last executing test programs: 16m46.448071924s ago: executing program 32 (id=224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x2, {0x7, 0x6, 0x1, 0xf85}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioperm(0x0, 0x7ff, 0x101) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) r3 = open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r5 = syz_clone3(&(0x7f0000000540)={0x40a8000, &(0x7f0000000100), &(0x7f00000003c0), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/79, 0x4f, &(0x7f0000000680)=""/125, &(0x7f0000000640), 0x0, {r3}}, 0x58) sched_setscheduler(r5, 0x0, &(0x7f0000000400)) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, &(0x7f0000000d00)=ANY=[], 0x218}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x2, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) close(r4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 16m42.246709772s ago: executing program 33 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009057702100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010000000000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="000000004a11010014001680100001800c0007000400008e"], 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000100)=0x160, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="efcb2e83d3fc030010004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0xf8, r8, 0x1, 0x0, 0x6, @dev}, 0x14) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r9 = memfd_create(0x0, 0x2) ftruncate(r9, 0xffff) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0xf0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) 16m41.214203905s ago: executing program 34 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000091800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0) 14m37.084433193s ago: executing program 35 (id=255): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SG_BLKTRACESTOP(r1, 0x1275, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x98}, 0x18) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x8, 0xfffffffc, 0x72, 0x8000001}, &(0x7f0000000040)=0x9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 14m35.614528952s ago: executing program 36 (id=257): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000b40)="00c0df87", 0x4}, {&(0x7f0000000c00)="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", 0xff0}, {&(0x7f0000001c00)="cd593de9a46c29f7458015a5b1719a2befe4f98c0202b32018cb6a08bab3af4949ad9ccae0747e46e37762200196a777c1d2e7da38c68178b04ce74e0271501f12053f98eaa7271a8d13d54e97a7e35d311f679a476f4f1005e1d2b104d7f8f2905aad9411e03006c224eb1b1d831884be7ae3b1c834dff8052e69b943eec7351d9a1a5eeff03301433de00044b369725acaee93c9a2520faf9e358012fe8aac86ed701de53459e86ec2e21110a970e92497cd3ce0ce321dbb1df04f76682264bf22b8b0d3fef6733e9f668507e1f72d28ca722be3e9bb0e5ff6", 0xda}, {&(0x7f0000001d00)="9791970670f739368c1c38ed390af3d111c6245a639af3b3567e0312f986f488c30504190625e454f7a0033008bfaac9da6a73de2ad677997643facd87545b3b93fe72afa5a562bc09a42991695a5301bfa26abfa094693834", 0x59}, {&(0x7f0000001d80)="694e7ef24f7375aaef3a21ed9ba4087c0f02770091f67d16ff783d952f5e39d5fb0ad6b4960523efa3986bfb4bfdd2e0c564835b640ee72638cff144a4f43e43075b23376a04b3b2a4be29fb09573ffd4a95d649ca1106a48d2586f369625af867296d1e9570e7fb72118dfba0e5fbef75d9beba5db9c6e0aff893c253f5eb6bd1e297b42a46d66636673e92d5739bd726c2b8949b12679dbf67a7e2f3438db015cb2936ece34d9662feaa3b62ea7a5fa02f1e7881493226982a2a56c1f6827a5866ff8304c7ecdc84761558a69587a37faa4574a29d04af3caa4786fd849f0d9c76ba8191a9c3e4a751cd10cb7d3c4c40335f", 0xf3}, {&(0x7f0000001e80)="d5a8f2a0f7dd463eb82486997bd46920af6b51f76ff4d6ab4721cb48755f1604919fe849683f61a4fe1f745b808de246a1f964c4e00362b798b943076e0374b5fe", 0x41}], 0x6, &(0x7f0000001f80)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x80000}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}], 0x48}}], 0x1, 0x800) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) 9m36.624316704s ago: executing program 37 (id=1085): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x656603ed5e9c8b8f, 0x80) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000880000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x0, 0x8, 0x400) (async) syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='a{\x00'/20, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000000010001003000000000000000000ed00a700000000000000000000fe39b5614a17037fb06cecc1ae3914765e07880b7f6f"], 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9m29.544478153s ago: executing program 38 (id=1096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000001474a100000040"]) (async) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d000005240600013d24000000024828ba39e07fc65c5abb0d240f01000000000000004b0006241a00000008241c0000007a0b0905810300020000000904010000020d00000904010102020d"], 0x0) 9m25.967530726s ago: executing program 39 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = socket(0x15, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3f0, 0x460, 0x460, 0x3f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x288, 0x2b0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, @remote, [], [], [], 0x0, 0x7863}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@unspec=@realm={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a09ce, 0xb1, '\x00', @p_u16=&(0x7f0000000040)=0x8c9}}) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) dup(r2) (async) socket(0x15, 0x5, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3f0, 0x460, 0x460, 0x3f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x288, 0x2b0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, @remote, [], [], [], 0x0, 0x7863}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@unspec=@realm={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a09ce, 0xb1, '\x00', @p_u16=&(0x7f0000000040)=0x8c9}}) (async) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) (async) 9m17.922005028s ago: executing program 40 (id=1111): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200, 0x8) write$UHID_CREATE2(r4, &(0x7f0000002b80)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d0005bc0000000000000080000000000600000089389527c64db06aa9379834fda987527c9a14c120c4c5e6de9cfe98d5f3730236ea2cae1efbd76d149b4f36c2115952cf26eada6225bd0e86a4ff4a8df623dec4ac3875480fe5b839861cbb51795c88313e35e4b8baf2b5680b1be347d86a3340937d7087e7a3e57d3a8551997fac24726ae3fd01f69187855cca6bd0b7947b956917b67bf122"], 0x155) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000500)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="cd47fd960ac32dd7b4dd0d2a", 0xc}, {&(0x7f00000005c0)="37c3326ee86ed13141e47b6662545093e49a9f", 0x13}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x400}}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x2, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000bc0)="b99a029382389d12e8d8c81fc9137c5166ee30a0f82fcf751ebffdb618aee62f53da269a87fd31b046e9c23940b09fc021e397ce142fa84266a8d36cc2bd963f6a62fb5be5c08e46b73e762103531e29fdbac0205cecfd29b6c325e310d474151eb48b0e2359bc350352fd22f8de00bd5ca710e16be34feed85203360b5cd9b996abe34b78904039cd88e6f4334042f346e9778acb054a2483030fd78f376f9d1da1b67d8367b8346ffdc8435d3eae9b10a7d1fe1889ce116925a0a98460ea3e1c532fe7b4dfd92742e72793f5ebd628e13e7f59f1d8e9ea4782f1f2637751887c274978", 0xe4}], 0x1}}, {{&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @remote, 0xce}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="39ded9116b8ec87e4f9d00d7a2caa0c41bead2cb8802da2620313e0c49f233770e51a21e2d5b1cc587b8a5883965", 0x2e}, {&(0x7f00000003c0)="a383ceda6aca2b764f97932f87fb1ca3cb9404cd7e40748ec3e55bbb49773c7dff1e5fb48b3b1581fcf9d2aac62182b5cedad06a2c35859f41f1980568a5611396948dd9085bf5399ab40372414989025a88176e4fb4edf4da6e3761fc0ba3745cab4cea7c68cff69e35261f1fa3352ba987d86577689d8596e857c37822e8f0056cf75fbbe7ee43a100671ff53036ad0d2d85797121f4268d6678263a74c589cf29fa273735ac1724e6470c11cd7d1818e9e898a73d1bfea2f618185424a83ae3bad103c2388c5e0b85c70e6d2f3e6665b4218880da8ed563db697cd7a2be3ec294412c96d1fe8555b509222031dc25509e0ae70a591e6ec857a3d6ea653567171919ef350e2412253a4b9d0f8662b91b97a9a43e1acefbfc6945a09d835388cb1e2d9be81ddf36942368", 0x12b}, {&(0x7f0000000dc0)="810b1fe8866521161ddeea005a7ace88c140c84c013703ce50fdc497c50f52768af5570e291d23230a9241b1a81f", 0x2e}, {&(0x7f00000029c0)="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", 0x1a7}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="e0000000000000001101000004000000e35ce59ec76985113b930a4eea381c515f95113b7dcabc9a14df36a6244724b05f5626f7d06c9ab194dd76260eff1a5af2a30200000000000000d8e00b482723b44c62dbcc4f98a0e9e43424de7dde5f507738ea1fd9b94bd4657dcc350c1bb9e83405aa39c4f522221b10c2010000001f9458ec32d63440029feefb15b4382f346288f2415ab90f89eabfaae981fd17367583ae33f6916f23a4c737e95880ba6967be66fb39c423f123da4304989ecbee1bb18e73e592c5ba2a7a4c82a41fab75b8f26cb92dbfd68e00000000000000"], 0xe0}}, {{&(0x7f0000001040)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'vxcan1\x00'}}, 0x80, &(0x7f0000001180)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000010c0)="43e16a00e8ec2c3c23818a02f4e2094a58027352697ed35987126b4dbd47325805c09d85c4f90726841ccd9a8b91095e98cdfb695a9f9fcdf33f4a0ad6f19d95b75a51931feb65d6b712ea0a7724edb6d1ef52adfb8f52d24c70ddb136a12a49deb5726ebeeab20c0b15d1e093f95fee67286cf29458258535c364003131b6bcc3041773522af3", 0x87}], 