800) 28.42412659s ago: executing program 1 (id=1172): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x6000) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) mlock(&(0x7f0000f8b000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xdd) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f08e54cb8f1f0a70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001549000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000390000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094e89d3528d4bb470000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc2ad2e3655de02d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008964000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x6, {{0x75, 0x5, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000380)={0x1, 0x0, 0x1, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x1, 0x0) 25.167065264s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getcwd(&(0x7f0000000380)=""/121, 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0x16}, {0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x66, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x101}, 0x4040800) 24.051435733s ago: executing program 1 (id=1182): socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r1 = io_uring_setup(0x2dd3, &(0x7f00000000c0)={0x0, 0xedff, 0x2000, 0x0, 0x36f}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333, 0x0, r1}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = getpgrp(0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_GETNSID={0x54, 0x5a, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) syz_open_dev$MSR(&(0x7f0000000000), 0x80, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 24.046670691s ago: executing program 6 (id=1184): landlock_restrict_self(0xffffffffffffffff, 0x0) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis128l,cmac(tnepres))\x00'}, 0x58) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) getpid() (async, rerun: 32) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x2711, @host}, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x2400c010) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) io_setup(0x6, &(0x7f0000000540)) 23.769338493s ago: executing program 1 (id=1186): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x3) bpf$ITER_CREATE(0x22, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000076d000/0x3000)=nil, 0x3000, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='objagg_destroy\x00', r2}, 0x18) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_clone(0x4200011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x3e00, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x10, 0x66, 0xfb, 0x20, 0x7fa, 0x847, 0xb92f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x8, 0x80, 0x4, [{{0x9, 0x4, 0x59, 0x7, 0x1, 0x8c, 0x9a, 0x79, 0x32, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4e, 0x8, 0xff}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x140a}}, {0xfffffffffffffffa, &(0x7f00000000c0)=@string={0x84, 0x3, "35498d6e3c823c1cfa994dfe7270157af1528719de5ec881b29dc4d90bc7365e118160d638cd492c6bb8c63bf0cfe7baa406376ab1573476c2c2d874d72b343e53408bda3b02d6fe34aee026ee3f3ec0c69340d4d146b78ea4764de5df1453568d62fcdd02c6d65f61720ea9fe86fd9c5f16785434ed5d7bfb87a5bcd4cec27dacef"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x200a}}]}) 23.537674218s ago: executing program 6 (id=1188): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000180), &(0x7f0000000280)=r6}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r2, &(0x7f0000000480)="7eeb99b6f78ca44054798fa8d0e9", 0xe, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0xab53, "7fff05f791d0ab5e1be91211014a4d1e8b6048a113a9326a4baf21253830d6e1"}) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fe, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) fsmount(r7, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40048c4, 0x0, 0x0) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r10, 0x2007ffb) sendfile(r10, r10, 0x0, 0x1000000201005) 22.045628317s ago: executing program 1 (id=1192): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, @mcast2, 0x9, 0xd58, 0x3, 0x180, 0x38, 0x85420066}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x800) r3 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0xce}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000b80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 21.867175958s ago: executing program 6 (id=1193): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000140)={{0x8, 0xe}, 'port0\x00', 0x10, 0x1021, 0x80000001, 0x13, 0x11, 0x4, 0x8, 0x0, 0x2, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) io_setup(0x1, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)={0x1b4, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="faeaee48bcaef6da44fa327f698d7138"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bbe7977b74716943a03763b5e9c81bfb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a7ec9fa40a1f3fe1d50e4ae63e575ac55b785bd7a756d7c91ab3d67232e668f9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="75ef4b6ed2cbfb642604b408820820a1c52eba13101a15f4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6cd1699b8eab982edb4209c88a7ec52efe9e00e108fb4cf1524cf4ac72f4805d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x13}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="193c8bad4b43d0eb464c5b318ca7d86361c1937140b512e1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="00001f0000000000920000000500"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0a295adda342ca72580b03606534171365549875fe22fccc5facac146a3ffe8e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "54ff734dab0b5921"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="943ffdf98fed2332bf91d0a82504ac0dc2c600fb0a419610"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4fb54613fac31933566cb8ac54ee64c0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4554dc951153c42d186fbf0d8fa2391296c5c2e00dd262fbacdd4dc22b4e7515"}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4048101}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xfd, 0x9}}, 0x1c}}, 0x20000010) r4 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 21.843390731s ago: executing program 1 (id=1194): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f00000004c0)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/40, 0x28}], 0x2}, 0x8}, {{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)}], 0x1, &(0x7f00000005c0)=""/1, 0x1}, 0x7fffffff}, {{&(0x7f0000000600)=@in, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000780)=""/139, 0x8b}], 0x2}, 0x1}, {{&(0x7f0000000840), 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000980)=""/95, 0x5f}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000b40)=""/181, 0xb5}, {&(0x7f0000000c00)=""/229, 0xe5}], 0x5}, 0x7}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000a80)=""/49, 0x31}, {&(0x7f0000000e40)=""/82, 0x52}, {&(0x7f0000000ec0)=""/179, 0xb3}, {&(0x7f0000000f80)=""/227, 0xe3}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f0000001140)=""/105, 0x69}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/214, 0xd6}, {&(0x7f00000010c0)=""/18, 0x12}], 0x9, &(0x7f0000001480)=""/37, 0x25}, 0xa47}], 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447baaef8363dfb2a070"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) pipe(0x0) io_setup(0x4, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) 21.350457492s ago: executing program 7 (id=1196): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r2], 0x2c}}, 0x80) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) syz_open_dev$MSR(0xfffffffffffffffd, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r3, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 20.453475102s ago: executing program 2 (id=1197): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=r3, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4050080}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=r3, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4050080}, 0x0) 20.157176739s ago: executing program 1 (id=1198): socket$can_j1939(0x1d, 0x2, 0x7) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36]}}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)={@val={0xa}, @void, @eth={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x31}, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03"], 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000b00)) 20.126165787s ago: executing program 6 (id=1199): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_cmd={0x49, 0x10000, 0x4, 0x2, 0x5, 0x6, 0x6, 0x7, 0x7, 0x2, 0x6, 0x5d4c, 0x1, 0x2, 0x9, 0x0, [0x6, 0x4]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r3, 0x0, 0x94, &(0x7f00000007c0)='\x17Y\x03\x00\x00\x00\xd1?<.)[u\x84\xe0.+\xb4\xd4\x92\xbc\xe6\xce\xb2\x02\x00 \x00\xdd\xc08\xf1\xb7*\x84#-A\x96*\xfb\x11\x1a\xd3\xfd\x14\x00\x00\x00\x00\x00\x00\x00\x91\xb1\xaf\x85\x1c\x85\x1b\x96\xe8\xc0\x89_\x83g\x9f\xaf\x16\x00\x00\x00\xcf\xb7\xcb\xca\xb8\xc3WZ\x8bA\xd9Jmf\xa8\x9b\xbf+\xaff\x965\xacs\xc3\xb9\x0eZG\xcd\xfeo\x91\xc5\xcc\xba\xfc\xba\xe7\"\xd9\xb5\xf7\xc9\xb2\xf7E\xaeD:\x18S\xe8\xc0as\xe4t\xfd\xd1\xf1\xc8\xa8\x10\xd9M\x16Ro\xe9\xa9|\x9a\xdd['}, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r8 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c746572040000000000000000000000000000000000000000000018000004"], 0x68) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 20.102036789s ago: executing program 2 (id=1200): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4000010, 0xffffffffffffffff, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_io_uring_setup(0x247a, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffc}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x5) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011e6000000bd7000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="10800000a1020600"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xa}, &(0x7f0000000240)=0x8) setfsuid(0xee01) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0680, 0x0) ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f0000000080)=0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r9, 0x40187014, &(0x7f0000000180)) 19.577299206s ago: executing program 2 (id=1201): epoll_create1(0x0) eventfd2(0x3, 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c0000001200000425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08010300bb32ac4b08000f00080000000800040010000000080004000300000008001300", @ANYRES32=r1, @ANYBLOB="140012800b0001006c6f7770616e00000400028024002b8008000100", @ANYRES32, @ANYBLOB="177328171814ffff5abc1f7e5648fc477f523145532c82b3d40ff3495b11712debdaba9cb0f3fd97e6201104c7da930901", @ANYRES64=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000300030000000a000200aaaaaaaaaabb000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r7, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) close_range(r8, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19.547309063s ago: executing program 7 (id=1202): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) 19.352401056s ago: executing program 7 (id=1203): mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000000c0)={0x0, 0x0, 0x180000}, 0x20) (async) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) (async) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async, rerun: 64) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) fcntl$setlease(r0, 0x400, 0x2) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) 18.757337556s ago: executing program 7 (id=1204): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x3, 0x87, {0x87, 0x9, "c4c8ef48343ec8c6c07775c16d751a6bd24b89c498001563fc99a65ee3a21e3b2fedf6f1d72a77cd59edb74a6abc87038ca064e592ac0363f3a55902f33580063fec92a06a15f13f02369597a6f42557b99853b83a8cf70d41f08f84d77a71a3f1a62e8e7d8ccc57f2938d4894558e94da8839e90b138ab11cc3cf9f9eef8decee5d1b20c2"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0xe2, 0xf8, "0038ba21", "a56269f6"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6a, 0x60, 0x2, 0x2, 0x0, 0x9, 0xfff6}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x8, 0x100, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "f506"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="fb3875764872"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "ab85"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xf71c}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x86}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0xffffffffffffff30, &(0x7f0000000080)={0x40, 0xe, 0x1b, "c65c040000002354c9f28940aa00"/27}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x3, 0x87, {0x87, 0x9, "c4c8ef48343ec8c6c07775c16d751a6bd24b89c498001563fc99a65ee3a21e3b2fedf6f1d72a77cd59edb74a6abc87038ca064e592ac0363f3a55902f33580063fec92a06a15f13f02369597a6f42557b99853b83a8cf70d41f08f84d77a71a3f1a62e8e7d8ccc57f2938d4894558e94da8839e90b138ab11cc3cf9f9eef8decee5d1b20c2"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0xe2, 0xf8, "0038ba21", "a56269f6"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6a, 0x60, 0x2, 0x2, 0x0, 0x9, 0xfff6}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x8, 0x100, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "f506"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="fb3875764872"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "ab85"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xf71c}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x86}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0xffffffffffffff30, &(0x7f0000000080)={0x40, 0xe, 0x1b, "c65c040000002354c9f28940aa00"/27}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 18.611146427s ago: executing program 2 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) write$P9_RVERSION(r1, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r3], 0x15) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000280)=""/98, 0x62}], 0x1, 0x7, 0x9) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 17.813164689s ago: executing program 6 (id=1206): r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 17.176911631s ago: executing program 6 (id=1207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd80, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x34, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x24, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc67f59cf9deb6eae}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001d0000000c000600010000fb0000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000002200)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYRESDEC=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff64}, 0x94) r14 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r14, 0x5) r15 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r15}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000100e3bd7000fedbdf2500000000000000000000000000000001000004d30a00589de6000000000000000000000000000000000001ff030000ff34000008000b0000"], 0x48}}, 0x0) flock(r16, 0x2) socket$l2tp6(0xa, 0x2, 0x73) 16.881342947s ago: executing program 7 (id=1208): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051b7f020510452516aaa0102030209021b0001010010000904"], 0x0) (async) syz_usb_connect(0x4, 0x760, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xfc, 0xb, 0xd0, 0x10, 0x1b3d, 0x1c5, 0x1e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74e, 0x2, 0x9, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x5, 0xf, 0x98, 0x2d, 0xdc, 0xcf, [@hid_hid={0x9, 0x21, 0x9, 0xa, 0x1, {0x22, 0xdde}}, @generic={0x74, 0x22, "06e307e85214cd75e4044402d0f0a490ad511e12240c77aa2d98acad6fb7d0ec86cdb7e27838a9c8bd79105387e602a2f662c2a455d31607a469a0253a6c482fe9496a0bec1c2a64d3209e57a2568566ebfd601780aec35e282189542b4e19504279ed6ce63c294aa7346cde400a72b372b3"}], [{{0x9, 0x5, 0xd, 0x3, 0x20, 0x7f, 0x62, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x0, 0xfffe}]}}, {{0x9, 0x5, 0x9, 0x3, 0x220, 0x3, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x79f, 0x1, 0xd, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0x40, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x401}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x0, 0x0, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x81}, @generic={0xeb, 0x2e, "c0315480c40c3defdd7d5f03ae0146d6a6dd4b2cbaeffaf782454856cb3689455d5423b4114320786b5b39d92fb4b6a3b33c758e67f7e84fa2ea47538de02b11c9832a767aeb80e08497bcb2e1aea2b80e13528e1e9d07050cf97936a8247d3527311360b0aabdf2f70e6d465118cbbb7854d22f83d99bfb373f7d018f1b3a90591f18c26517a21d54bed3b649d9d88a2a5efa0b042fb653505b2261dc0b3d366ebf31ad4a08a6693e1d55b0fecda166dcf14a0d861127bbfc82b4101ccdb6ee55e98cba81a9de1e8506b580336b62bbdea2ed173293374546aba41cafa1a9d66b650b5f18a2232ea5"}]}}, {{0x9, 0x5, 0x73cf766dfd9cf1b4, 0x0, 0x200, 0x3, 0xff, 0x2, [@generic={0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x2, 0xfb, 0xe, [@generic={0x61, 0x5, "e741d9aa3d351ad96921214da92935b8fce60b74711977faff034ae4887e64d27b62b69984fe3f47b902773e6cc618cfb0c38f31b02e7c5962c36b5b984b7ae58f7fd4d93712d6b9dc2b71f932e2c0005bf8d11a69cf4f6c467f306f7364ff"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x3cf, 0x5, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xe}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xb, 0xa}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x4d, 0xff, 