0x2}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000011c0)="b56e9bebafd93db91f18292ab9c95570d19617c9eebc1b43f893a0b7b4d502662da2a57240014bf875e79558f91bdc81329d38b11d68bba295e505f7bbf5fc2e839bce8d398827a9434f27cf175e57f6a3a491474b6ce688fff827927504b6ca9d64b2f8d78749668924ec9e", 0x6c}, {&(0x7f00000022c0)="b4762bfb141ac48df1765ee89e73da71fd407a611123fa446707cc5c219df585d054f509c73d885f7e027399e28d23f58e5cef6d2984a2ff0f95bb778ef2e946ff1670e9762272b124f132841c343ecfdac219d717e9422335d76b0088b0d370f0387ca0b9d2db24eb3441c3b4f716909f20940960889985753394e43f4cee3e41338cdc239d6cc2d25e34b70a18f7aa4ed8f80498696324a8f552e17070dc7f0c034a2baaf2466433102110fe78f1728b8555b57f8f5a86e0b0beb2df91fc6c2981ff45cbae483f8abe2293e8abf4da6a4ccc267a464e6b18dfa37440c70dcf65a17c99a7806d0baff84351522e0fc5aa", 0xf1}, {&(0x7f00000023c0)="aa486602b3f65ec0369607d841dd3b67ae8a3b294eb13d2a7fb659c8e945d8a7bad71c5de12429b0c4453bdeb21df6aee13c8379b0d79faf0bb53e9f3078cd69a9a0a2bdd95eeccd", 0x48}, {&(0x7f0000002440)="84cfc07b7c6d2f6232f2e1ca031ae2eec67fe94387ab99d88b9d3cd08e616969956f6205fa4217d12e4f71fbed8b8aa4b5793b907e140b3c59f844bc542e01b55dc3f82654a6e54d938d9cb7b0b1d9d780489fcb5ad78df70b619f51740114efe947e39052552c874e8a7eac65cc7be8016dc2d4397d58edd5b7065d91edb0ae929dd4640a27ed4d4438edbcd384c025f5cc18e927b2be43a16510f3e5f7e8dd25912710d03ded98795f15fc40387ca77984d43c674981be262ac8216e0a1c837f96406191376664a9fa469615750b986d05e382ad", 0xd5}], 0x4, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x210}}], 0x5, 0x20000000) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r12 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff11"], 0xffffffffffffff6c, 0x7ffffff7}}], 0x1, 0x8000) syz_usb_control_io$hid(r12, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) 8m48.795902274s ago: executing program 41 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000100000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf0900a7cdce770055090100000000009500000000000000bf91000000000000b702000001000047c51167a7e6337900b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="186a0000010083563ff7fd00000000000002000000186100000b000000000000000000000018000000ff0100000000000005660000851000"], &(0x7f0000000800)='GPL\x00', 0x8, 0x2c, &(0x7f0000000840)=""/44, 0x41100, 0x12, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xc, 0x2}, 0x10, 0x4b65, 0xffffffffffffffff, 0x3, &(0x7f0000000ac0)=[r2, r7, r0, r1, r0, r0, r2, r0], &(0x7f0000000b00)=[{0x4, 0x4, 0x1, 0xa}, {0x3, 0x4, 0x10, 0x8}, {0x3, 0x5, 0xe, 0x1}], 0x10, 0x2, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r10, 0xc4c03d09, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000140)=0x0) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_addrs=@nfc={0x27, r13, 0xffffffffffffffff, 0x5}}) r14 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010005000023000000000200000008000100", @ANYRES32=r16, @ANYBLOB], 0x1c}}, 0x0) connect$nfc_raw(r14, &(0x7f0000000080)={0x27, r16}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)) 6m3.899414053s ago: executing program 42 (id=1245): pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r0, &(0x7f00000194c0)=""/102376, 0x18fe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8384, 0x0, 0x0, 0x3dc, 0x0, r1}, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000002c0)={&(0x7f0000002000)={[{&(0x7f0000000080)="2fc53c8e1192acebb3c9f9e7d416cf6cb788b0c4408dab26a5d78d7bcf67e5fdfdd1c384eaa1100b5ba554649e20fcc2786ae4bf45bf170b2a79051851880f", 0x3f, 0x3}]}, 0x1, 0x3}, 0x1) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x3b, &(0x7f0000000980)=@string={0x3b, 0x3, "be5524388439a6dd1c2aa1717599b90baaf5cbb4610cb9da7443d23dffa3eebae125b660ad5400ea4c8b72742c5e89a49737574feaff236542"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 6m3.22919001s ago: executing program 43 (id=1249): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x4000000000000, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x8}, {}, {}, @note={0x0, 0x6, 0x0, 0x2}}], 0x38) (async) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x23}], 0x1) 6m2.799656777s ago: executing program 44 (id=1246): r0 = socket(0x28, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000440)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x17, &(0x7f00000005c0)=@framed={{}, [@exit, @map_idx={0x18, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r0, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000680)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r6, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async, rerun: 64) syz_usb_control_io(r6, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0xb, 0x2, "0bec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x43, 0x0, 0x5, 0x3, "6b95a7b9", "67d3f2dc"}}, 0x0}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x0, 0x31, 0x4, "6457a190"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) (async) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000300)=""/265, 0x168, 0x80010042, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000ff0100"/32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6m2.604245297s ago: executing program 45 (id=1248): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x6, 0x2, 0x86, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x701, 0x7800, 0x88, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000480)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000300000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept$netrom(0xffffffffffffffff, 0x0, 0x0) 6m2.469112582s ago: executing program 46 (id=1247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(r1, r0) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$sock(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000180)="8a8e", 0x2}], 0x1}, 0x800) 5m11.117661824s ago: executing program 47 (id=1284): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[], 0xfd85) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x80, 0x8, 0x59455247, 0x9, 0x2, 0x0, 0x5, 0x4, 0x1, 0x6, 0x0, 0x3}}) 4m40.621536903s ago: executing program 1 (id=1416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x34, r2, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20090a00}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(0x0, r1) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x34, r2, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20090a00}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) 4m39.437991118s ago: executing program 1 (id=1418): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4m39.369858561s ago: executing program 1 (id=1420): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000043c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x40000000) 4m37.252185303s ago: executing program 1 (id=1425): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 4m36.659004938s ago: executing program 8 (id=1426): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x60, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe80000000000000000000000000000001000000000000000000002001001000", 0x28}], 0x1}, 0x0) 4m36.548154801s ago: executing program 1 (id=1427): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r2]) write$P9_RSTATu(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3402000002000000058000000000000001000000000000000000000000000000fe00000000000000000000000000000000001b0004"], 0x234) 4m36.494023982s ago: executing program 8 (id=1430): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f001800000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m36.219886064s ago: executing program 1 (id=1431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xc2bd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) madvise(&(0x7f00001d3000/0x2000)=nil, 0x2000, 0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r2 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60088c1, 0x1}) io_uring_enter(r2, 0x92, 0x0, 0x13, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100), 0x0, 0x0, 0x0, 0xeeeeeeee}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x67aa80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4a23, @multicast2}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)="b9", 0x1) getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xae2c0, 0x1c) 4m35.28396312s ago: executing program 8 (id=1434): setresuid(0x0, 0xee01, 0xee00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r1, 0x701}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) syz_genetlink_get_family_id$nl802154(0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "eac5ab4c23396155f7537cb9dfac1f759ded35ff0ff1b7e52978d73b3b7251dd55493a3230304ef5fa9558b5125c897f3b1f17964b72a977944eeb3bec0e884b", 0x1c}, 0x48, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='percpu_free_percpu\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r4) keyctl$chown(0x4, r2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x50, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @empty, 0x4}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 4m32.63533934s ago: executing program 8 (id=1439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xe) (rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r1, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0xd) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x4b6a, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io$uac1(r7, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) 4m28.411036829s ago: executing program 8 (id=1443): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 4m27.916543418s ago: executing program 8 (id=1446): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='pvfs2\x00', 0x0, 0x0) 4m13.977970718s ago: executing program 48 (id=1431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xc2bd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) madvise(&(0x7f00001d3000/0x2000)=nil, 0x2000, 0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r2 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60088c1, 0x1}) io_uring_enter(r2, 0x92, 0x0, 0x13, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100), 0x0, 0x0, 0x0, 0xeeeeeeee}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x67aa80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4a23, @multicast2}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)="b9", 0x1) getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xae2c0, 0x1c) 4m11.52996508s ago: executing program 49 (id=1446): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='pvfs2\x00', 0x0, 0x0) 4m8.413819406s ago: executing program 5 (id=1462): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f001f00000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m4.66406746s ago: executing program 6 (id=1464): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r6 = dup(r5) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 4m3.10114678s ago: executing program 5 (id=1465): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4568d46983a3aa5081264d70fcd209b85fffe5de4ce28268ca6de8b9b2691fc77aada666d2acb73485a8725", @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) setresuid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000005a40)={0x30, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) 4m2.1605738s ago: executing program 5 (id=1467): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04030b03c9000500000000000000"], 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x14, 0x0, 0x4f6, 0x0, 0x0, 0x1}) bind$inet(r3, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001080)=ANY=[@ANYBLOB="3a3f4a097ad1430cd0cd240000000408010400000000000008050003000600000006000240884c0000"], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0xf503d4820292c10a) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xc, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m56.062472136s ago: executing program 6 (id=1470): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4568d46983a3aa5081264d70fcd209b85fffe5de4ce28268ca6de8b9b2691fc77aada666d2acb73485a8725", @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) setresuid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000005a40)={0x30, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) 3m53.825412747s ago: executing program 6 (id=1471): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d520887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d020890e0878f0e1ac6e7049b3b6d959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[], 0xfd85) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x80, 0x8, 0x59455247, 0x9, 0x2, 0x0, 0x5, 0x4, 0x1, 0x6, 0x0, 0x3}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x4000000, 0xfffffed4, 0x20}}, 0x12) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r8, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 3m51.825302335s ago: executing program 6 (id=1473): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000043c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0xfec00000) 3m51.615562846s ago: executing program 5 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000040)={0x26, 0x1, 0x1, "27425b895f17386bcec5d8665c0084feeaa3e6b8a80052d063e6179d13f019e3"}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) bind$ax25(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) close(r4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) 3m50.256475424s ago: executing program 6 (id=1477): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4568d46983a3aa5081264d70fcd209b85fffe5de4ce28268ca6de8b9b2691fc77aada666d2acb73485a8725", @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) setresuid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000005a40)={0x30, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) 3m49.71830589s ago: executing program 9 (id=1478): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x6, 0x2, 0x86, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x701, 0x7800, 0x88, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000480)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000001001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept$netrom(0xffffffffffffffff, 0x0, 0x0) 3m49.616861398s ago: executing program 5 (id=1479): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x79, 0x16, 0xae, 0x20, 0x4e2, 0x1424, 0x8a0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x66, 0xb9}}]}}]}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b01, 0x0) socket$caif_stream(0x25, 0x1, 0x4) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) timer_create(0x0, &(0x7f00000026c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002700)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f0000000040)) splice(r0, 0x0, r2, 0x0, 0xe38, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 3m49.361078866s ago: executing program 6 (id=1480): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = syz_open_dev$dri(0x0, 0xb, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x16) close(r3) (async) close(r3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x56b00, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x56b00, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040)={0xfffd, 0x1, 0x7ff, 0x3, 0x0, 0x0, 0x40}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x4, 'none\x00', 0x65}, 0x2c) 3m47.077884911s ago: executing program 9 (id=1481): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3m46.345134985s ago: executing program 5 (id=1482): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000040000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) close(r0) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1) 3m45.507671299s ago: executing program 9 (id=1483): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x20) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="e5d794ff0b469066003d1f0f8c5e2b8b4a60f1cdb7dc94405c7bb30122bd26706b0b82c3d7c87eea8d89b9ed00b2ae942f344fb36507a7a444325b4c31560b7beec73b9785772764888cb6b779ec71ffafa3993151cf6027a125fbff6126fe6cdd54c09308a863c075c8e2f6695ac57d362b9582338b40d9ef38ace6bbde7e581d8e2f592557e5750423a6fed1a69dfa36c48dc0add48669979beb7f255df976c161c959371cd6b45c512d9ea9095c10cc98394a3f3c7018fe13980b05c9c33a8b4fed85ffc4457b4c696d3f7b87e5", @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESOCT, @ANYBLOB="7a079e5885b4e0b52def42f3ef0cfd3499b9ded2f47b4bb72d6224dc2db8616d504c88e84efeb62a504840b53df2d5d7528273bd336f", @ANYRESHEX=r0]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e400)="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", 0x2000, &(0x7f00000009c0)={&(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x1000000000, {0x7, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x13) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2be4b57b7661b5d4, 0x0) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) close(0xffffffffffffffff) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) (async) r7 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "0b5e2d0b7b17e7308b0471b6245a99bb8c6fd185915610f3916d75b541af04eb0a6df1db3783fbe72c8569a97be51776f1709e6d43c886015c62c5ea8c64a709", 0x22}, 0x48, 0x0) r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefdeabed84b91d3d9a9fd43dd92f43358ada59ca866d8c96bcfa57faa0d6331c47570851959d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4f3e6803536b63a902fc5f19a620098fcac44bac9e9bdd8849303da555fec094c5d46e8e24bce13d71a1f0c09db975d6f760e35d9d9865000"/192, 0xc0, r7) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r8}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b00)) (async, rerun: 64) r9 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r9}) socket(0x10, 0x803, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000beb500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c3da83180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m45.355277505s ago: executing program 9 (id=1484): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x7) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket(0x1d, 0x2, 0x6) ioperm(0x0, 0x444, 0x1) alarm(0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) mount$9p_rdma(&(0x7f0000000440), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x822410, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000008,sq=0x000000000000000b,context=unconfined_u,euid<', @ANYRESDEC=r5, @ANYBLOB="74b62980aa120ba1b6648cf1a71cd118d03e8d9216cbcc77ce89e4556280675c5cb018624df47821e50b0ff744011b5441e2d24a2bfc5f5bb72883c41f8e1c83ba408e295266b1d70c70a0c39ba1616993a8501c087b4a3949db44fcfafb5be085b28b92ea51137d66097638df17a821f7c7462d96981fe77967f7d7f4fdcf63a9a478a57ca88fa78ba7f0d7f2c284da81ca1ae255f74b5fad4b9945828054c1864ab975935c6800be093c886f204eaa540da5150a41eb2ed680cd1b2607c26ba18f042cad6798c94196c336c58814896e04038f54039b234dd5cc0e2196835b09000000000000000000"]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='xprtrdma_op_connect\x00', r6}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) 3m44.149300074s ago: executing program 9 (id=1485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef17096000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) (async) pipe2$9p(&(0x7f0000000d80)={0xffffffffffffffff}, 0x80800) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r7 = geteuid() r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) (async) mount$9p_fd(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000bc0), 0x20, &(0x7f0000002e00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}], [{@uid_eq={'uid', 0x3d, r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@smackfsroot={'smackfsroot', 0x3d, '][#){))))'}}, {@audit}, {@hash}, {@pcr={'pcr', 0x3d, 0x8}}, {@uid_lt={'uid<', r9}}, {@obj_type={'obj_type', 0x3d, '.