0x3}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x0, 0x7, [@generic={0xf5, 0x3, "9cc1eacde0f3e3079c0c67558917790f0fd5c1084c8668237c225a2a47bd5683c2b60c367b4679b29e008b024ef522e97e86b68df5e4989cc7e6f964eca4885b24f2377f8ba1d2d5b9bc15a422c3a2e1b944500c05c67177691cd8435c263553d2369320d9e00c9c4ca4ebe49c7b62420f8d06e3c1f10f6221a84e21b7b66593c53cf65805b8e3250280b62fe6c507eb4c4075ff81809223b185aa358390e3a1a919eb472535c999a5ce2f9e481619454696d9568bbe2733535bdc65b3f8d7d0551c0b47e9cbc6d3dfa32afbf53696338ad7fc940210051ad1b835d394152986e931a8542f349b89aa651b12c9de65a0cc0877"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0xc9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x7, 0x9}, @generic={0xa5, 0xc, "c44c680affacf86f081d86bbebcb16fb8b0699d9aa67e35932f0ab7e1c9b062db26663e3f5213cc1e7431ad28303361577678e1f3a2c342ae08cd9a0a98a40d6b56ecd1f68359337ee18abfa756b9c113264cdebd5a60e644d7458abfce34fecce2cdcb326b6e517ee6de87a90cd5f5161050c06f86929c263d5fdb26f7df251b430460afa1b078eb4b1a52dafb2d321d228fffb48511f529caf9a8f74601335878d10"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf6, 0x7}]}}]}}, {{0x9, 0x4, 0x47, 0x1, 0xb, 0xa, 0xdc, 0x4a, 0xd, [@hid_hid={0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x751}}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0x6, 0xa, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xd1c}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6a, 0x6b5}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x3, 0x8e, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf8, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x8, 0x7, 0x5c, [@generic={0xdd, 0x11, "690745fa313366c3dbe3998def6661ec6031898969dfa5d2d908ae6bf8397d8c8d059c4eb2a0023c72f09cf9fdc79a780ce620a8662bc711b3fdcb007cb7507513d458c07483834fe4dcfd182051441515700d7629654674cfb0800837a9cd9a1bf70616baa437e646e99178a61c32dcd689180d5d353604ff907e2f332c96879d989b55b3c7a9b6857cc4feda8e4ae73af17d2aaf7182a5f901311e4db58f8d05b02890790f8f193c55ab5915dad5a7bd63c2c16b635b6c0244e219f4679ac2a0c9efff5d620ba57bfacecf70689d40148e33ad1765d01d8c3960"}, @generic={0xbd, 0x10, "dfff097d60c9f1195af9a97bc7c4eff798f0fb4b937cee62ce1be83752519f010a68de6f5be992de0319028570a097b6f8ce53068ec2d62cebad41021086f0a6e99c9f6732e3295d446dcff500311b2fd0ac3dc264b518d6fb76d0329ae2d0ee319e8623c8581d57b07753eb8e2168385c88ef494da42b348a2382f34f6b4c7e11b649477752e58cae3eda6b0c6389067c1d01e09150b60f5c7f1c1814e2ac370e01dbd3094916db8c2b790bd056b3a703c739cd1f13d2949e2889"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xd, 0xf, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x8, 0xfe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @generic={0xd8, 0xb, "495e4d0c078223447bf46f703a6aaea08851af6198c6bb8e609f8c4ac1826f0fb2416a192ee2120a968612531904e00343b05690d083a0c398d18ca425873defd1c7ab6967fcacd9ba3aadaacf1a0bfdcff2231f2c6f467bebc928abac402fcb81354e559667626990efb224313db823f0846e5481f5d6e8f15b1b2080005184e8bb66f81200d7b91c1f3e5282ecaf0d231a9425fb03549d3ac8ec8706141657437bef1ea5af741c874b89b1fb10eab5f06d9f8fcc363228bfb5b5e6c076bb9ceb1e5cb724e17505b3abfb961b9ed57b7f97fb5239e7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xe6, 0x9, 0x40}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0xf7, 0x2, 0x1f}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x7e, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x23, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xbd, 0x4f6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x72, 0x2, 0x20}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x9, 0x7}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xd, 0x4, 0x8, 0xff, 0x40}, 0x4b, &(0x7f0000000800)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xe2, 0xf00, 0x0, [0x1bf00, 0xff3f00, 0xc030, 0x30, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x7, 0x2, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x36, "4fe7a5e694ad9af68a3820d5d2ff57f5"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x3, 0x24}]}, 0x6, [{0x2e, &(0x7f0000000880)=@string={0x2e, 0x3, "c11a8abea489540e7656b7180075e0e63d6520bc4c093d84d42946c3f984a078ea479debbdf4c96b95548b93"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x5d, &(0x7f0000000900)=@string={0x5d, 0x3, "081dd00db4dd4f3ec017e37ab246e7be38fb371e6f2cbda7e1540f30b7f7e373592fad9c75104813bea45edd065d02aaa3c344be62df85828144eb69c1cc19f7c62cfc02d10ec425ff6dd97011369499775296a357fada08bcd772"}}, {0x6d, &(0x7f0000000980)=@string={0x6d, 0x3, "7ae0ce2c2a8c62bf1de2aac6396076e2dea1d8f9bf3deae8a58ea6295c3af35a1b431fa606f16c4a59179bdb6c20cf4b09b3407c4a9cf1c95f370b4be7f3b4292419e9da948be793660293ad4693f0e977e78d13470cb7c8386129c75d5b6e771066d59e563e7e4df3dd85"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4}}, {0x92, &(0x7f0000000a40)=@string={0x92, 0x3, "6515709f82285eef908ccf2186f69d3dbf5c75340e5fecc07ae15e48c8c81df74d6ae971eed71a04346933f02795fbba7f289c7c65df25ba90d18c718c4edc24eb71746480919cda59373a53182121157523a3b3901547338e483c87d11ebd58cb8021cff1caa06aad9f8adfda3ed17ca21fea61cdc92d5d6fefd4e544eb267359fcce04505d00e0044d82e0c472a72e"}}]}) 15.916657778s ago: executing program 2 (id=1209): r0 = socket(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$TIOCVHANGUP(r2, 0x8905, 0x1000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00'}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 15.586073837s ago: executing program 2 (id=1210): fsopen(0x0, 0x1) (async) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 32) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) shmdt(0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f0000006300)={0x2020}, 0x2020) 15.449465741s ago: executing program 7 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffffff5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x1) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000090d000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgrp(0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r4, &(0x7f0000000080), 0x4001) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4a9, @remote, 0xd5b}}, 0x24) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000611000/0x2000)=nil, 0x2000}}) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 5.106260177s ago: executing program 35 (id=1198): socket$can_j1939(0x1d, 0x2, 0x7) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36]}}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)={@val={0xa}, @void, @eth={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x31}, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03"], 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000b00)) 1.585728114s ago: executing program 36 (id=1207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd80, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x34, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x24, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x5c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc67f59cf9deb6eae}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001d0000000c000600010000fb0000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000002200)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYRESDEC=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff64}, 0x94) r14 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r14, 0x5) r15 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r15}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000100e3bd7000fedbdf2500000000000000000000000000000001000004d30a00589de6000000000000000000000000000000000001ff030000ff34000008000b0000"], 0x48}}, 0x0) flock(r16, 0x2) socket$l2tp6(0xa, 0x2, 0x73) 103.363333ms ago: executing program 37 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffffff5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x1) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000090d000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgrp(0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r4, &(0x7f0000000080), 0x4001) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4a9, @remote, 0xd5b}}, 0x24) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000611000/0x2000)=nil, 0x2000}}) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 38 (id=1210): fsopen(0x0, 0x1) (async) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 32) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) shmdt(0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f0000006300)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): B device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.752686][ T5945] usb 6-1: Product: syz [ 417.755362][ T5906] usb 7-1: config 0 has no interface number 0 [ 417.756854][ T5945] usb 6-1: Manufacturer: syz [ 417.776227][ T5906] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 417.796440][ T5945] usb 6-1: SerialNumber: syz [ 417.807381][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.830066][ T5945] cdc_mbim 6-1:1.0: skipping garbage [ 417.830302][ T6731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.916321][ T5906] usb 7-1: Product: syz [ 417.935570][ T5906] usb 7-1: Manufacturer: syz [ 417.946158][ T5906] usb 7-1: SerialNumber: syz [ 417.962921][ T5906] usb 7-1: config 0 descriptor?? [ 417.991908][ T5906] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 418.036160][T11064] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 418.253167][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 418.253182][ T30] audit: type=1400 audit(1751957931.114:1163): avc: denied { name_bind } for pid=11071 comm="syz.6.980" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 418.280860][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.295252][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.305112][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.318458][ T30] audit: type=1400 audit(1751957931.144:1164): avc: denied { create } for pid=11071 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.341511][ T30] audit: type=1400 audit(1751957931.144:1165): avc: denied { write } for pid=11071 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.362417][ T30] audit: type=1400 audit(1751957931.154:1166): avc: denied { write } for pid=11071 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 418.534662][ T6731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.610652][ T30] audit: type=1400 audit(1751957931.464:1167): avc: denied { create } for pid=11093 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 418.638542][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.655844][T11064] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 418.669393][ T30] audit: type=1400 audit(1751957931.494:1168): avc: denied { ioctl } for pid=11093 comm="syz.1.986" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 418.669496][ T6731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.695902][ T5945] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 418.714099][ T5945] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 418.717348][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.730672][ T5945] wwan wwan0: port wwan0mbim0 attached [ 418.800575][ T5945] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, d6:5f:f2:83:55:32 [ 418.830475][ T6731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.976680][ T30] audit: type=1400 audit(1751957931.834:1169): avc: denied { read } for pid=11100 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 418.986664][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 419.012815][ T30] audit: type=1400 audit(1751957931.854:1170): avc: denied { open } for pid=11100 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 419.029672][T11064] Cannot find set identified by id 3 to match [ 419.053848][ T30] audit: type=1400 audit(1751957931.874:1171): avc: denied { ioctl } for pid=11062 comm="syz.5.978" path="socket:[30052]" dev="sockfs" ino=30052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.064814][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.089947][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.347941][T11104] batman_adv: batadv0: Adding interface: dummy0 [ 419.354352][T11104] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.380456][T11104] batman_adv: batadv0: Interface activated: dummy0 [ 419.519583][ T30] audit: type=1400 audit(1751957932.094:1172): avc: denied { create } for pid=11098 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 419.573351][ T5906] gspca_spca1528: reg_w err -110 [ 419.579048][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.601458][ T5945] usb 6-1: USB disconnect, device number 36 [ 419.608299][ T5906] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 419.608528][ T5945] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 419.634003][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.645207][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.653034][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.663522][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 419.706226][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.724577][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.737893][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.747024][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.813817][ T24] usb 3-1: config 0 descriptor?? [ 419.828240][T11097] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 419.841858][ T5945] wwan wwan0: port wwan0mbim0 disconnected [ 419.956189][T11100] lo speed is unknown, defaulting to 1000 [ 420.102039][ T5906] usb 7-1: USB disconnect, device number 12 [ 420.104973][ T6731] bridge_slave_1: left allmulticast mode [ 420.134923][ T6731] bridge_slave_1: left promiscuous mode [ 420.145509][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.182911][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 420.192753][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 420.240200][ T6731] bridge_slave_0: left allmulticast mode [ 420.241464][ T24] usb 3-1: USB disconnect, device number 39 [ 420.274447][ T6731] bridge_slave_0: left promiscuous mode [ 420.290589][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.244613][T11143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.509110][T11150] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.996'. [ 421.542639][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 421.708125][ T5839] Bluetooth: hci1: command tx timeout [ 421.809876][ T6731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.828296][ T6731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.842167][ T6731] bond0 (unregistering): Released all slaves [ 421.884057][ T24] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 422.066416][ T24] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 422.078137][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.122407][ T24] usb 6-1: config 0 descriptor?? [ 422.365825][ T6731] hsr_slave_0: left promiscuous mode [ 422.371707][ T6731] hsr_slave_1: left promiscuous mode [ 422.396625][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.426148][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.509544][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.566296][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.583491][ T5906] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 422.798437][ T5906] usb 7-1: not running at top speed; connect to a high speed hub [ 422.884841][ T5906] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.947375][ T6731] veth1_macvtap: left promiscuous mode [ 423.023854][ T6731] veth0_macvtap: left promiscuous mode [ 423.043117][ T5906] usb 7-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 423.117874][ T6731] veth1_vlan: left promiscuous mode [ 423.157475][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.183057][ T6731] veth0_vlan: left promiscuous mode [ 423.251708][ T5906] usb 7-1: Product: syz [ 423.299059][ T5906] usb 7-1: Manufacturer: syz [ 423.343915][ T5906] usb 7-1: SerialNumber: syz [ 423.756955][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 423.756971][ T30] audit: type=1400 audit(1751957936.614:1180): avc: denied { write } for pid=11161 comm="syz.6.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.787237][ T5839] Bluetooth: hci1: command tx timeout [ 423.813510][ T5906] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 423.857431][ T5906] usb 7-1: USB disconnect, device number 13 [ 423.862381][ T2330] pvrusb2: Invalid write control endpoint [ 423.876490][ T24] pegasus 6-1:0.0: can't reset MAC [ 423.884010][ T24] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 423.900424][ T24] usb 6-1: USB disconnect, device number 37 [ 423.925292][ T30] audit: type=1400 audit(1751957936.644:1181): avc: denied { nlmsg_write } for pid=11161 comm="syz.6.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 424.031398][ T2330] pvrusb2: Invalid write control endpoint [ 424.033796][ T30] audit: type=1400 audit(1751957936.714:1182): avc: denied { ioctl } for pid=11182 comm="syz.2.1002" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.074127][ T2330] pvrusb2: Invalid write control endpoint [ 424.079894][ T2330] pvrusb2: Invalid write control endpoint [ 424.112536][ T2330] pvrusb2: Invalid write control endpoint [ 424.118357][ T30] audit: type=1400 audit(1751957936.734:1183): avc: denied { ioctl } for pid=11148 comm="syz.5.997" path="socket:[30840]" dev="sockfs" ino=30840 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 424.156412][ T2330] pvrusb2: Invalid write control endpoint [ 424.162193][ T2330] pvrusb2: Invalid write control endpoint [ 424.195918][ T2330] pvrusb2: Invalid write control endpoint [ 424.201704][ T2330] pvrusb2: Invalid write control endpoint [ 424.223294][ T2330] pvrusb2: Invalid write control endpoint [ 424.229055][ T2330] pvrusb2: Invalid write control endpoint [ 424.235067][ T2330] pvrusb2: Invalid write control endpoint [ 424.240807][ T2330] pvrusb2: Invalid write control endpoint [ 424.246721][ T2330] pvrusb2: Invalid write control endpoint [ 424.252480][ T2330] pvrusb2: Invalid write control endpoint [ 424.258326][ T2330] pvrusb2: Invalid write control endpoint [ 424.269099][ T2330] pvrusb2: Invalid write control endpoint [ 424.320781][ T2330] pvrusb2: Invalid write control endpoint [ 424.340060][ T2330] pvrusb2: Invalid write control endpoint [ 424.373643][ T2330] pvrusb2: Invalid write control endpoint [ 424.379741][ T30] audit: type=1400 audit(1751957937.234:1184): avc: denied { setopt } for pid=11195 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 424.446653][ T2330] pvrusb2: Invalid write control endpoint [ 424.465309][ T30] audit: type=1400 audit(1751957937.234:1185): avc: denied { connect } for pid=11195 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 424.477060][ T2330] pvrusb2: Invalid write control endpoint [ 424.551808][ T2330] pvrusb2: Invalid write control endpoint [ 424.595851][ T2330] pvrusb2: Invalid write control endpoint [ 424.601631][ T2330] pvrusb2: Invalid write control endpoint [ 424.624541][ T2330] pvrusb2: Invalid write control endpoint [ 424.658140][ T2330] pvrusb2: Invalid write control endpoint [ 424.689426][ T2330] pvrusb2: Invalid write control endpoint [ 424.714530][ T2330] pvrusb2: Invalid write control endpoint [ 424.728268][T11206] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 424.744841][ T2330] pvrusb2: Invalid write control endpoint [ 424.772562][ T2330] pvrusb2: Invalid write control endpoint [ 424.785672][ T2330] pvrusb2: Invalid write control endpoint [ 424.801651][ T2330] pvrusb2: Invalid write control endpoint [ 424.882671][ T5944] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 424.982858][ T2330] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 425.067665][ T2330] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 425.096832][ T2330] pvrusb2: Invalid write control endpoint [ 425.117548][ T2330] pvrusb2: Invalid write control endpoint [ 425.124801][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 425.152235][ T2330] pvrusb2: Invalid write control endpoint [ 425.160106][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.170422][ T2330] pvrusb2: Invalid write control endpoint [ 425.176512][ T2330] pvrusb2: Invalid write control endpoint [ 425.182377][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 425.192554][ T2330] pvrusb2: Invalid write control endpoint [ 425.198346][ T30] audit: type=1400 audit(1751957938.044:1186): avc: denied { write } for pid=11216 comm="syz.6.1009" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 425.200362][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.229432][ T2330] pvrusb2: Invalid write control endpoint [ 425.237366][ T2330] pvrusb2: Invalid write control endpoint [ 425.243609][ T2330] pvrusb2: Invalid write control endpoint [ 425.252216][ T2330] pvrusb2: Invalid write control endpoint [ 425.262246][ T2330] pvrusb2: Invalid write control endpoint [ 425.280842][ T5944] usb 2-1: config 0 descriptor?? [ 425.286029][ T2330] pvrusb2: Invalid write control endpoint [ 425.295660][ T2330] pvrusb2: Invalid write control endpoint [ 425.308929][ T2330] pvrusb2: Invalid write control endpoint [ 425.348337][ T2330] pvrusb2: Invalid write control endpoint [ 425.361722][ T2330] pvrusb2: Invalid write control endpoint [ 425.387684][ T2330] pvrusb2: Invalid write control endpoint [ 425.406632][ T2330] pvrusb2: Invalid write control endpoint [ 425.414430][ T2330] pvrusb2: Invalid write control endpoint [ 425.440034][ T2330] pvrusb2: Invalid write control endpoint [ 425.446192][ T2330] pvrusb2: Invalid write control endpoint [ 425.456446][ T2330] pvrusb2: Attached sub-driver cs53l32a [ 425.515273][ T30] audit: type=1400 audit(1751957938.374:1187): avc: denied { execute } for pid=11203 comm="syz.1.1006" name="file0" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 425.553670][ T2330] pvrusb2: Invalid write control endpoint [ 425.567422][ T2330] pvrusb2: Invalid write control endpoint [ 425.591721][ T30] audit: type=1400 audit(1751957938.424:1188): avc: denied { execute_no_trans } for pid=11203 comm="syz.1.1006" path="/209/file0" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 425.618075][ T2330] pvrusb2: Invalid write control endpoint [ 425.638655][ T2330] pvrusb2: Invalid write control endpoint [ 425.649611][ T6731] team0 (unregistering): Port device team_slave_1 removed [ 425.657320][ T2330] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 425.686361][T11225] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1011'. [ 425.690694][ T2330] pvrusb2: Device being rendered inoperable [ 425.695667][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1011'. [ 425.701790][ T2330] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 425.851577][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.860161][ T2330] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 425.862661][ T5839] Bluetooth: hci1: command tx timeout [ 425.921923][ T6731] team0 (unregistering): Port device team_slave_0 removed [ 425.933959][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.145938][ T5944] logitech 0003:046D:C211.0015: unknown main item tag 0x1 [ 426.166836][ T5944] logitech 0003:046D:C211.0015: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.1-1/input0 [ 426.218597][ T5944] logitech 0003:046D:C211.0015: no inputs found [ 426.632354][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.648469][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.883030][ T5944] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 426.893836][T11233] Attempt to restore checkpoint with obsolete wellknown handles [ 427.054689][ T5944] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.068281][ T5944] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.094669][ T5944] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 427.118728][ T5944] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.150175][ T5944] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 427.162045][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 427.176671][ T5944] usb 7-1: SerialNumber: syz [ 427.205381][T11229] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 427.226844][ T5944] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 427.247332][ T5944] usb-storage 7-1:1.0: USB Mass Storage device detected [ 427.264582][ T30] audit: type=1400 audit(1751957940.094:1189): avc: denied { mounton } for pid=11232 comm="syz.2.1013" path="/247/file0/file0" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 427.300359][ T5944] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 427.426540][ T24] usb 7-1: USB disconnect, device number 14 [ 428.181261][ T5839] Bluetooth: hci1: command tx timeout [ 428.232793][T11100] chnl_net:caif_netlink_parms(): no params data found [ 428.391148][T11250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1015'. [ 429.424287][ T30] audit: type=1400 audit(1751957941.264:1190): avc: denied { write } for pid=11247 comm="syz.2.1015" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 431.114786][ T43] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 431.390157][ T43] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 431.400089][ T43] usb 3-1: config 0 has no interface number 0 [ 431.863882][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=e0.91 [ 431.906267][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.930384][ T43] usb 3-1: Product: syz [ 431.940123][ T43] usb 3-1: Manufacturer: syz [ 431.964980][ T43] usb 3-1: SerialNumber: syz [ 432.000830][ T43] usb 3-1: config 0 descriptor?? [ 432.082703][T11100] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.112833][ T43] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 432.127880][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.168524][T11100] bridge_slave_0: entered allmulticast mode [ 432.180029][T11100] bridge_slave_0: entered promiscuous mode [ 432.197596][T11100] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.205328][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.212824][T11100] bridge_slave_1: entered allmulticast mode [ 432.220458][T11100] bridge_slave_1: entered promiscuous mode [ 432.327934][ T43] sonixb 3-1:0.242: Error reading register 00: -71 [ 432.378461][ T43] usb 3-1: USB disconnect, device number 40 [ 432.456813][ T30] audit: type=1400 audit(1751957945.274:1191): avc: denied { bind } for pid=11279 comm="syz.5.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.848836][ T30] audit: type=1400 audit(1751957945.274:1192): avc: denied { setopt } for pid=11279 comm="syz.5.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.874593][ T30] audit: type=1400 audit(1751957945.294:1193): avc: denied { create } for pid=11279 comm="syz.5.1019" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 432.898430][ T30] audit: type=1400 audit(1751957945.304:1194): avc: denied { create } for pid=11279 comm="syz.5.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 432.915821][T11100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.954135][T11100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.025564][T11100] team0: Port device team_slave_0 added [ 433.039757][T11100] team0: Port device team_slave_1 added [ 433.075927][ T30] audit: type=1400 audit(1751957945.934:1195): avc: denied { getopt } for pid=11289 comm="syz.6.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 433.149311][ T30] audit: type=1400 audit(1751957946.004:1196): avc: denied { unlink } for pid=7482 comm="syz-executor" name="file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 433.241532][T11100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.278875][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.308281][T11100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.328097][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 433.339179][T11100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.346498][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.372919][T11100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.437935][T11100] hsr_slave_0: entered promiscuous mode [ 433.445627][T11100] hsr_slave_1: entered promiscuous mode [ 433.452530][ T5944] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 433.463045][ T43] usb 7-1: device descriptor read/64, error -71 [ 433.471946][T11297] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1022'. [ 433.502856][T11297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1022'. [ 433.512149][T11297] FAULT_INJECTION: forcing a failure. [ 433.512149][T11297] name failslab, interval 1, probability 0, space 0, times 0 [ 433.540963][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.2.1022 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 433.540990][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.541000][T11297] Call Trace: [ 433.541006][T11297] [ 433.541013][T11297] dump_stack_lvl+0x16c/0x1f0 [ 433.541042][T11297] should_fail_ex+0x512/0x640 [ 433.541070][T11297] should_failslab+0xc2/0x120 [ 433.541097][T11297] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 433.541121][T11297] ? skb_clone+0x190/0x3f0 [ 433.541156][T11297] skb_clone+0x190/0x3f0 [ 433.541180][T11297] netlink_deliver_tap+0xabd/0xd30 [ 433.541213][T11297] netlink_unicast+0x6b2/0x7f0 [ 433.541233][T11297] ? __pfx_netlink_unicast+0x10/0x10 [ 433.541258][T11297] netlink_ack+0x696/0xb80 [ 433.541282][T11297] netlink_rcv_skb+0x332/0x420 [ 433.541299][T11297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.541326][T11297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.541353][T11297] ? netlink_deliver_tap+0x1ae/0xd30 [ 433.541385][T11297] netlink_unicast+0x53a/0x7f0 [ 433.541405][T11297] ? __pfx_netlink_unicast+0x10/0x10 [ 433.541420][T11297] ? __build_skb_around+0x278/0x3b0 [ 433.541445][T11297] netlink_sendmsg+0x8d1/0xdd0 [ 433.541465][T11297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.541493][T11297] sock_sendmsg+0x3cc/0x470 [ 433.541511][T11297] ? __pfx_sock_sendmsg+0x10/0x10 [ 433.541525][T11297] ? __lock_acquire+0x622/0x1c90 [ 433.541559][T11297] splice_to_socket+0xaf6/0x1110 [ 433.541597][T11297] ? __pfx_splice_to_socket+0x10/0x10 [ 433.541628][T11297] ? inode_has_perm+0x16f/0x1d0 [ 433.541672][T11297] ? bpf_lsm_file_permission+0x9/0x10 [ 433.541699][T11297] ? security_file_permission+0x71/0x210 [ 433.541724][T11297] ? rw_verify_area+0xcf/0x680 [ 433.541742][T11297] ? __pfx_splice_to_socket+0x10/0x10 [ 433.541767][T11297] do_splice+0x1478/0x1fc0 [ 433.541791][T11297] ? __lock_acquire+0x622/0x1c90 [ 433.541816][T11297] ? __pfx_do_splice+0x10/0x10 [ 433.541836][T11297] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 433.541859][T11297] ? find_held_lock+0x2b/0x80 [ 433.541883][T11297] __do_splice+0x32a/0x360 [ 433.541908][T11297] ? __pfx___do_splice+0x10/0x10 [ 433.541928][T11297] ? __fput_deferred+0x420/0x480 [ 433.541955][T11297] __x64_sys_splice+0x187/0x250 [ 433.541986][T11297] do_syscall_64+0xcd/0x4c0 [ 433.542013][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.542031][T11297] RIP: 0033:0x7fe7b5b8e929 [ 433.542046][T11297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.542062][T11297] RSP: 002b:00007fe7b697f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 433.542080][T11297] RAX: ffffffffffffffda RBX: 00007fe7b5db6080 RCX: 00007fe7b5b8e929 [ 433.542091][T11297] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 433.542101][T11297] RBP: 00007fe7b697f090 R08: 000000000004ffe6 R09: 0000000000000000 [ 433.542112][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.542122][T11297] R13: 0000000000000001 R14: 00007fe7b5db6080 R15: 00007ffc28448b38 [ 433.542153][T11297] [ 433.642685][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 433.773281][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 433.915061][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.926684][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.937417][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.951160][ T5944] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.982524][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.995501][ T5944] usb 6-1: config 0 descriptor?? [ 434.037158][ T43] usb 7-1: device descriptor read/64, error -71 [ 434.147376][ T9] usb 2-1: USB disconnect, device number 46 [ 434.154969][ T43] usb usb7-port1: attempt power cycle [ 434.396090][ T30] audit: type=1400 audit(1751957947.254:1197): avc: denied { ioctl } for pid=11308 comm="syz.2.1024" path="socket:[31321]" dev="sockfs" ino=31321 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.461184][ T30] audit: type=1400 audit(1751957947.284:1198): avc: denied { read } for pid=11308 comm="syz.2.1024" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 434.493661][ T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 434.602769][ T30] audit: type=1400 audit(1751957947.284:1199): avc: denied { open } for pid=11308 comm="syz.2.1024" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 434.630940][ T30] audit: type=1400 audit(1751957947.284:1200): avc: denied { read } for pid=11308 comm="syz.2.1024" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 434.635729][ T43] usb 7-1: device descriptor read/8, error -71 [ 434.656589][ T5944] usbhid 6-1:0.0: can't add hid device: -71 [ 434.683387][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 434.733169][ T5944] usb 6-1: USB disconnect, device number 38 [ 434.771613][ T30] audit: type=1400 audit(1751957947.284:1201): avc: denied { open } for pid=11308 comm="syz.2.1024" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 434.839562][ T30] audit: type=1400 audit(1751957947.284:1202): avc: denied { ioctl } for pid=11308 comm="syz.2.1024" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 434.867753][T11100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.881253][T11100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.896971][T11100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.904476][ T30] audit: type=1400 audit(1751957947.284:1203): avc: denied { set_context_mgr } for pid=11308 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 434.932913][T11100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.939879][ T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 434.940779][ T30] audit: type=1400 audit(1751957947.284:1204): avc: denied { write } for pid=11308 comm="syz.2.1024" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 434.974911][ T30] audit: type=1400 audit(1751957947.294:1205): avc: denied { map } for pid=11308 comm="syz.2.1024" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 435.005253][ T30] audit: type=1400 audit(1751957947.294:1206): avc: denied { call } for pid=11308 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 435.029025][ T30] audit: type=1400 audit(1751957947.344:1207): avc: denied { bind } for pid=11291 comm="syz.5.