\''}}]}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\"L'], 0x0}, 0x0) r10 = syz_usb_connect$cdc_ecm(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x151, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x2, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xfe, {{0x9, 0x24, 0x6, 0x0, 0x0, "5c02a4ed"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x6, 0x4, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5f, 0x1, 0x4189}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8e70}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x3ff, 0xa, 0x5, 0x3, 0x81}, @obex={0x5, 0x24, 0x15, 0x1000}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x12}, @acm={0x4, 0x24, 0x2, 0xe}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x9, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xd, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0xd, 0x80}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x1, 0xb0, 0x8, 0x40}, 0x25, &(0x7f0000000100)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa1, 0x2, 0x94, 0xf12b, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1942f6efd18b50a8, 0xc6, 0xe, 0x82d}, @wireless={0xb, 0x10, 0x1, 0xc, 0xfe, 0xef, 0x50, 0x800, 0x98}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0xa8, &(0x7f0000000180)=@string={0xa8, 0x3, "67392b5bfc48f7a0b49ab03a80bc4f21728ab2d18828709edde97a7e95918c97c5190e3d97eeffcb3a221490e08b965cf6644bb46c115094b637fbc549461b4cb083d258653767154f0b6a3ab0d4666dfd2d714120d29c0089ac91ac8b38826e1e1de1bb441eb1730631edb35074bdebf6a6fbc196c33e8d4ee18d5e9135be5c9f78027ea254432d2d036c8d0505f3eee3f22338b9f4c6ce4b35b673720331bf7d4999ae9faa"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}, {0x1d, &(0x7f0000000380)=@string={0x1d, 0x3, "bee292e1694eaf3f12fdb01965f0cbde8eedde31b12c2acc737d86"}}, {0xaa, &(0x7f00000003c0)=@string={0xaa, 0x3, "c6815b9a9bb82fdfa3b4756d587f5d0c8424742306675d925fd9fb9a187d62d48b20540c9b211d11dfeb730ebdd74311675654ffe799ae87ebaefd3109ef08ba0fa309342ac7bf4f75b50d99e7022eb10e23579edb92b532c1d3c483617c89ac722b4cee9f016b98d2f1ce9b334303a39795ef282a25cedad6c7f31487373542aeaf204e7478ea9bf850ae1125b43a57d05edfff28b3abb21b3cceab194511be152bf68d4f23aaf9"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x20, 0x11, 0xb8, {0xb8, 0xe, "e33a49956d30332210a78fe337cf8f61adf1cded5b14ccae76a77e289fb596236ce4c1a710c08fefaeb69bef04195617b74018cb3f8237bb4fb2c3a7d662b1145759d6f26f3ceb0379d58bb0e26b2572e04d2061fb8ae7cad57f04c8bb56b74e7f8942dd4d2e9fe2c1770dbb9ba61efec7c435ef3c721b6c7571275df661201c8fc8b73f24c0d7efbc399702e2ee66c34fb05693f655fd676c69a239f54b9f0724fb64f92d8585d094d25a475323de485640cdb186f3"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000700)={0x0, 0xd, 0xcd, "e8a98e9b36130222ef5d7ed8e9dc5fe9a00ac49a5d25ab213639965317414add7490b54b70cc297a669a18104be12abcd718e580a05d391fd9065f1afcd35e45a300ff42b9b9406bffbdd866a1eea584464296a1203e19d003096b90eb5982797994973bcd9489396cbd660a299ed175f8847d7ae655b15c86c857e36699ce775c7440935ac8b541492aa5de415ac663f8742fd9e66bf8c36ad632f4be160493d3ffbca6471e18b26865448c0e1459bc8f054a27a12119bc7ed8ee85df85a7c7d1a5c0cbac886ed8775c51ecfa"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x38}}) (async) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000c80)={[0x3, 0x1, 0x9, 0xffffffffffffb08c, 0x4, 0x4, 0x7, 0x7, 0x8, 0x9, 0x1, 0x200, 0x9, 0xb, 0x6, 0x30da], 0x2000, 0x11000}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYRES16=r3], &(0x7f0000000d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x16, 0x1d, "0fe9996648c22935ce25bdb69e77a48e3e2a699c7dcf4d780966d14c68"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0xff00, 0x1, 0x3, 0x1, 0x4, 0x2, 0xcfb, 0xffffff57, 0x5, 0x6, 0x8, 0x5}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000b40)={0x20, 0x83, 0x2}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000008c0)={0x20, 0x89, 0x2}}) (async) r12 = syz_open_dev$vcsa(&(0x7f0000000900), 0xc, 0x202) openat$cgroup_ro(r12, &(0x7f0000000940)='io.stat\x00', 0x0, 0x0) 3m42.510125639s ago: executing program 9 (id=1486): mkdir(&(0x7f0000000180)='./file0\x00', 0x104) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = epoll_create(0x5) read$char_usb(r0, &(0x7f0000000500)=""/11, 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@cachetag}]}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close(r3) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}, 0x12162) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x24) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x38}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) accept4(r8, &(0x7f0000000400)=@qipcrtr, &(0x7f00000000c0)=0x80, 0x8a4984689222a1c7) r9 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 3m33.652252987s ago: executing program 50 (id=1480): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = syz_open_dev$dri(0x0, 0xb, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x16) close(r3) (async) close(r3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x56b00, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x56b00, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040)={0xfffd, 0x1, 0x7ff, 0x3, 0x0, 0x0, 0x40}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x4, 'none\x00', 0x65}, 0x2c) 3m31.162429544s ago: executing program 51 (id=1482): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000040000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) close(r0) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1) 3m16.873020422s ago: executing program 52 (id=1486): mkdir(&(0x7f0000000180)='./file0\x00', 0x104) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = epoll_create(0x5) read$char_usb(r0, &(0x7f0000000500)=""/11, 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@cachetag}]}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close(r3) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}, 0x12162) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x24) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x38}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) accept4(r8, &(0x7f0000000400)=@qipcrtr, &(0x7f00000000c0)=0x80, 0x8a4984689222a1c7) r9 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 10.608102253s ago: executing program 2 (id=1802): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0xa01800, &(0x7f0000000500)={[{@redirect_dir_nofollow}, {@index_off}, {@uuid_off}, {@uuid_off}, {@redirect_dir_off}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@uid_eq}, {@fowner_lt}]}) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa8aaaffffffffffff86dd609fbbb000006c00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000d14090e000000000000000008000100000000000800030003"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa0000090004"], 0xac}}, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r8, 0x1, 0x7, &(0x7f0000000600)=""/155, &(0x7f00000005c0)=0x9b) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00008400000005b97c9e9a8d89", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000300)={0x2, [0x3, 0x8, 0xd0f], [{0xffff2c3f, 0x6845, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x90, 0x1, 0x1, 0x0, 0x1}, {0xe05, 0x1ff, 0x0, 0x0, 0x1}, {0x7, 0xe, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x81, 0x10000, 0x1, 0x0, 0x0, 0x1}, {0x1, 0xa3c, 0x1, 0x1, 0x0, 0x1}, {0x7ed, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x10001, 0x8, 0x0, 0x0, 0x1}, {0x1, 0x5, 0x0, 0x1, 0x1}, {0x200, 0xd9, 0x1, 0x1, 0x1}, {0x4, 0x9d7, 0x1}], 0xf092}) 9.61955087s ago: executing program 2 (id=1807): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @private1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r4, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x8, 0x1c, @rand_addr=' \x01\x00', @local, 0x0, 0x8001, 0x3ff, 0x800}}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x910000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@delqdisc={0x3c, 0x25, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {0xd, 0xfff3}, {0xffe0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x957}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffff801}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) io_uring_enter(0xffffffffffffffff, 0x0, 0x44464f, 0x3, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)=0xb) close(r7) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) 8.556168999s ago: executing program 0 (id=1808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000040)={0x26, 0x1, 