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.056188][ T43] usb 7-1: device descriptor read/8, error -71 [ 435.172980][ T43] usb usb7-port1: unable to enumerate USB device [ 435.285266][T11327] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 435.401834][T11327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.492246][T11329] vlan2: entered allmulticast mode [ 435.540666][T11329] geneve1: entered allmulticast mode [ 435.610047][T11329] bond2: (slave vlan2): making interface the new active one [ 436.072964][T11329] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 436.130345][T11100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.219908][T11340] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 436.226447][T11340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.255673][T11100] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.265743][T11340] vhci_hcd vhci_hcd.0: Device attached [ 436.275216][T11346] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 436.281728][T11346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.292569][T11346] vhci_hcd vhci_hcd.0: Device attached [ 436.345823][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.353025][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.363976][T11347] vhci_hcd: connection closed [ 436.364685][T11341] vhci_hcd: cannot find a urb of seqnum 4 max seqnum 0 [ 436.378167][ T6735] vhci_hcd: stop threads [ 436.403593][ T6735] vhci_hcd: release socket [ 436.423805][ T6735] vhci_hcd: disconnect device [ 436.442381][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.449648][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.457533][ T6735] vhci_hcd: stop threads [ 436.466036][ T6735] vhci_hcd: release socket [ 436.503386][ T6735] vhci_hcd: disconnect device [ 436.552678][ T9] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 436.564141][ T9] usb 45-1: enqueue for inactive port 0 [ 436.687587][ T9] vhci_hcd: vhci_device speed not set [ 437.803158][T11373] program syz.1.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.850933][T11100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.854358][T11377] program syz.1.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.993974][T11377] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.459359][T11100] veth0_vlan: entered promiscuous mode [ 438.471531][T11100] veth1_vlan: entered promiscuous mode [ 438.497511][T11100] veth0_macvtap: entered promiscuous mode [ 438.537981][T11100] veth1_macvtap: entered promiscuous mode [ 438.577811][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 438.649406][T11100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.735607][T11100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.893623][T11100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.103955][T11100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.262863][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 439.273505][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 439.281743][T11100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.293542][ T9] usb 2-1: config 9 has an invalid interface number: 136 but max is 1 [ 439.301746][ T9] usb 2-1: config 9 has an invalid interface number: 60 but max is 1 [ 439.320009][T11100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.322953][ T9] usb 2-1: config 9 has no interface number 0 [ 439.352082][ T9] usb 2-1: config 9 has no interface number 1 [ 439.372240][ T9] usb 2-1: config 9 interface 136 has no altsetting 0 [ 439.399725][ T9] usb 2-1: config 9 interface 60 has no altsetting 0 [ 439.444097][ T9] usb 2-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=cf.52 [ 439.453385][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 439.462928][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.470956][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 439.470996][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 439.522530][ T9] usb 2-1: Product: syz [ 439.535921][ T9] usb 2-1: Manufacturer: syz [ 439.549996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.564568][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.575486][ T9] usb 2-1: SerialNumber: syz [ 439.587315][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.638357][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.650848][ T24] usb 6-1: config 0 descriptor?? [ 439.667245][ T24] hso 6-1:0.0: Can't find BULK IN endpoint [ 439.673589][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.736205][ T6737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.039965][ T6737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.051742][ T9] usb 2-1: USB disconnect, device number 47 [ 440.092186][ T6121] udevd[6121]: setting mode of /dev/bus/usb/002/047 to 020664 failed: No such file or directory [ 440.133633][ T6121] udevd[6121]: setting owner of /dev/bus/usb/002/047 to uid=0, gid=0 failed: No such file or directory [ 440.543913][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 440.543929][ T30] audit: type=1400 audit(1751957953.404:1220): avc: denied { map } for pid=11440 comm="syz.2.1040" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 440.575665][ T6729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.616443][ T30] audit: type=1400 audit(1751957953.454:1221): avc: denied { read } for pid=11443 comm="syz.6.1041" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 440.667824][T11450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1040'. [ 440.697143][T11446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.721742][ T30] audit: type=1400 audit(1751957953.454:1222): avc: denied { open } for pid=11443 comm="syz.6.1041" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 440.748130][T11446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 440.784816][ T30] audit: type=1400 audit(1751957953.634:1223): avc: denied { create } for pid=11440 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 440.827991][T11446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.834507][ T30] audit: type=1400 audit(1751957953.694:1224): avc: denied { ioctl } for pid=11440 comm="syz.2.1040" path="socket:[32002]" dev="sockfs" ino=32002 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 440.868054][T11446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 440.885982][ T6729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.947863][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 441.198756][ T6729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.224037][ T5906] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 441.387920][ T5906] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 441.401035][ T6729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.412114][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.439449][ T5906] usb 3-1: Product: syz [ 441.479287][ T5906] usb 3-1: Manufacturer: syz [ 441.493677][ T5906] usb 3-1: SerialNumber: syz [ 441.514413][ T5906] usb 3-1: config 0 descriptor?? [ 441.548612][ T5906] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 441.717605][ T5899] usb 6-1: USB disconnect, device number 39 [ 441.777727][ T5906] gspca_sunplus: reg_r err -71 [ 441.852783][ T5906] usb 3-1: USB disconnect, device number 41 [ 441.978257][T11474] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1043'. [ 442.020155][ T6729] bridge_slave_1: left allmulticast mode [ 442.022204][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1043'. [ 442.043610][ T6729] bridge_slave_1: left promiscuous mode [ 442.049360][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.057539][T11474] FAULT_INJECTION: forcing a failure. [ 442.057539][T11474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.098221][ T6729] bridge_slave_0: left allmulticast mode [ 442.102514][T11474] CPU: 1 UID: 0 PID: 11474 Comm: syz.6.1043 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 442.102538][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.102547][T11474] Call Trace: [ 442.102552][T11474] [ 442.102558][T11474] dump_stack_lvl+0x16c/0x1f0 [ 442.102585][T11474] should_fail_ex+0x512/0x640 [ 442.102609][T11474] _copy_from_user+0x2e/0xd0 [ 442.102632][T11474] kstrtouint_from_user+0xd6/0x1d0 [ 442.102648][T11474] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 442.102664][T11474] ? __lock_acquire+0xb8a/0x1c90 [ 442.102689][T11474] proc_fail_nth_write+0x83/0x250 [ 442.102710][T11474] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.102734][T11474] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.102752][T11474] vfs_write+0x2a0/0x1150 [ 442.102775][T11474] ? __pfx___mutex_lock+0x10/0x10 [ 442.102798][T11474] ? __pfx_vfs_write+0x10/0x10 [ 442.102828][T11474] ? __fget_files+0x20e/0x3c0 [ 442.102847][T11474] ? rcu_watching_snap_stopped_since+0x50/0x110 [ 442.102876][T11474] ksys_write+0x12a/0x250 [ 442.102894][T11474] ? __pfx_ksys_write+0x10/0x10 [ 442.102920][T11474] do_syscall_64+0xcd/0x4c0 [ 442.102943][T11474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.102958][T11474] RIP: 0033:0x7f934f58d3df [ 442.102971][T11474] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 442.102986][T11474] RSP: 002b:00007f935034d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 442.103000][T11474] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f934f58d3df [ 442.103010][T11474] RDX: 0000000000000001 RSI: 00007f935034d0a0 RDI: 0000000000000006 [ 442.103019][T11474] RBP: 00007f935034d090 R08: 0000000000000000 R09: 0000000000000000 [ 442.103028][T11474] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 442.103036][T11474] R13: 0000000000000001 R14: 00007f934f7b6080 R15: 00007ffd9a3aa138 [ 442.103058][T11474] [ 442.312810][ T5899] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 442.348000][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1045'. [ 442.398337][ T30] audit: type=1400 audit(1751957955.254:1225): avc: denied { mounton } for pid=11485 comm="syz.6.1045" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 442.471999][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.484862][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.494247][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.503488][ T5899] usb 6-1: device descriptor read/64, error -71 [ 442.512098][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.519966][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.646684][ T6729] bridge_slave_0: left promiscuous mode [ 442.652495][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.695554][T11500] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 442.705099][T11501] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 442.744161][ T5899] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 442.751841][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 442.882633][ T5899] usb 6-1: device descriptor read/64, error -71 [ 442.914913][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 443.012710][ T5899] usb usb6-port1: attempt power cycle [ 443.509301][ T5899] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 443.541577][ T6729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.557316][ T6729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.558653][ T30] audit: type=1400 audit(1751957956.414:1226): avc: denied { bind } for pid=11528 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 443.588166][ T6729] bond0 (unregistering): Released all slaves [ 443.615884][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1045'. [ 443.672200][ T5899] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 443.709265][ T5899] usb 6-1: device descriptor read/8, error -71 [ 443.737453][T11490] lo speed is unknown, defaulting to 1000 [ 443.852925][ T5899] usb usb6-port1: unable to enumerate USB device [ 444.113238][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 444.189085][ T6729] hsr_slave_0: left promiscuous mode [ 444.207376][ T6729] hsr_slave_1: left promiscuous mode [ 444.215576][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.232716][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.249130][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.271924][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.321395][ T6729] veth1_macvtap: left promiscuous mode [ 444.336108][ T6729] veth0_macvtap: left promiscuous mode [ 444.351240][ T6729] veth1_vlan: left promiscuous mode [ 444.365844][ T6729] veth0_vlan: left promiscuous mode [ 444.578095][ T30] audit: type=1400 audit(1751957957.434:1227): avc: denied { create } for pid=11553 comm="syz.1.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 444.602981][ T5839] Bluetooth: hci1: command tx timeout [ 444.683631][ T30] audit: type=1400 audit(1751957957.534:1228): avc: denied { ioctl } for pid=11539 comm="syz.6.1051" path="socket:[32313]" dev="sockfs" ino=32313 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 444.824345][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 444.992841][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 445.032400][T11563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.093057][ T5899] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 445.202807][ T30] audit: type=1400 audit(1751957958.054:1229): avc: denied { create } for pid=11567 comm="syz.6.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 445.299302][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 445.321481][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.330784][ T5899] usb 2-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 445.382751][ T5899] usb 2-1: config 1 interface 0 altsetting 186 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.412497][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0 [ 445.451203][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.471130][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.502795][ T5899] usb 2-1: Product: syz [ 445.515865][ T5899] usb 2-1: Manufacturer: syz [ 445.544066][ T5899] usb 2-1: SerialNumber: syz [ 446.204029][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.215983][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.216462][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.232833][ T6729] team0 (unregistering): Port device team_slave_1 removed [ 446.235275][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.315108][ T6729] team0 (unregistering): Port device team_slave_0 removed [ 446.531076][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 446.531093][ T30] audit: type=1400 audit(1751957959.384:1231): avc: denied { write } for pid=11583 comm="syz.6.1059" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 446.612690][T11587] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1059'. [ 446.627930][ T30] audit: type=1400 audit(1751957959.384:1232): avc: denied { ioctl } for pid=11583 comm="syz.6.1059" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 446.663367][ T5839] Bluetooth: hci1: command tx timeout [ 446.854044][ T43] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 446.942614][ T5945] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 447.067066][ T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 447.079562][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.100787][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.119587][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 447.134384][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 447.136350][ T5945] usb 7-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 447.143888][ T43] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 447.163200][ T43] usb 6-1: Manufacturer: syz [ 447.168996][ T5945] usb 7-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 447.170872][ T43] usb 6-1: config 0 descriptor?? [ 447.194578][ T5945] usb 7-1: config 16 interface 0 has no altsetting 0 [ 447.210316][ T5945] usb 7-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 447.227426][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.273200][T11589] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 447.492184][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.505226][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.569471][ T30] audit: type=1400 audit(1751957960.424:1233): avc: denied { wake_alarm } for pid=11583 comm="syz.6.1059" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.606284][ T43] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 447.640667][ T43] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 447.914280][T11584] lo speed is unknown, defaulting to 1000 [ 447.941102][ T5899] cdc_ether 2-1:1.0: skipping garbage [ 447.964385][ T5899] cdc_ether 2-1:1.0: skipping garbage [ 447.991125][ T5899] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 447.999983][T11490] chnl_net:caif_netlink_parms(): no params data found [ 448.060689][ T5899] usb 2-1: USB disconnect, device number 48 [ 448.187336][T11604] Cannot find del_set index 1 as target [ 448.216478][T11604] tipc: Started in network mode [ 448.221436][T11604] tipc: Node identity 92a7c9c33c21, cluster identity 4711 [ 448.238664][T11604] tipc: Enabled bearer , priority 10 [ 448.323475][T11601] tipc: Disabling bearer [ 448.428770][ T5945] usb 7-1: string descriptor 0 read error: -71 [ 448.440612][ T5945] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 448.461947][ T5945] imon 7-1:16.0: unable to initialize intf0, err -19 [ 448.474919][ T5945] imon:imon_probe: failed to initialize context! [ 