0x1, "27425b895f17386bcec5d8665c0084feeaa3e6b8a80052d063e6179d13f019e3"}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) bind$ax25(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) close(r4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) 7.509143017s ago: executing program 2 (id=1810): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f000053a000/0x4000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = semget(0x0, 0x1, 0x281) semctl$SEM_STAT_ANY(r3, 0x7, 0x14, &(0x7f00000000c0)=""/251) r4 = semget(0x2, 0x1, 0x180) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000280)=""/112) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000001c00)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001480)="bbdc6c4285e43f43d7a40b5c8a14eb826cf50bbe37f108398131b544fae94616ab91a0d02fdbdbbb174222590bcafcb12bf4b9d01620ec670545a085f00fda3b72a1c16200f2152a6aa2c8062d8de790b35479593520a338d8dab0079dbfa29c5cd2c2c8c18fdaedbe3fb06f48a12c1cb38322a792de16c1fa025f2c5a71d8edf7bef718812fe388ffe5d4eb8d20e8597ee62c7292eab6ba7c6268dc0f9927502c75408e83d4b9d3e5ee3d7b20216c2195583dd3d6c7", 0xb6}, {&(0x7f0000001540)="bd1eb8911b306e7d10c5105d92ae0e5008bfbacc9941602b3eb885d8546e633542f781560896a5c6132c89cbe39d737529df0068533beeb37e7ae90a30e68e415ca793c89393bc29ee89fed67e784cfd630d3cbc7af5776ff8a28767e022b5032b5baf5f09d1c926f11d79822b10a122eb47b508bbf922098be7572d646c9c1e547d04cda6e8ffacebec3b824b63ce62996a9824a547b3d218f0153a63187c4d3655c8202314c642a0304636f2a2374cec1f59a2d57ce764028d", 0xba}, {&(0x7f0000000380)="1ffbd202ca9f3fc164865a4b481d18de8d168d254b8d87161909aacfe8a1b46f069caa6ed6cf7fedee4f4e69df839d396a05f9bf5885261a632b7b11100664742afb9c0f9fba99b4bd7b5980729970e180c6afe41e5f1356c014acf02f8d", 0x5e}], 0x3, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r9, r9, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0xa8, 0x1}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001780)="0cf828f9b63eb92567db0eea89a8305a2dcf22bc73c922cde5af895a1c26c4c1a2bec60772654fcd36423bfe227f47863ed9aa03be6368718f6567f303e2052cd1a0f8eae8c41c37c21620fa9ecfea2058dea9033b6d4f483ae7c0cc5057031e39a56144e05c49b91b40129e54d1d3fa4443644a2a3dede55055308d0959", 0x7e}, {&(0x7f0000001800)="596755a31721c504014fb48de49484f49b3868f1516e55776691650862507ab92529b66aa2ee999fa6e2a87d1c88057b29e744ffde42ac3ddcf362d783e1ea623892dbffe3df62966a9864dec070e09f5b916a282cd990b3a07cc39901dd3017f54b822e7b40b9011c4270bac6f3eec43b36e641c3671a05fb07a21f2790b4cfc0fd1c3e96c06a86683a279ebb3abb5b0fc3ffe228021bef02977af8bc9294a74fd6745acba7047414d231154fef404c6a40eaebfba8cf87a6e49efdf26ef0", 0xbf}], 0x2, &(0x7f0000001ac0)=[@rights={{0x24, 0x1, 0x1, [r6, 0xffffffffffffffff, r5, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r8, r5, 0xffffffffffffffff, r5, r9, r5, r0, r1, r8]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r9, r5, 0xffffffffffffffff]}}], 0x128, 0x80}}], 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000000)=""/2) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000001400)=""/114) r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r11, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) process_vm_writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0), &(0x7f00000001c0)) 7.496309004s ago: executing program 4 (id=1811): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[], 0xfd85) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x80, 0x8, 0x59455247, 0x9, 0x2, 0x0, 0x5, 0x4, 0x1, 0x6, 0x0, 0x3}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x4000000, 0xfffffed4, 0x20}}, 0x12) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r9, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 7.495668325s ago: executing program 0 (id=1812): socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x3, 0x1, 0x2003}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) ioperm(0x0, 0x7, 0xd645) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 6.792146296s ago: executing program 7 (id=1813): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) write$binfmt_misc(r1, 0x0, 0x0) sigaltstack(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x603100) read(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r5, 0xd2a6a000) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.800322381s ago: executing program 3 (id=1814): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x444b01) ioctl(r0, 0x81, &(0x7f0000000040)="69a6a78dbba5ffdf2f8737606837c7b84422b5d0e09ec17992c0de6d5784939348c62bff16795a6d8b981a40eb8dbae5f0f55ab1ae945fe4ea103b9516e545c56f0dc6222687b0e6eb32d1e55569ba0cd728c4c7c79d3347daf11ff38aa41b6a7ccbc2b32b2508ea5cdc59a47abc814294439a51096d2f5c0bd2b43e637560c2db34f6e70196d9d23ef82aeb8f81bf712956fd16c76abc164cc4c7981b8f54eece904ef010d3caeeb08cec86ebd5f45a4c30a69e4937a95774b9cdd33829534d1e4ec7c61d043bf4e0deb7aff163a3b6") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000021c0)) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000002240), &(0x7f0000002280)=0xe) syz_usb_connect(0x5, 0x49c, &(0x7f00000022c0)={{0x12, 0x1, 0x300, 0x22, 0x51, 0xcf, 0x10, 0x10b8, 0x1f98, 0xc95a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48a, 0x1, 0x80, 0x6, 0xc0, 0x3, [{{0x9, 0x4, 0x57, 0xf, 0x9, 0xa0, 0x20, 0x63, 0x7, [], [{{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x5, 0xe, 0xf, [@generic={0x15, 0x9, "dc6d078b8dc058911a1ee3598529c53d5fb050"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2c, 0x7}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xd5, 0x2, 0x4c, [@generic={0xd8, 0x21, "e24fd1b0815d94fad4eb043a95addbb41cae733f58fe88f61d4fabb80bad3b6b01030f61b7c2652e67c68d6a4c886188322b6c5c1883f0ab2d98c8445eb67ec8ca52082871406f25d9d3ab97a43a0640351d0f82252878ed056fe7b8df7ecd9579b32f56e7b0aeb4b64fdb2606806a245b4cd6953c5acd55cc5b6e0e2d5c665c0350736b78684107b467973fd9eb79678ffd113d0feb252888e052f667e82c74eac24a0782770fdf72eb1ae56f0aa07aad4098d960b9b2049b9ef3734003758747771b7b3e810f7995071989a92770ebe645cb40db9d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0xf8, 0xf, [@generic={0xc7, 0x23, "ab8209c46bebc7bde2f2f8a5963a2896837bda4c45c531725d918ae1d582dd0dd4a6059fac3033b08255850de4ba68cf587102031d93644f8652b41f789a5859fc154e0f1d0060b765b3974a77d0719cd36f4b9c037b5c758f8e36ecf7d8e78b8518bdf02680b338d54f5ebfa95bd5fccef91eb3fd16b63a42044ce25214a1977f25556b570c6c0f00f447c45cd034e5b52b63b135d14f5187eb5bb2c65c135a8fd40f17dda80ae8dda1ca9e7ecbc3c9a5cfd79c44550a1b268d46d4160d193dc1376c4db7"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x3, 0x8a, 0x32, [@generic={0xd3, 0x21, "78d057d75bb3e2021876eba9134c39d70aebbbb63cd28b3e8245e221b5064367f700c7e1b20d9684c37ce1dcc64c7dcf5c778847d4aac0465cf3e8fc6b5a19e48969050bb09ee0e31fca4ba96ea15ab4b7dd60265d9d32defa2f1756204c160202e9fd081c057d55994e0f15b9406444b1471ac2e1529b6db3fdb909896322f0316d946739356c6365d9b1c0cc6dae6a6167833739fa21c25ece78a0716c126fbc6029f9085781d8b425ef00ac22df8da12fea647df5b5ba5d4390c1adc52f5d5d014e60d0092c275fce3261cba6398537"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x410, 0x91, 0xe, 0x9a}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x3, 0x0, 0xf, [@generic={0x49, 0x4, "863754bc79f65c30e9122417e3fe952550a536da37043c69fa85b2ff01fef1565c549659069ff932baf08b873791ad4c9c4a3097243b5fda72ed24e29f3c8c6721b6ce90d2da49"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0xbb, 0xf9, 0xca}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xc, 0x3, 0x6, [@generic={0x5e, 0x9, "b526ae54cb5590e4acc8155c3f48177582386b8aa398f79ab0fe3e025ab019f83116d3d21ff89abc0844e986661dc030adda97a382c08a50955b33793bb5ee46a282d57fbf16bd95aa50d494bffe51eac5905bff0bf4ec1ac40a7234"}, @generic={0xa5, 0x31, "a69f5339d7d4f1fe96f33cf88ca78a71daae229f9513e886885ce88acb3825c27b425c9c456dfa3a2dc87ea0d5e0f7b6f02c8dcef6ea260a6a4d82271d03029cbc057fb3e96dc3c32adfbf1e74d846942a9749c4c300effc9713bc74059bce484fd8a0f9c0b94b89171b2894d64db764fd9c63d5699fb458488ea96534e5ff32f84f8a2e3316f58f9f3f5d75f4538723c5a6ad50c20ed34af2da4dbd0166e2c0caa8a1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0x67, 0x3, [@generic={0x4d, 0xa, "4b86ac2ed0dd5c821a8bee76d950bf9b892495878b586fef6ef5b1fcde6bb236d7b0a570fb76f02b292d520a7acd9c167f299feb805cab2ed479bcf3f4d7b231cb9bfc766daa456bcfb197"}]}}]}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x300, 0x1, 0x0, 0x7f, 0xff, 0xc1}, 0x1e, &(0x7f00000027c0)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x7, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x7, 0x68, 0xff, 0x40}]}, 0x1, [{0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x480a}}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000028c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002900)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002a00)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000002c00)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x84, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0xc8c5}, 0x800) getpgid(0xffffffffffffffff) 5.798392984s ago: executing program 2 (id=1815): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000000000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$SG_EMULATED_HOST(r2, 0x2283, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04090700c9"], 0x6) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000100)='./file0\x00', 0x6000097e) ftruncate(0xffffffffffffffff, 0x6000000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x9, '\x00', 0xbf, 0x3c}]}}}, 0x12) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 5.739791888s ago: executing program 4 (id=1816): r0 = socket(0x28, 0x5, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r2, 0xab03) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x1701) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0x125f) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r4, 0x0, 0x0) flock(r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r6, 0x2, {0x1, 0xf0, 0x3}, 0xff}, 0x18) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x1, {0x1, 0xf0}, 0x3}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.227039712s ago: executing program 0 (id=1817): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000500000000000000000000f6fffffffeffffdd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = getpgid(0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000140)=r5) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) 4.929056796s ago: executing program 7 (id=1818): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaea", 0x100}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdir(&(0x7f0000000000)='./file1\x00', 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 4.894993336s ago: executing program 4 (id=1819): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x60, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x28}], 0x1}, 0x0) 4.736153361s ago: executing program 4 (id=1820): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) write$char_usb(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x7) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket(0x1d, 0x2, 0x6) ioperm(0x0, 0x444, 0x1) alarm(0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) mount$9p_rdma(&(0x7f0000000440), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x822410, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000008,sq=0x000000000000000b,context=unconfined_u,euid<', @ANYRESDEC=r5, @ANYBLOB="74b62980aa120ba1b6648cf1a71cd118d03e8d9216cbcc77ce89e4556280675c5cb018624df47821e50b0ff744011b5441e2d24a2bfc5f5bb72883c41f8e1c83ba408e295266b1d70c70a0c39ba1616993a8501c087b4a3949db44fcfafb5be085b28b92ea51137d66097638df17a821f7c7462d96981fe77967f7d7f4fdcf63a9a478a57ca88fa78ba7f0d7f2c284da81ca1ae255f74b5fad4b9945828054c1864ab975935c6800be093c886f204eaa540da5150a41eb2ed680cd1b2607c26ba18f042cad6798c94196c336c58814896e04038f54039b234dd5cc0e2196835b09000000000000000000"]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='xprtrdma_op_connect\x00', r6}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) 4.695870946s ago: executing program 2 (id=1821): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000043c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001006000080003"], 0x50}}, 0x0) 4.634401246s ago: executing program 7 (id=1822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000040)={0x26, 0x1, 0x1, "27425b895f17386bcec5d8665c0084feeaa3e6b8a80052d063e6179d13f019e3"}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) bind$ax25(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) close(r4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) 3.340303667s ago: executing program 2 (id=1823): userfaultfd(0x801) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x100001, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlinkprop={0x40, 0x10, 0xf8b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="2cf9f54fbe58"}]}}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @alu={0x4, 0x0, 0xd, 0x1, 0x2, 0x50, 0xffffffffffffffff}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.337741495s ago: executing program 0 (id=1824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000008000000000019f5bc22231d5528bbc594b20d346c7230fcd95bec293b103beab7a740e3f23cdb95c2c7e87a9ae6749faf25a93b8f28ab05ed0000000000000000000080000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendfile(r5, r4, 0x0, 0x3a) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r3, &(0x7f0000000080)="0b000300010001", 0x7) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500000000007b2be8130dde1c399a6b1227bb5f8cd5c6d2f3ecb5c0e7c8adbef4016849ba65f583714a9503c3eb47f92b100684546f64fb845901fe8977ff7b2f7020aacd1c"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 3.062941012s ago: executing program 7 (id=1825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000782e000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000210007010000f6ffffffb702000008000000b70300000000000085003f001000000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.352076231s ago: executing program 7 (id=1826): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f000053a000/0x4000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = semget(0x0, 0x1, 0x281) semctl$SEM_STAT_ANY(r3, 0x7, 0x14, &(0x7f00000000c0)=""/251) r4 = semget(0x2, 0x1, 0x180) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000280)=""/112) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000001c00)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001480)="bbdc6c4285e43f43d7a40b5c8a14eb826cf50bbe37f108398131b544fae94616ab91a0d02fdbdbbb174222590bcafcb12bf4b9d01620ec670545a085f00fda3b72a1c16200f2152a6aa2c8062d8de790b35479593520a338d8dab0079dbfa29c5cd2c2c8c18fdaedbe3fb06f48a12c1cb38322a792de16c1fa025f2c5a71d8edf7bef718812fe388ffe5d4eb8d20e8597ee62c7292eab6ba7c6268dc0f9927502c75408e83d4b9d3e5ee3d7b20216c2195583dd3d6c7", 0xb6}, {&(0x7f0000001540)="bd1eb8911b306e7d10c5105d92ae0e5008bfbacc9941602b3eb885d8546e633542f781560896a5c6132c89cbe39d737529df0068533beeb37e7ae90a30e68e415ca793c89393bc29ee89fed67e784cfd630d3cbc7af5776ff8a28767e022b5032b5baf5f09d1c926f11d79822b10a122eb47b508bbf922098be7572d646c9c1e547d04cda6e8ffacebec3b824b63ce62996a9824a547b3d218f0153a63187c4d3655c8202314c642a0304636f2a2374cec1f59a2d57ce764028d", 0xba}, {&(0x7f0000000380)="1ffbd202ca9f3fc164865a4b481d18de8d168d254b8d87161909aacfe8a1b46f069caa6ed6cf7fedee4f4e69df839d396a05f9bf5885261a632b7b11100664742afb9c0f9fba99b4bd7b5980729970e180c6afe41e5f1356c014acf02f8d", 0x5e}], 0x3, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r9, r9, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0xa8, 0x1}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001780)="0cf828f9b63eb92567db0eea89a8305a2dcf22bc73c922cde5af895a1c26c4c1a2bec60772654fcd36423bfe227f47863ed9aa03be6368718f6567f303e2052cd1a0f8eae8c41c37c21620fa9ecfea2058dea9033b6d4f483ae7c0cc5057031e39a56144e05c49b91b40129e54d1d3fa4443644a2a3dede55055308d0959", 0x7e}, {&(0x7f0000001800)="596755a31721c504014fb48de49484f49b3868f1516e55776691650862507ab92529b66aa2ee999fa6e2a87d1c88057b29e744ffde42ac3ddcf362d783e1ea623892dbffe3df62966a9864dec070e09f5b916a282cd990b3a07cc39901dd3017f54b822e7b40b9011c4270bac6f3eec43b36e641c3671a05fb07a21f2790b4cfc0fd1c3e96c06a86683a279ebb3abb5b0fc3ffe228021bef02977af8bc9294a74fd6745acba7047414d231154fef404c6a40eaebfba8cf87a6e49efdf26ef0", 0xbf}], 0x2, &(0x7f0000001ac0)=[@rights={{0x24, 0x1, 0x1, [r6, 0xffffffffffffffff, r5, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r8, r5, 0xffffffffffffffff, r5, r9, r5, r0, r1, r8]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r9, r5, 0xffffffffffffffff]}}], 0x128, 0x80}}], 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000000)=""/2) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000001400)=""/114) r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r11, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) process_vm_writev(r2, &(0x7f00000000c0)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0), &(0x7f00000001c0)) 2.232607781s ago: executing program 3 (id=1827): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[], 0xfd85) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x80, 0x8, 0x59455247, 0x9, 0x2, 0x0, 0x5, 0x4, 0x1, 0x6, 0x0, 0x3}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x4000000, 0xfffffed4, 0x20}}, 0x12) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r9, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 1.79655513s ago: executing program 0 (id=1828): socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x3, 0x1, 0x2003}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) ioperm(0x0, 0x7, 0xd645) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 1.263871716s ago: executing program 7 (id=1829): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x80000000}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) write$binfmt_misc(r1, 0x0, 0x0) sigaltstack(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x603100) read(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r5, 0xd2a6a000) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.228644539s ago: executing program 3 (id=1830): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e00000001000000000000001400fbffff7f00002900000034000000000000000000000050"], 0x98}}], 0x1, 0x0) 1.190633726s ago: executing program 4 (id=1831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x8000) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x16, 0x200, 0x70bd2b, 0x25dfdbfd, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.132070845s ago: executing program 3 (id=1832): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000000000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$SG_EMULATED_HOST(r2, 0x2283, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04090700c9"], 0x6) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000100)='./file0\x00', 0x6000097e) ftruncate(0xffffffffffffffff, 