448.481356][ T5945] imon 7-1:16.0: unable to register, err -19 [ 448.491403][ T5945] usb 7-1: USB disconnect, device number 19 [ 448.571543][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.591373][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.631370][T11490] bridge_slave_0: entered allmulticast mode [ 448.649393][T11490] bridge_slave_0: entered promiscuous mode [ 448.670346][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.711826][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.722366][T11490] bridge_slave_1: entered allmulticast mode [ 448.742584][ T5839] Bluetooth: hci1: command tx timeout [ 448.754897][T11490] bridge_slave_1: entered promiscuous mode [ 449.222611][ T30] audit: type=1400 audit(1751957962.024:1234): avc: denied { read write } for pid=11627 comm="syz.2.1065" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 449.292664][ T5899] usb 6-1: reset high-speed USB device number 44 using dummy_hcd [ 449.360092][ T30] audit: type=1400 audit(1751957962.024:1235): avc: denied { open } for pid=11627 comm="syz.2.1065" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 449.739349][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.315601][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 450.326338][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 450.654448][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.774246][ T30] audit: type=1400 audit(1751957963.624:1236): avc: denied { ioctl } for pid=11643 comm="syz.1.1069" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 450.839754][ T5839] Bluetooth: hci1: command tx timeout [ 451.072882][ T43] usb 6-1: USB disconnect, device number 44 [ 451.097588][T11490] team0: Port device team_slave_0 added [ 451.118012][T11654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 451.144588][ T30] audit: type=1400 audit(1751957963.994:1237): avc: denied { accept } for pid=11653 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 451.175773][T11490] team0: Port device team_slave_1 added [ 451.187247][T11654] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 451.210124][T11637] lo speed is unknown, defaulting to 1000 [ 451.560160][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.577806][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.613876][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.641646][ T30] audit: type=1400 audit(1751957964.494:1238): avc: denied { write } for pid=11669 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 451.666173][ T30] audit: type=1400 audit(1751957964.524:1239): avc: denied { read } for pid=11669 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 451.691497][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.699434][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.772705][ T30] audit: type=1400 audit(1751957964.614:1240): avc: denied { setopt } for pid=11669 comm="syz.2.1073" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 451.777844][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.110959][ T30] audit: type=1400 audit(1751957965.544:1241): avc: denied { unmount } for pid=7482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 453.310342][T11490] hsr_slave_0: entered promiscuous mode [ 453.324325][T11490] hsr_slave_1: entered promiscuous mode [ 453.372699][ T5944] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 453.597704][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 453.707214][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 453.727805][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 453.785202][ T5944] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 453.797926][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.814308][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 454.229905][ T5944] usb 2-1: Product: syz [ 454.239407][ T5944] usb 2-1: Manufacturer: syz [ 454.239560][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 454.248443][ T5944] usb 2-1: SerialNumber: syz [ 454.257359][ T5944] usb 2-1: config 0 descriptor?? [ 454.340756][T11689] ceph: No mds server is up or the cluster is laggy [ 454.413638][ T5944] rc_core: IR keymap rc-streamzap not found [ 454.578899][ T5944] Registered IR keymap rc-empty [ 454.593034][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 455.139094][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 455.156963][ T5944] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 455.324460][ T5944] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 455.451803][ T30] audit: type=1400 audit(1751957968.304:1242): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=3495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.568803][ T5944] usb 2-1: USB disconnect, device number 49 [ 455.599173][ T30] audit: type=1400 audit(1751957968.304:1243): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.628849][ T30] audit: type=1400 audit(1751957968.304:1244): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3495 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.706226][ T30] audit: type=1400 audit(1751957968.454:1245): avc: denied { ioctl } for pid=11705 comm="syz.6.1077" path="socket:[33634]" dev="sockfs" ino=33634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.773790][ T30] audit: type=1400 audit(1751957968.524:1246): avc: denied { block_suspend } for pid=11706 comm="syz.5.1078" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.836855][ T30] audit: type=1400 audit(1751957968.524:1247): avc: denied { getopt } for pid=11706 comm="syz.5.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 456.005108][T11707] wireguard0: entered promiscuous mode [ 456.010782][T11707] wireguard0: entered allmulticast mode [ 456.278178][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 456.953320][ T5944] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 457.134534][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 457.353555][T11739] program syz.5.1083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.416047][T11738] program syz.5.1083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.474097][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.494096][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.504160][ T5944] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 457.529670][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.539897][T11738] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 457.554860][ T30] audit: type=1400 audit(1751957970.404:1248): avc: denied { mount } for pid=11737 comm="syz.6.1084" name="/" dev="ramfs" ino=32706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 457.594003][ T5944] usb 3-1: config 0 descriptor?? [ 457.623543][ T30] audit: type=1400 audit(1751957970.474:1249): avc: denied { read } for pid=11732 comm="syz.5.1083" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 457.658303][ T30] audit: type=1400 audit(1751957970.474:1250): avc: denied { open } for pid=11732 comm="syz.5.1083" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 457.766099][ T30] audit: type=1400 audit(1751957970.474:1251): avc: denied { write } for pid=11732 comm="syz.5.1083" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 457.767977][T11490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.827748][ T30] audit: type=1400 audit(1751957970.514:1252): avc: denied { name_bind } for pid=11745 comm="syz.1.1079" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 458.077015][T11490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.193150][ T30] audit: type=1400 audit(1751957970.984:1253): avc: denied { getopt } for pid=11750 comm="syz.5.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.257157][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 458.268334][ T5944] ft260 0003:0403:6030.0017: chip code: 6424 8183 [ 458.305891][T11490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.355577][T11490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.443962][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 458.455555][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 458.467500][ T5944] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 458.496073][ T9] usb 2-1: config 0 has no interface number 0 [ 458.542859][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 458.560582][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.596138][ T9] usb 2-1: Product: syz [ 458.612574][ T9] usb 2-1: Manufacturer: syz [ 458.622798][ T9] usb 2-1: SerialNumber: syz [ 458.645235][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.647099][ T9] usb 2-1: config 0 descriptor?? [ 458.687391][ T5944] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 458.699576][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 458.726176][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.775083][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.782321][ T6738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.849600][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.856813][ T6738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.940370][ T5944] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 459.052922][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 459.153118][ T30] audit: type=1400 audit(1751957971.974:1254): avc: denied { mounton } for pid=11782 comm="syz.5.1089" path="/134/file0" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 459.426082][T11490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.437313][T11490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.444153][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 459.525289][T11788] mmap: syz.6.1090 (11788): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 459.582586][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20010 ms [ 459.590669][ C0] sl0: transmit timed out, bad line quality? [ 459.773321][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 459.773641][ T43] usb 2-1: USB disconnect, device number 50 [ 459.837611][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 459.896882][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 459.987348][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.058174][ T43] quatech2 2-1:0.51: device disconnected [ 460.123433][ T5899] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 460.412031][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 460.533691][ T5944] usb 3-1: USB disconnect, device number 42 [ 460.555082][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 460.564690][ T5899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.579082][ T5899] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 460.589007][ T5899] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 460.600564][ T5899] usb 7-1: Product: syz [ 460.609252][ T5899] usb 7-1: Manufacturer: syz [ 460.621561][ T5899] usb 7-1: SerialNumber: syz [ 460.643721][ T5899] usb 7-1: config 0 descriptor?? [ 460.664929][ T5899] smsusb:smsusb_probe: board id=2, interface number 0 [ 460.688535][ T5899] smsusb:smsusb_probe: Device initialized with return code -19 [ 460.880169][ T5899] usb 7-1: USB disconnect, device number 20 [ 460.979942][ T30] audit: type=1400 audit(1751957973.834:1255): avc: denied { setopt } for pid=11828 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 461.045331][T11490] veth0_vlan: entered promiscuous mode [ 461.076884][T11490] veth1_vlan: entered promiscuous mode [ 461.108591][T11490] veth0_macvtap: entered promiscuous mode [ 461.121386][T11490] veth1_macvtap: entered promiscuous mode [ 461.142973][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.168154][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.185360][ T5945] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 461.195516][T11490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.205596][T11490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.214421][T11490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.224149][T11490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.293562][ T5906] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 461.320124][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.335023][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.343383][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 461.360075][ T5945] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 461.375440][ T6735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.382911][ T5945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.384608][ T6735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.392126][ T5945] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.432530][ T5906] usb 3-1: device descriptor read/64, error -71 [ 461.450594][ T5945] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.472494][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.480546][ T5945] usb 2-1: Product: syz [ 461.504885][ T5945] usb 2-1: Manufacturer: ᐉ [ 461.509525][ T5945] usb 2-1: SerialNumber: syz [ 461.673298][ T5906] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 461.752176][ T30] audit: type=1400 audit(1751957974.604:1256): avc: denied { create } for pid=11829 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 461.753555][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.780883][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.804171][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.805933][ T5899] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 461.818307][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.831735][ T30] audit: type=1400 audit(1751957974.684:1257): avc: denied { read append } for pid=11829 comm="syz.1.1094" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 461.857444][ T5906] usb 3-1: device descriptor read/64, error -71 [ 461.883937][ T5945] usb 2-1: 0:2 : does not exist [ 461.909414][ T5945] usb 2-1: USB disconnect, device number 51 [ 461.953638][ T6121] udevd[6121]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.979716][ T5906] usb usb3-port1: attempt power cycle [ 462.016602][ T5899] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 462.029351][ T5899] usb 7-1: config 0 has no interface number 1 [ 462.043372][ T5899] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 462.055217][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.069167][ T5899] usb 7-1: config 0 descriptor?? [ 462.083082][ T5899] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.090161][ T5899] usb 7-1: MIDIStreaming interface descriptor not found [ 462.179217][ T5899] gspca_main: spca561-2.14.0 probing abcd:cdee [ 462.282080][ T5899] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 462.295420][ T5899] usb 7-1: USB disconnect, device number 21 [ 462.342996][ T5906] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 462.374784][ T5906] usb 3-1: device descriptor read/8, error -71 [ 462.602192][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 462.602208][ T30] audit: type=1400 audit(1751957975.454:1259): avc: denied { connect } for pid=11867 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.603083][T11868] fuse: Bad value for 'fd' [ 462.632655][ T5906] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 462.786023][ T5906] usb 3-1: device descriptor read/8, error -71 [ 463.002195][ T5906] usb usb3-port1: unable to enumerate USB device [ 463.151734][ T6738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.597904][ T6738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.819645][ T6738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.888991][ T6738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.052499][ T5906] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 464.080268][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.090019][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.100063][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.110135][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.122971][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.206518][ T6738] bridge_slave_1: left allmulticast mode [ 464.220669][ T6738] bridge_slave_1: left promiscuous mode [ 464.227919][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.238508][ T6738] bridge_slave_0: left allmulticast mode [ 464.244678][ T6738] bridge_slave_0: left promiscuous mode [ 464.250836][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.362881][ T5906] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 464.371032][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.387007][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.402533][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.560770][ T30] audit: type=1400 audit(1751957977.334:1260): avc: denied { getopt } for pid=11889 comm="syz.6.