0x6000000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x9, '\x00', 0xbf, 0x3c}]}}}, 0x12) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1.131652792s ago: executing program 4 (id=1833): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x2, 0xb, 0x8, 0x1, @time={0x2, 0xa24}, {0x1, 0x7}, {0x8, 0x23}, @control={0x7, 0x6, 0x401}}, {0x7, 0x3, 0x6, 0x1d, @tick=0x6, {0x3, 0x7}, {0x48, 0x1d}, @raw8={"bcde3b2a7e7a496cd7f915c1"}}, {0x6, 0x3, 0x8, 0xb9, @time={0x0, 0x10000}, {0x7, 0x2}, {0xf, 0xc}, @control={0x5, 0x5, 0x21}}, {0xa, 0x5, 0x8, 0x4, @time={0xffff5853, 0x10}, {0x27, 0x8}, {0x5}, @addr={0x9, 0x6}}, {0x5, 0x1, 0x3, 0x2, @tick=0xffff60f0, {0x9, 0x6}, {0x6, 0x5}, @result={0x3, 0x7}}, {0x5, 0x0, 0x3, 0x81, @tick, {0x7, 0x6}, {0xe, 0x4}, @time=@time={0x4, 0x6}}], 0xa8) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x31d6099de9c188e6, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008b"]) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mpol=interleave=relative\x00\x00']) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x3, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 986.567497ms ago: executing program 0 (id=1834): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000500000000000000000000f6fffffffeffffdd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = getpgid(0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000140)=r5) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) 217.214873ms ago: executing program 3 (id=1835): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 0s ago: executing program 3 (id=1836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000040)={0x26, 0x1, 0x1, "27425b895f17386bcec5d8665c0084feeaa3e6b8a80052d063e6179d13f019e3"}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) bind$ax25(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) close(r4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) kernel console output (not intermixed with test programs): : New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.957457][ T7110] usb 7-1: Product: syz [ 856.963326][ T7110] usb 7-1: Manufacturer: syz [ 856.967935][ T7110] usb 7-1: SerialNumber: syz [ 857.411516][ T7110] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 857.437248][ T7110] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 857.460439][ T7110] dib0700: firmware download failed at 7 with -22 [ 857.495345][ T7110] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 857.673687][T12634] overlay: ./file0 is not a directory [ 858.464788][ T7110] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 858.473180][ T7110] dib0700: firmware download failed at 7 with -22 [ 858.500468][ T7110] usb 7-1: USB disconnect, device number 25 [ 859.675976][T12655] IPVS: Error connecting to the multicast addr [ 860.672164][ T7674] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 862.356203][ T7674] usb 6-1: Using ep0 maxpacket: 8 [ 862.531957][ T7674] usb 6-1: device descriptor read/all, error -71 [ 862.992748][T12694] overlay: ./file0 is not a directory [ 864.237492][T12701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.787356][T12713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.815395][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.823010][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.689231][T12751] orangefs_mount: mount request failed with -4 [ 876.434458][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.962138][T12803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 892.972185][T12803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 892.981751][T12803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 892.989543][T12803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 892.998835][T12803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 893.007456][T12803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 893.447099][T12800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.775399][T12800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.786243][T12800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.795136][T12800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.802764][T12800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 893.810129][T12800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 895.440101][T12800] Bluetooth: hci5: command tx timeout [ 896.903591][T12800] Bluetooth: hci1: command tx timeout [ 897.075752][T12828] x_tables: ip_tables: osf match: only valid for protocol 6 [ 898.190135][T12800] Bluetooth: hci5: command tx timeout [ 899.182929][T12800] Bluetooth: hci1: command tx timeout [ 901.569536][T12800] Bluetooth: hci5: command tx timeout [ 901.582964][T12800] Bluetooth: hci1: command tx timeout [ 903.619842][T11249] Bluetooth: hci1: command tx timeout [ 903.625318][T11249] Bluetooth: hci5: command tx timeout [ 904.165707][T11249] Bluetooth: hci4: command 0x0406 tx timeout [ 904.171896][T11249] Bluetooth: hci0: command 0x0406 tx timeout [ 906.446314][T12854] capability: warning: `syz.9.1475' uses 32-bit capabilities (legacy support in use) [ 908.736108][ T7155] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 909.049980][ T7155] usb 6-1: Using ep0 maxpacket: 32 [ 911.105268][ T7155] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 911.123888][ T7155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.592611][ T7110] IPVS: starting estimator thread 0... [ 911.610744][ T7155] usb 6-1: Product: syz [ 911.629118][ T7155] usb 6-1: Manufacturer: syz [ 911.652593][ T7155] usb 6-1: SerialNumber: syz [ 911.690139][T12879] IPVS: using max 27 ests per chain, 64800 per kthread [ 911.720989][ T7155] usb 6-1: config 0 descriptor?? [ 911.732787][ T7155] usb 6-1: can't set config #0, error -71 [ 911.764810][ T7155] usb 6-1: USB disconnect, device number 30 [ 911.839189][ T29] audit: type=1400 audit(1732592268.270:684): avc: denied { write } for pid=12883 comm="syz.5.1482" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 912.583703][T12890] fuse: Unknown parameter 'å×”ÿ Ff' [ 914.180826][ T7155] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 914.340914][ T7155] usb 10-1: Using ep0 maxpacket: 16 [ 914.353114][ T7155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.366101][ T7155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.380939][ T7155] usb 10-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 914.393461][ T7155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.406637][ T7155] usb 10-1: config 0 descriptor?? [ 914.904526][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.916046][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.975565][ T7155] usbhid 10-1:0.0: can't add hid device: -71 [ 914.984954][ T7155] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 915.005985][ T7155] usb 10-1: USB disconnect, device number 34 [ 915.742014][T12905] 9pnet_fd: Insufficient options for proto=fd [ 925.440495][T12803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 925.449441][T12803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 925.459099][T12803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 925.481913][T12803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 925.495315][T12803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 925.503339][T12803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 927.239152][T12839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 927.252772][T12839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 927.262415][T12839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 927.273848][T12839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 927.284413][T12839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 927.291753][T12839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 927.520150][T12839] Bluetooth: hci3: command tx timeout [ 929.360025][T12839] Bluetooth: hci6: command tx timeout [ 929.600089][T12839] Bluetooth: hci3: command tx timeout [ 931.300233][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.310683][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.561720][T12839] Bluetooth: hci6: command tx timeout [ 932.567119][T12839] Bluetooth: hci3: command tx timeout [ 934.642749][T12839] Bluetooth: hci3: command tx timeout [ 934.648140][T12839] Bluetooth: hci6: command tx timeout [ 936.723803][T12839] Bluetooth: hci6: command tx timeout [ 1010.721920][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1010.820767][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1014.568073][T12839] Bluetooth: hci7: no memory for command (opcode 0x0c03) [ 1014.575926][T12839] Bluetooth: hci7: Opcode 0x0c03 failed: -12 [ 1014.847552][T12839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1014.871411][T12839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1014.889357][T12839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1014.912515][T12839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1014.949962][T12839] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1014.971536][T12839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1017.125123][T12839] Bluetooth: hci7: command tx timeout [ 