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 464.629472][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.643077][ T5906] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.652169][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.675959][ T5906] usb 2-1: config 0 descriptor?? [ 464.693083][T11876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.918520][ T30] audit: type=1400 audit(1751957977.774:1261): avc: denied { append } for pid=11874 comm="syz.1.1098" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 464.954884][ T5906] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 465.012323][ T5906] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 465.100525][ T5906] usb 2-1: USB disconnect, device number 52 [ 465.208102][T11911] fido_id[11911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 465.397339][ T30] audit: type=1400 audit(1751957978.234:1262): avc: denied { connect } for pid=11915 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 465.453152][T11917] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 465.453923][ T6738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.648788][ T5906] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 465.685162][ T6738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.696523][ T6738] bond0 (unregistering): Released all slaves [ 465.754881][T11917] bridge0: entered promiscuous mode [ 465.805042][T11917] macvlan2: entered promiscuous mode [ 465.853105][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 465.865863][ T5906] usb 2-1: config 1 has an invalid interface number: 230 but max is 0 [ 465.882548][ T5906] usb 2-1: config 1 has no interface number 0 [ 465.897597][ T5906] usb 2-1: config 1 interface 230 has no altsetting 0 [ 465.914704][ T5906] usb 2-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 465.939168][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.961488][T11883] lo speed is unknown, defaulting to 1000 [ 465.973397][ T5906] usb 2-1: Product: syz [ 465.980537][ T5906] usb 2-1: Manufacturer: syz [ 465.991097][ T5906] usb 2-1: SerialNumber: syz [ 466.004776][ T5906] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 466.120235][ T6738] hsr_slave_0: left promiscuous mode [ 466.126386][ T6738] hsr_slave_1: left promiscuous mode [ 466.132288][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.144944][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.155037][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.166708][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.351292][ T5839] Bluetooth: hci1: command tx timeout [ 466.387559][T11914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.439959][T11914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.533822][ T5906] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 466.576011][ T6738] veth1_macvtap: left promiscuous mode [ 466.638119][ T5906] gspca_pac7302 2-1:1.230: probe with driver gspca_pac7302 failed with error -110 [ 466.663319][ T6738] veth0_macvtap: left promiscuous mode [ 466.759911][ T6738] veth1_vlan: left promiscuous mode [ 466.788821][ T6738] veth0_vlan: left promiscuous mode [ 466.794556][ T5906] usb 2-1: USB disconnect, device number 53 [ 466.821934][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 466.955247][ T30] audit: type=1326 audit(1751957979.814:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934f58e929 code=0x7fc00000 [ 467.206371][T11937] siw: device registration error -23 [ 467.596652][ T30] audit: type=1400 audit(1751957980.454:1264): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 468.227106][T11942] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1111'. [ 468.236329][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1111'. [ 468.267710][ T6738] team0 (unregistering): Port device team_slave_1 removed [ 468.275208][ T5944] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 468.316003][ T6738] team0 (unregistering): Port device team_slave_0 removed [ 468.435035][ T5839] Bluetooth: hci1: command tx timeout [ 468.440583][ T5944] usb 2-1: device descriptor read/64, error -71 [ 468.696188][ T5944] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 468.738812][T11927] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 468.748361][T11927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 468.760558][T11927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 468.760593][ T30] audit: type=1400 audit(1751957981.614:1265): avc: denied { firmware_load } for pid=11926 comm="syz.2.1107" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 468.852834][ T5944] usb 2-1: device descriptor read/64, error -71 [ 468.965678][ T5944] usb usb2-port1: attempt power cycle [ 469.150959][T11883] chnl_net:caif_netlink_parms(): no params data found [ 469.312969][ T5944] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 469.375594][ T5944] usb 2-1: device descriptor read/8, error -71 [ 469.422653][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.429801][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.440498][T11883] bridge_slave_0: entered allmulticast mode [ 469.468974][T11883] bridge_slave_0: entered promiscuous mode [ 469.494624][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.518628][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.547410][T11883] bridge_slave_1: entered allmulticast mode [ 469.564053][T11883] bridge_slave_1: entered promiscuous mode [ 469.649716][T11883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.671381][ T5944] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 469.737803][T11883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.753659][ T5944] usb 2-1: device descriptor read/8, error -71 [ 469.866592][ T5944] usb usb2-port1: unable to enumerate USB device [ 470.026727][T11883] team0: Port device team_slave_0 added [ 470.046674][T11883] team0: Port device team_slave_1 added [ 470.525453][ T5829] Bluetooth: hci1: command tx timeout [ 470.573997][T11990] bridge0: port 4(team0) entered blocking state [ 470.580359][T11990] bridge0: port 4(team0) entered disabled state [ 470.586987][T11990] team0: entered allmulticast mode [ 470.592093][T11990] team_slave_0: entered allmulticast mode [ 470.597831][T11990] team_slave_1: entered allmulticast mode [ 470.604633][T11990] team0: entered promiscuous mode [ 470.609657][T11990] team_slave_0: entered promiscuous mode [ 470.615470][T11990] team_slave_1: entered promiscuous mode [ 470.622025][T11990] bridge0: port 4(team0) entered blocking state [ 470.628321][T11990] bridge0: port 4(team0) entered forwarding state [ 470.659929][T11883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.667548][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.695783][T11883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.710309][T11883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.784849][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.837583][T11883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.914399][T11883] hsr_slave_0: entered promiscuous mode [ 470.920513][T11883] hsr_slave_1: entered promiscuous mode [ 471.837390][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 471.871165][T12004] lo speed is unknown, defaulting to 1000 [ 472.205209][ T30] audit: type=1400 audit(1751957985.064:1266): avc: denied { mount } for pid=12022 comm="syz.6.1123" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 472.246257][ T30] audit: type=1400 audit(1751957985.064:1267): avc: denied { watch watch_reads } for pid=12022 comm="syz.6.1123" path="/95/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 472.401281][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 472.473100][T12031] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1125'. [ 472.582600][ T5829] Bluetooth: hci1: command 0x0419 tx timeout [ 472.723966][T11883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.745111][T11883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.757475][T11883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.771704][T11883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.904100][T11883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.970274][T11883] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.991376][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.998548][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.061895][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.069099][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.204635][T11883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.442530][ T30] audit: type=1400 audit(1751957986.284:1268): avc: denied { append } for pid=12056 comm="syz.6.1129" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 473.579204][T12074] lo: entered allmulticast mode [ 473.585589][T12074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.628437][ T30] audit: type=1400 audit(1751957986.364:1269): avc: denied { map } for pid=12056 comm="syz.6.1129" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 474.068511][T11883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.313063][T12090] xfrm0: entered allmulticast mode [ 474.326510][T12089] lo speed is unknown, defaulting to 1000 [ 474.665234][ T5829] Bluetooth: hci1: command 0x0419 tx timeout [ 474.840745][T11883] veth0_vlan: entered promiscuous mode [ 474.909173][T11883] veth1_vlan: entered promiscuous mode [ 475.116735][T11883] veth0_macvtap: entered promiscuous mode [ 475.198238][T11883] veth1_macvtap: entered promiscuous mode [ 475.295734][T11883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.326878][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.340353][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.350133][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.359041][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.374415][T11883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.385369][T11883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.394256][T11883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.403169][T11883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.411849][T11883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.446162][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.447966][ T30] audit: type=1400 audit(1751957988.294:1270): avc: denied { listen } for pid=12110 comm="syz.1.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 475.567574][T12108] lo speed is unknown, defaulting to 1000 [ 475.635090][ T6729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.658979][ T6729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.731178][ T6737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.762035][ T6737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.973943][ T5906] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 475.992845][ T5945] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 476.036526][T12108] chnl_net:caif_netlink_parms(): no params data found [ 476.143046][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 476.153093][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 476.160594][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.164299][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.195924][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.202452][ T5906] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 476.206258][ T9] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 476.222467][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.222496][ T5906] usb 2-1: Product: syz [ 476.222509][ T5906] usb 2-1: Manufacturer: syz [ 476.222524][ T5906] usb 2-1: SerialNumber: syz [ 476.250690][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.277844][ T5945] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.287138][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.308376][ T5945] usb 3-1: config 0 descriptor?? [ 476.386093][ T6731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.449160][T12108] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.457920][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.466526][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 476.489963][T12108] bridge_slave_0: entered allmulticast mode [ 476.496008][ T9] usb 7-1: config 0 has no interface number 0 [ 476.508032][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.512975][T12108] bridge_slave_0: entered promiscuous mode [ 476.535826][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 476.577102][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.587758][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 476.603807][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.615853][ T6731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.627240][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 476.641828][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 476.653000][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.656315][T12108] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.666666][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 476.683299][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.685475][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.699564][T12108] bridge_slave_1: entered allmulticast mode [ 476.702171][ T9] usb 7-1: config 0 descriptor?? [ 476.713512][T12130] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 476.724423][T12130] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 476.736613][T12108] bridge_slave_1: entered promiscuous mode [ 476.776216][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 476.796964][ T6731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.850746][ T5945] HID 045e:07da: Invalid code 65791 type 1 [ 476.878868][ T5945] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0019/input/input31 [ 476.899046][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.920668][ T5945] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 476.922306][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.061599][ T30] audit: type=1400 audit(1751957989.914:1271): avc: denied { read } for pid=12121 comm="syz.2.1138" name="event4" dev="devtmpfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 477.106209][ T5945] usb 3-1: USB disconnect, device number 47 [ 477.176589][ T6731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.327033][T12108] team0: Port device team_slave_0 added [ 477.358316][T12108] team0: Port device team_slave_1 added [ 477.465306][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.484232][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.544082][ T5839] Bluetooth: hci5: command tx timeout [ 477.572374][ T24] usb 7-1: USB disconnect, device number 22 [ 477.580135][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.595627][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 477.604411][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.611408][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.639400][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.789691][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.802249][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.810940][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.820153][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.829625][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.947943][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 478.343590][T12108] hsr_slave_0: entered promiscuous mode [ 478.371523][T12108] hsr_slave_1: entered promiscuous mode [ 478.385493][T12108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.400431][T12108] Cannot create hsr debugfs directory [ 478.750263][ T5906] kalmia 2-1:1.0: probe with driver kalmia failed with error -22 [ 479.289061][ T5906] usb 2-1: USB disconnect, device number 58 [ 479.341446][T12173] lo speed is unknown, defaulting to 1000 [ 479.491218][ T6731] bridge_slave_1: left allmulticast mode [ 479.509777][ T6731] bridge_slave_1: left promiscuous mode [ 479.523920][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.541050][ T6731] bridge_slave_0: left allmulticast mode [ 479.541159][ T6731] bridge_slave_0: left promiscuous mode [ 479.541324][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.587813][T12199] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1143'. [ 479.622572][ T5839] Bluetooth: hci5: command tx timeout [ 479.863072][ T5839] Bluetooth: hci1: command tx timeout [ 480.021750][T12208] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 480.500765][T12218] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1146'. [ 480.513034][T12218] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1146'. [ 481.168519][ T6731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.181994][ T6731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.192982][ T6731] bond0 (unregistering): Released all slaves [ 481.225511][T12167] lo speed is unknown, defaulting to 1000 [ 481.702756][ T5839] Bluetooth: hci5: command tx timeout [ 481.846974][ T6731] hsr_slave_0: left promiscuous mode [ 481.860081][ T6731] hsr_slave_1: left promiscuous mode [ 481.867068][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.877828][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.885176][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 481.897129][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.909106][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.943997][ T5839] Bluetooth: hci1: command tx timeout [ 481.958862][ T6731] veth1_macvtap: left promiscuous mode [ 481.969067][ T6731] veth0_macvtap: left promiscuous mode [ 481.984978][ T6731] veth1_vlan: left promiscuous mode [ 481.990337][ T6731] veth0_vlan: left promiscuous mode [ 482.553762][ T6731] team0 (unregistering): Port device team_slave_1 removed [ 482.602167][ T6731] team0 (unregistering): Port device team_slave_0 removed [ 483.132462][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 483.145354][ T24] usb 2-1: no configurations [ 483.164917][ T24] usb 2-1: can't read configurations, error -22 [ 483.209430][T12108] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 483.239598][T12108] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 483.280538][T12108] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 483.299974][T12108] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 483.517109][T12167] chnl_net:caif_netlink_parms(): no params data found [ 483.782477][ T5839] Bluetooth: hci5: command tx timeout [ 483.960740][ T30] audit: type=1400 audit(1751957996.804:1272): avc: denied { write } for pid=12279 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 484.059145][ T5839] Bluetooth: hci1: command tx timeout [ 484.084137][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.352873][ T30] audit: type=1400 audit(1751957997.164:1273): avc: denied { write } for pid=12279 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 484.585409][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.623482][T12167] bridge_slave_0: entered allmulticast mode [ 484.650845][ T30] audit: type=1400 audit(1751957997.504:1274): avc: denied { remount } for pid=12276 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 484.678724][T12167] bridge_slave_0: entered promiscuous mode [ 484.745850][T12288] netlink: 'syz.6.1156': attribute type 3 has an invalid length. [ 484.850440][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.874809][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.885377][T12167] bridge_slave_1: entered allmulticast mode [ 484.914768][T12167] bridge_slave_1: entered promiscuous mode [ 485.034143][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.071561][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.124525][T12305] mkiss: ax0: crc mode is auto. [ 485.289682][T12167] team0: Port device team_slave_0 added [ 485.313771][T12108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.321798][T12167] team0: Port device team_slave_1 added [ 485.346340][T12108] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.367352][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1161'. [ 485.378709][T12316] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 485.399968][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.407821][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.437442][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.453747][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.460898][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.472915][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.479959][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.506771][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.512658][ T836] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 485.550829][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.558010][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.575732][T12167] hsr_slave_0: entered promiscuous mode [ 485.581869][T12167] hsr_slave_1: entered promiscuous mode [ 485.653187][ T836] usb 2-1: device descriptor read/64, error -71 [ 485.903844][ T836] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 486.064566][ T836] usb 2-1: device descriptor read/64, error -71 [ 486.109243][ T5839] Bluetooth: hci1: command tx timeout [ 486.127742][ T30] audit: type=1400 audit(1751957998.984:1275): avc: denied { setopt } for pid=12334 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 486.150708][ T30] audit: type=1400 audit(1751957998.984:1276): avc: denied { bind } for pid=12334 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 486.177936][T12108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.186588][ T836] usb usb2-port1: attempt power cycle [ 486.300227][T12335] syzkaller0: entered promiscuous mode [ 486.312735][T12335] syzkaller0: entered allmulticast mode [ 486.336919][ T30] audit: type=1400 audit(1751957999.194:1277): avc: denied { connect } for pid=12341 comm="syz.6.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.563425][ T836] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 486.591601][T12347] netlink: 'syz.6.1163': attribute type 1 has an invalid length. [ 486.640655][ T836] usb 2-1: device descriptor read/8, error -71 [ 486.882683][ T836] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 486.908944][ T836] usb 2-1: device descriptor read/8, error -71 [ 487.033798][ T836] usb usb2-port1: unable to enumerate USB device [ 487.627838][T12354] cgroup: No subsys list or none specified [ 487.975371][ T836] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 488.135104][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.146091][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.156175][ T836] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 488.165696][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.184471][ T836] usb 7-1: config 0 descriptor?? [ 488.622598][ T5951] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 488.772744][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 488.781016][ T5951] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 488.793362][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.807248][ T5951] usb 2-1: config 0 descriptor?? [ 488.820172][ T836] usbhid 7-1:0.0: can't add hid device: -71 [ 488.847518][ T836] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 488.869714][ T836] usb 7-1: USB disconnect, device number 23 [ 489.017731][ T5951] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 489.035818][ T5951] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 489.038272][T12167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 489.055095][ T5951] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 489.074401][T12167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 489.101154][T12108] veth0_vlan: entered promiscuous mode [ 489.111564][T12167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 489.147333][T12108] veth1_vlan: entered promiscuous mode [ 489.186410][T12108] veth0_macvtap: entered promiscuous mode [ 489.203782][T12108] veth1_macvtap: entered promiscuous mode [ 489.219666][ T30] audit: type=1400 audit(1751958002.074:1278): avc: denied { getopt } for pid=12360 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 489.267457][T12108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.291054][T12108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.299005][T12167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 489.596274][T12382] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1171'. [ 489.617344][T12108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.627930][T12108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.637267][T12108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.646192][T12108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.688543][ T5944] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 489.972759][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 489.979495][ T5944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.993328][ T5944] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.005558][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.026213][ T5944] usb 3-1: Product: syz [ 490.038954][ T5944] usb 3-1: Manufacturer: syz [ 490.055936][ T5944] usb 3-1: SerialNumber: syz [ 490.089317][ T5944] usb 3-1: config 0 descriptor?? [ 490.118041][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.120472][T12403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.146871][T12403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.150227][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.216636][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.252079][ T6727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.270585][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.275203][ T6727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.316781][ T30] audit: type=1400 audit(1751958003.174:1279): avc: denied { create } for pid=12397 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 490.317461][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.343706][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.354367][ T5899] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 490.381225][T12399] lo speed is unknown, defaulting to 1000 [ 490.390064][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.397254][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.492774][ T5899] usb 7-1: device descriptor read/64, error -71 [ 490.728562][T12425] netlink: 'syz.7.1174': attribute type 10 has an invalid length. [ 490.750090][ T5899] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 490.815776][T12425] team0: Port device wlan1 added [ 490.882508][ T5899] usb 7-1: device descriptor read/64, error -71 [ 490.941383][T12435] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 491.003746][ T5899] usb usb7-port1: attempt power cycle [ 491.067069][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.362515][ T5899] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 491.399819][ T5899] usb 7-1: device descriptor read/8, error -71 [ 491.463725][ T30] audit: type=1400 audit(1751958004.314:1280): avc: denied { remove_name } for pid=12439 comm="syz.7.1176" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.509897][ T30] audit: type=1400 audit(1751958004.324:1281): avc: denied { unlink } for pid=12439 comm="syz.7.1176" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.573615][ T30] audit: type=1400 audit(1751958004.324:1282): avc: denied { ioctl } for pid=12439 comm="syz.7.1176" path="socket:[38185]" dev="sockfs" ino=38185 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 491.578731][T12167] veth0_vlan: entered promiscuous mode [ 491.652048][T12167] veth1_vlan: entered promiscuous mode [ 491.672577][ T5899] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 491.707505][ T5899] usb 7-1: device descriptor read/8, error -71 [ 491.731455][T12167] veth0_macvtap: entered promiscuous mode [ 491.747446][T12167] veth1_macvtap: entered promiscuous mode [ 491.774350][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.789787][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.806034][T12167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.817807][T12167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.827199][T12167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.838415][ T5899] usb usb7-port1: unable to enumerate USB device [ 491.844921][T12167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.931027][ T6735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.954984][ T6735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.001942][ T6738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.019335][ T6738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.195163][ T5944] usb 3-1: USB disconnect, device number 48 [ 492.480076][T12479] lo speed is unknown, defaulting to 1000 [ 492.732651][ T5944] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 492.882507][ T5944] usb 8-1: Using ep0 maxpacket: 16 [ 492.884375][ T5944] usb 8-1: config 0 has no interfaces? [ 492.885576][ T5944] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.885603][ T5944] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.885622][ T5944] usb 8-1: Manufacturer: syz [ 492.891035][ T5944] usb 8-1: config 0 descriptor?? [ 493.357642][ T6728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.477936][ T6728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.632140][ T6728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.788849][ T6728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.086078][ T6728] bridge_slave_1: left allmulticast mode [ 494.092051][ T6728] bridge_slave_1: left promiscuous mode [ 494.098728][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.110288][ T6728] bridge_slave_0: left allmulticast mode [ 494.116422][ T6728] bridge_slave_0: left promiscuous mode [ 494.122075][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.310162][ T30] audit: type=1400 audit(1751958007.164:1283): avc: denied { write } for pid=12515 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.478561][ T30] audit: type=1400 audit(1751958007.164:1284): avc: denied { read } for pid=12515 comm="syz.1.1182" path="socket:[39116]" dev="sockfs" ino=39116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.632750][T12526] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1186'. [ 494.893190][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.904378][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.932344][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.949968][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.957727][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.007917][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1188'. [ 495.083885][T12532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.148732][T12532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.372014][ T5944] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 495.536042][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.536373][ T9] usb 8-1: USB disconnect, device number 2 [ 495.555563][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.571876][ T6728] bond0 (unregistering): Released all slaves [ 495.632804][ T5944] usb 3-1: device descriptor read/64, error -71 [ 495.694105][T12542] trusted_key: encrypted_key: master key parameter 'default0000000000' is invalid [ 495.829705][T12535] lo speed is unknown, defaulting to 1000 [ 495.872511][ T5944] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 496.052723][ T5944] usb 3-1: device descriptor read/64, error -71 [ 496.061904][ T30] audit: type=1400 audit(1751958008.914:1285): avc: denied { ioctl } for pid=12547 comm="syz.7.1191" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 496.166603][ T5944] usb usb3-port1: attempt power cycle [ 496.269255][ T6728] hsr_slave_0: left promiscuous mode [ 496.293919][ T30] audit: type=1400 audit(1751958009.154:1286): avc: denied { watch } for pid=12555 comm="syz.1.1192" path="/251/file0" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 496.294017][ T6728] hsr_slave_1: left promiscuous mode [ 496.343700][ T30] audit: type=1400 audit(1751958009.194:1287): avc: denied { write } for pid=5906 comm="kworker/1:8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38527 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 496.415314][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.439496][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.484162][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.491648][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.516736][ T5944] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 496.540280][ T6728] veth1_macvtap: left promiscuous mode [ 496.543028][ T5944] usb 3-1: device descriptor read/8, error -71 [ 496.548641][ T6728] veth0_macvtap: left promiscuous mode [ 496.701027][ T6728] veth1_vlan: left promiscuous mode [ 496.707018][ T6728] veth0_vlan: left promiscuous mode [ 496.792755][ T5944] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 496.838184][ T5944] usb 3-1: device descriptor read/8, error -71 [ 496.878050][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 496.972810][ T5944] usb usb3-port1: unable to enumerate USB device [ 497.049401][T12577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12577 comm=syz.6.1193 [ 497.062756][ T5839] Bluetooth: hci1: command tx timeout [ 497.401515][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 497.451018][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 497.886027][T12580] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 497.942288][T12581] geneve3: entered allmulticast mode [ 498.049304][T12576] lo speed is unknown, defaulting to 1000 [ 498.091541][T12580] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 498.228839][T12535] chnl_net:caif_netlink_parms(): no params data found [ 498.237909][T12593] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 498.281147][ T30] audit: type=1326 audit(1751958011.134:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934f58e929 code=0x7ffc0000 [ 498.332588][ T30] audit: type=1326 audit(1751958011.134:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f934f58e929 code=0x7ffc0000 [ 498.359110][ T30] audit: type=1326 audit(1751958011.134:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934f58e929 code=0x7ffc0000 [ 498.394606][ T30] audit: type=1326 audit(1751958011.134:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f934f58e929 code=0x7ffc0000 [ 498.422157][ T30] audit: type=1326 audit(1751958011.134:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934f58e929 code=0x7ffc0000 [ 498.449151][T12593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58897 sclass=netlink_route_socket pid=12593 comm=syz.2.1200 [ 498.520589][T12598] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 498.764703][T12535] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.784502][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.791768][T12535] bridge_slave_0: entered allmulticast mode [ 498.834101][T12535] bridge_slave_0: entered promiscuous mode [ 498.865263][T12535] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.921484][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.932609][T12535] bridge_slave_1: entered allmulticast mode [ 498.943916][T12535] bridge_slave_1: entered promiscuous mode [ 499.202718][ T5839] Bluetooth: hci1: command tx timeout [ 499.453536][T12535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.491018][T12535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.678212][T12535] team0: Port device team_slave_0 added [ 499.712200][T12535] team0: Port device team_slave_1 added [ 499.784073][ T5906] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 499.836411][T12535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.844296][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.873859][T12535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.892166][T12535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.902283][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.929302][T12535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.977652][ T5906] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 499.988635][ T5906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.997778][ T836] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 500.021299][ T5906] usb 8-1: config 0 descriptor?? [ 500.039953][ T5906] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 500.074819][T12535] hsr_slave_0: entered promiscuous mode [ 500.086660][T12535] hsr_slave_1: entered promiscuous mode [ 500.173981][ T836] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.185538][ T836] usb 3-1: config 0 has no interface number 0 [ 500.219632][ T836] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 500.249246][ T836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.271354][ T836] usb 3-1: Product: syz [ 500.288420][ T836] usb 3-1: Manufacturer: syz [ 500.298534][ T836] usb 3-1: SerialNumber: syz [ 500.319338][ T836] usb 3-1: config 0 descriptor?? [ 500.540436][ T836] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 500.562040][ T836] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.580434][ T836] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 500.624512][ T836] usb 3-1: media controller created [ 500.681247][ T836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.988309][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.994898][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.186222][T12535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.253894][T12628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.291619][T12628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.336098][ T5906] usb 8-1: USB disconnect, device number 3 [ 501.783976][ T836] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 501.802591][ T5906] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 501.868574][ T836] usb 3-1: USB disconnect, device number 53 [ 501.972444][ T5906] usb 8-1: Using ep0 maxpacket: 32 [ 501.979627][ T5906] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.999388][ T5906] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.014391][ T5906] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 502.027533][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.038133][ T5906] usb 8-1: Product: syz [ 502.042617][ T5906] usb 8-1: Manufacturer: syz [ 502.047385][ T5906] usb 8-1: SerialNumber: syz [ 502.063609][ T5906] ti_usb_3410_5052 8-1:1.0: required endpoints missing [ 502.261119][ T5906] usb 8-1: USB disconnect, device number 4 [ 502.399118][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 502.399133][ T30] audit: type=1400 audit(1751958015.254:1298): avc: denied { ioctl } for pid=12661 comm="syz.2.1209" path="socket:[38713]" dev="sockfs" ino=38713 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 502.441964][T12662] loop9: detected capacity change from 0 to 7 [ 502.449466][T12662] buffer_io_error: 23 callbacks suppressed [ 502.449478][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.468768][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.477032][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.488328][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.496557][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.508016][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.516231][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.527883][T12662] ldm_validate_partition_table(): Disk read failed. [ 502.535427][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.551643][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.560489][T12662] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.572280][T12662] Dev loop9: unable to read RDB block 0 [ 502.578363][T12662] loop9: unable to read partition table [ 502.590421][T12662] loop9: partition table beyond EOD, truncated [ 502.597014][T12662] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 502.597014][T12662] ) failed (rc=-5) [ 503.016646][ T30] audit: type=1400 audit(1751958015.874:1299): avc: denied { read } for pid=12668 comm="syz.7.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 503.292588][ T5906] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 503.462567][ T5906] usb 8-1: Using ep0 maxpacket: 8 [ 503.476331][ T5906] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 503.489847][ T5906] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.502072][ T5906] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.519639][ T5906] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 503.530084][ T5906] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.544727][ T5906] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.569265][ T5906] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 503.580734][ T5906] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.594828][ T5906] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.612238][ T5906] usb 8-1: string descriptor 0 read error: -22 [ 503.621301][ T5906] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 503.631190][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.656508][ T5906] adutux 8-1:168.0: interrupt endpoints not found [ 513.553135][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 513.563126][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 513.571833][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 513.582030][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.591278][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 515.627868][ T5829] Bluetooth: hci6: command tx timeout [ 516.969547][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 516.981996][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 516.992114][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 517.006828][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 517.016123][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 517.702584][ T5839] Bluetooth: hci6: command tx timeout [ 518.424172][ T1299] ================================================================== [ 518.432277][ T1299] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 518.439475][ T1299] Read of size 8 at addr ffff88806a1dc020 by task aoe_tx0/1299 [ 518.446999][ T1299] [ 518.449325][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 518.449342][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.449352][ T1299] Call Trace: [ 518.449357][ T1299] [ 518.449364][ T1299] dump_stack_lvl+0x116/0x1f0 [ 518.449386][ T1299] print_report+0xcd/0x680 [ 518.449406][ T1299] ? __virt_addr_valid+0x81/0x610 [ 518.449423][ T1299] ? __phys_addr+0xe8/0x180 [ 518.449439][ T1299] ? handle_tx+0x5a5/0x630 [ 518.449458][ T1299] kasan_report+0xe0/0x110 [ 518.449478][ T1299] ? handle_tx+0x5a5/0x630 [ 518.449500][ T1299] handle_tx+0x5a5/0x630 [ 518.449522][ T1299] dev_hard_start_xmit+0x97/0x740 [ 518.449540][ T1299] __dev_queue_xmit+0x7eb/0x43e0 [ 518.449558][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.449576][ T1299] ? finish_task_switch.isra.0+0x221/0xc10 [ 518.449597][ T1299] ? rcu_is_watching+0x12/0xc0 [ 518.449615][ T1299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 518.449632][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 518.449645][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 518.449660][ T1299] ? do_raw_spin_lock+0x12c/0x2b0 [ 518.449676][ T1299] ? find_held_lock+0x2b/0x80 [ 518.449693][ T1299] ? skb_dequeue+0x126/0x180 [ 518.449706][ T1299] ? find_held_lock+0x2b/0x80 [ 518.449723][ T1299] ? rcu_is_watching+0x12/0xc0 [ 518.449741][ T1299] tx+0xcc/0x190 [ 518.449754][ T1299] ? __pfx_tx+0x10/0x10 [ 518.449765][ T1299] kthread+0x1e4/0x3e0 [ 518.449785][ T1299] ? find_held_lock+0x2b/0x80 [ 518.449801][ T1299] ? __pfx_kthread+0x10/0x10 [ 518.449821][ T1299] ? __pfx_default_wake_function+0x10/0x10 [ 518.449839][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.449858][ T1299] ? __kthread_parkme+0x19e/0x250 [ 518.449879][ T1299] ? __pfx_kthread+0x10/0x10 [ 518.449898][ T1299] kthread+0x3c5/0x780 [ 518.449911][ T1299] ? __pfx_kthread+0x10/0x10 [ 518.449924][ T1299] ? rcu_is_watching+0x12/0xc0 [ 518.449941][ T1299] ? __pfx_kthread+0x10/0x10 [ 518.449959][ T1299] ret_from_fork+0x5d4/0x6f0 [ 518.449980][ T1299] ? __pfx_kthread+0x10/0x10 [ 518.449993][ T1299] ret_from_fork_asm+0x1a/0x30 [ 518.450013][ T1299] [ 518.450017][ T1299] [ 518.654971][ T1299] Allocated by task 6501: [ 518.659281][ T1299] kasan_save_stack+0x33/0x60 [ 518.663956][ T1299] kasan_save_track+0x14/0x30 [ 518.668620][ T1299] __kasan_kmalloc+0xaa/0xb0 [ 518.673194][ T1299] alloc_tty_struct+0x96/0x8c0 [ 518.677945][ T1299] tty_init_dev.part.0+0x1e/0x500 [ 518.682957][ T1299] tty_open+0xa50/0xf90 [ 518.687102][ T1299] chrdev_open+0x234/0x6a0 [ 518.691508][ T1299] do_dentry_open+0x744/0x1c10 [ 518.696262][ T1299] vfs_open+0x82/0x3f0 [ 518.700315][ T1299] path_openat+0x1de4/0x2cb0 [ 518.704893][ T1299] do_filp_open+0x20b/0x470 [ 518.709400][ T1299] do_sys_openat2+0x11b/0x1d0 [ 518.714056][ T1299] __x64_sys_openat+0x174/0x210 [ 518.718888][ T1299] do_syscall_64+0xcd/0x4c0 [ 518.723384][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.729258][ T1299] [ 518.731562][ T1299] Freed by task 5906: [ 518.735522][ T1299] kasan_save_stack+0x33/0x60 [ 518.740185][ T1299] kasan_save_track+0x14/0x30 [ 518.744849][ T1299] kasan_save_free_info+0x3b/0x60 [ 518.749854][ T1299] __kasan_slab_free+0x51/0x70 [ 518.754608][ T1299] kfree+0x2b4/0x4d0 [ 518.758485][ T1299] process_one_work+0x9cf/0x1b70 [ 518.763404][ T1299] worker_thread+0x6c8/0xf10 [ 518.767990][ T1299] kthread+0x3c5/0x780 [ 518.772039][ T1299] ret_from_fork+0x5d4/0x6f0 [ 518.776632][ T1299] ret_from_fork_asm+0x1a/0x30 [ 518.781400][ T1299] [ 518.783714][ T1299] Last potentially related work creation: [ 518.789408][ T1299] kasan_save_stack+0x33/0x60 [ 518.794075][ T1299] kasan_record_aux_stack+0xa7/0xc0 [ 518.799255][ T1299] insert_work+0x36/0x230 [ 518.803567][ T1299] __queue_work+0x97e/0x10f0 [ 518.808141][ T1299] queue_work_on+0x1a4/0x1f0 [ 518.812714][ T1299] release_tty+0x4de/0x5d0 [ 518.817117][ T1299] tty_release_struct+0xb7/0xe0 [ 518.821968][ T1299] tty_release+0xe2d/0x1430 [ 518.826459][ T1299] __fput+0x3ff/0xb70 [ 518.830421][ T1299] task_work_run+0x14d/0x240 [ 518.835447][ T1299] do_exit+0x86c/0x2bd0 [ 518.839613][ T1299] do_group_exit+0xd3/0x2a0 [ 518.844172][ T1299] get_signal+0x2673/0x26d0 [ 518.848661][ T1299] arch_do_signal_or_restart+0x8f/0x7d0 [ 518.854194][ T1299] exit_to_user_mode_loop+0x84/0x110 [ 518.859561][ T1299] do_syscall_64+0x3f6/0x4c0 [ 518.864143][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.870020][ T1299] [ 518.872323][ T1299] The buggy address belongs to the object at ffff88806a1dc000 [ 518.872323][ T1299] which belongs to the cache kmalloc-cg-2k of size 2048 [ 518.886620][ T1299] The buggy address is located 32 bytes inside of [ 518.886620][ T1299] freed 2048-byte region [ffff88806a1dc000, ffff88806a1dc800) [ 518.900395][ T1299] [ 518.902708][ T1299] The buggy address belongs to the physical page: [ 518.909099][ T1299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a1d8 [ 518.917863][ T1299] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 518.926352][ T1299] memcg:ffff88802a874501 [ 518.930570][ T1299] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 518.938095][ T1299] page_type: f5(slab) [ 518.942069][ T1299] raw: 00fff00000000040 ffff88801b84b3c0 dead000000000100 dead000000000122 [ 518.950638][ T1299] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88802a874501 [ 518.959208][ T1299] head: 00fff00000000040 ffff88801b84b3c0 dead000000000100 dead000000000122 [ 518.967865][ T1299] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88802a874501 [ 518.976548][ T1299] head: 00fff00000000003 ffffea0001a87601 00000000ffffffff 00000000ffffffff [ 518.985212][ T1299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 518.993864][ T1299] page dumped because: kasan: bad access detected [ 519.000260][ T1299] page_owner tracks the page as allocated [ 519.005954][ T1299] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 167391483395, free_ts 167386022056 [ 519.027474][ T1299] post_alloc_hook+0x1c0/0x230 [ 519.032230][ T1299] get_page_from_freelist+0x1321/0x3890 [ 519.037765][ T1299] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 519.043666][ T1299] alloc_pages_mpol+0x1fb/0x550 [ 519.048510][ T1299] new_slab+0x23b/0x330 [ 519.052652][ T1299] ___slab_alloc+0xd9c/0x1940 [ 519.057324][ T1299] __slab_alloc.constprop.0+0x56/0xb0 [ 519.062680][ T1299] __kvmalloc_node_noprof+0x3b1/0x620 [ 519.068471][ T1299] xt_alloc_table_info+0x3e/0xa0 [ 519.073393][ T1299] do_ip6t_set_ctl+0x50e/0xb00 [ 519.078143][ T1299] nf_setsockopt+0x8a/0xf0 [ 519.082541][ T1299] ipv6_setsockopt+0x135/0x170 [ 519.087288][ T1299] tcp_setsockopt+0xa4/0x100 [ 519.091866][ T1299] do_sock_setsockopt+0x221/0x470 [ 519.096881][ T1299] __sys_setsockopt+0x1a0/0x230 [ 519.101718][ T1299] __x64_sys_setsockopt+0xbd/0x160 [ 519.106817][ T1299] page last free pid 5830 tgid 5830 stack trace: [ 519.113125][ T1299] __free_frozen_pages+0x7fe/0x1180 [ 519.118321][ T1299] __put_partials+0x16d/0x1c0 [ 519.122998][ T1299] qlist_free_all+0x4d/0x120 [ 519.127574][ T1299] kasan_quarantine_reduce+0x195/0x1e0 [ 519.133020][ T1299] __kasan_slab_alloc+0x69/0x90 [ 519.137861][ T1299] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 519.143399][ T1299] getname_flags.part.0+0x4c/0x550 [ 519.148493][ T1299] getname_flags+0x93/0xf0 [ 519.152893][ T1299] vfs_fstatat+0xe1/0xf0 [ 519.157119][ T1299] __do_sys_newfstatat+0x97/0x120 [ 519.162125][ T1299] do_syscall_64+0xcd/0x4c0 [ 519.166625][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.172503][ T1299] [ 519.174809][ T1299] Memory state around the buggy address: [ 519.180420][ T1299] ffff88806a1dbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 519.188465][ T1299] ffff88806a1dbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 519.196511][ T1299] >ffff88806a1dc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.204552][ T1299] ^ [ 519.209656][ T1299] ffff88806a1dc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.217699][ T1299] ffff88806a1dc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.225742][ T1299] ================================================================== [ 519.233843][ T1299] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 519.241054][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 519.251056][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.261140][ T1299] Call Trace: [ 519.264431][ T1299] [ 519.267370][ T1299] dump_stack_lvl+0x3d/0x1f0 [ 519.271990][ T1299] panic+0x71c/0x800 [ 519.275913][ T1299] ? __pfx_panic+0x10/0x10 [ 519.280360][ T1299] ? irqentry_exit+0x3b/0x90 [ 519.284976][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 519.290205][ T1299] ? handle_tx+0x5a5/0x630 [ 519.294652][ T1299] ? check_panic_on_warn+0x1f/0xb0 [ 519.299789][ T1299] ? handle_tx+0x5a5/0x630 [ 519.304217][ T1299] check_panic_on_warn+0xab/0xb0 [ 519.309179][ T1299] end_report+0x107/0x170 [ 519.313532][ T1299] kasan_report+0xee/0x110 [ 519.317986][ T1299] ? handle_tx+0x5a5/0x630 [ 519.322417][ T1299] handle_tx+0x5a5/0x630 [ 519.326675][ T1299] dev_hard_start_xmit+0x97/0x740 [ 519.331733][ T1299] __dev_queue_xmit+0x7eb/0x43e0 [ 519.336700][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 519.341913][ T1299] ? finish_task_switch.isra.0+0x221/0xc10 [ 519.347732][ T1299] ? rcu_is_watching+0x12/0xc0 [ 519.352511][ T1299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 519.357899][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 519.362853][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 519.367812][ T1299] ? do_raw_spin_lock+0x12c/0x2b0 [ 519.372847][ T1299] ? find_held_lock+0x2b/0x80 [ 519.377531][ T1299] ? skb_dequeue+0x126/0x180 [ 519.382113][ T1299] ? find_held_lock+0x2b/0x80 [ 519.386788][ T1299] ? rcu_is_watching+0x12/0xc0 [ 519.391544][ T1299] tx+0xcc/0x190 [ 519.395077][ T1299] ? __pfx_tx+0x10/0x10 [ 519.399216][ T1299] kthread+0x1e4/0x3e0 [ 519.403276][ T1299] ? find_held_lock+0x2b/0x80 [ 519.407944][ T1299] ? __pfx_kthread+0x10/0x10 [ 519.412545][ T1299] ? __pfx_default_wake_function+0x10/0x10 [ 519.418342][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 519.423535][ T1299] ? __kthread_parkme+0x19e/0x250 [ 519.428553][ T1299] ? __pfx_kthread+0x10/0x10 [ 519.433137][ T1299] kthread+0x3c5/0x780 [ 519.437195][ T1299] ? __pfx_kthread+0x10/0x10 [ 519.441771][ T1299] ? rcu_is_watching+0x12/0xc0 [ 519.446526][ T1299] ? __pfx_kthread+0x10/0x10 [ 519.451100][ T1299] ret_from_fork+0x5d4/0x6f0 [ 519.455702][ T1299] ? __pfx_kthread+0x10/0x10 [ 519.460278][ T1299] ret_from_fork_asm+0x1a/0x30 [ 519.465034][ T1299] [ 519.468286][ T1299] Kernel Offset: disabled [ 519.472589][ T1299] Rebooting in 86400 seconds..