1018.415847][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1018.425622][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1018.434018][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1018.460227][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1018.500083][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1018.510043][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1018.785269][T12839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1018.796998][T12839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1018.804544][T12800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1018.814396][T12839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1018.827275][T11249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1018.835551][T12839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1018.842808][T11249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1018.872841][T12929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1018.881508][T12929] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1018.888920][T12929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1018.896399][T12929] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1018.976815][T12929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1018.984649][T12929] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1018.991992][T12929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1019.000868][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1019.074127][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1019.082449][ T5836] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1019.091054][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1019.157678][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1019.166899][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1019.179940][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1019.193731][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1019.203375][T12800] Bluetooth: hci7: command tx timeout [ 1019.209259][ T5836] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1019.218003][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1019.723650][T11609] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.969805][T11609] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.180417][T11609] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.262886][T11609] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.418160][T12931] chnl_net:caif_netlink_parms(): no params data found [ 1020.431997][T12923] chnl_net:caif_netlink_parms(): no params data found [ 1020.457790][T12925] chnl_net:caif_netlink_parms(): no params data found [ 1020.487447][T12921] chnl_net:caif_netlink_parms(): no params data found [ 1020.560520][ T5836] Bluetooth: hci1: command tx timeout [ 1020.582535][T12927] chnl_net:caif_netlink_parms(): no params data found [ 1020.643833][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.651124][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.658217][T12923] bridge_slave_0: entered allmulticast mode [ 1020.664696][T12923] bridge_slave_0: entered promiscuous mode [ 1020.675690][T11609] bridge_slave_1: left allmulticast mode [ 1020.681388][T11609] bridge_slave_1: left promiscuous mode [ 1020.686976][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.696844][T11609] bridge_slave_0: left allmulticast mode [ 1020.702616][T11609] bridge_slave_0: left promiscuous mode [ 1020.708218][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.963806][ T5836] Bluetooth: hci5: command tx timeout [ 1020.976121][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.990055][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.999630][T11609] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1021.013883][T11609] bond0 (unregistering): Released all slaves [ 1021.023875][T12931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.031025][T12931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.038140][T12931] bridge_slave_0: entered allmulticast mode [ 1021.044279][ T5836] Bluetooth: hci2: command tx timeout [ 1021.045130][T12931] bridge_slave_0: entered promiscuous mode [ 1021.095616][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.107282][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.114628][T12923] bridge_slave_1: entered allmulticast mode [ 1021.121975][T12923] bridge_slave_1: entered promiscuous mode [ 1021.127333][ T5836] Bluetooth: hci8: command tx timeout [ 1021.138672][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.146171][T12931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.153270][T12931] bridge_slave_1: entered allmulticast mode [ 1021.159596][T12931] bridge_slave_1: entered promiscuous mode [ 1021.172840][T12925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.180186][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.187638][T12925] bridge_slave_0: entered allmulticast mode [ 1021.194694][T12925] bridge_slave_0: entered promiscuous mode [ 1021.231675][T12921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.238784][T12921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.249074][T12921] bridge_slave_0: entered allmulticast mode [ 1021.258105][T12921] bridge_slave_0: entered promiscuous mode [ 1021.272044][T12931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.281325][ T5836] Bluetooth: hci9: command tx timeout [ 1021.282249][T12925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.294560][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.302927][T12925] bridge_slave_1: entered allmulticast mode [ 1021.309659][T12925] bridge_slave_1: entered promiscuous mode [ 1021.319267][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.330278][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.341240][T12921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.348319][T12921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.355768][T12921] bridge_slave_1: entered allmulticast mode [ 1021.363502][T12921] bridge_slave_1: entered promiscuous mode [ 1021.378296][T12931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.428705][T12925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.443616][T12925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.468219][T12923] team0: Port device team_slave_0 added [ 1021.475654][T12921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.486982][T12921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.507343][T12931] team0: Port device team_slave_0 added [ 1021.530789][T11609] hsr_slave_0: left promiscuous mode [ 1021.536430][T11609] hsr_slave_1: left promiscuous mode [ 1021.542386][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.551313][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.558900][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.566414][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.582711][T11609] veth1_macvtap: left promiscuous mode [ 1021.588195][T11609] veth0_macvtap: left promiscuous mode [ 1021.594060][T11609] veth1_vlan: left promiscuous mode [ 1021.599287][T11609] veth0_vlan: left promiscuous mode [ 1021.893398][T11609] team0 (unregistering): Port device team_slave_1 removed [ 1021.929299][T11609] team0 (unregistering): Port device team_slave_0 removed [ 1022.235875][T12923] team0: Port device team_slave_1 added [ 1022.259541][T12931] team0: Port device team_slave_1 added [ 1022.288121][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.295409][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.302602][T12927] bridge_slave_0: entered allmulticast mode [ 1022.309395][T12927] bridge_slave_0: entered promiscuous mode [ 1022.317335][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.324890][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.332086][T12927] bridge_slave_1: entered allmulticast mode [ 1022.338965][T12927] bridge_slave_1: entered promiscuous mode [ 1022.353902][T12921] team0: Port device team_slave_0 added [ 1022.375452][T12931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.389464][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.420380][T12931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.437417][T12925] team0: Port device team_slave_0 added [ 1022.448155][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.455197][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.481920][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.494045][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.501213][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.527840][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.540907][T12921] team0: Port device team_slave_1 added [ 1022.548952][T12931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.556306][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.582580][T12931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.603102][T12925] team0: Port device team_slave_1 added [ 1022.641679][ T5836] Bluetooth: hci1: command tx timeout [ 1022.648724][T12925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.656598][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.683369][T12925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.697828][T12927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.712566][T12927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.734085][T12925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.741151][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.768289][T12925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.792917][T12921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.799980][T12921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.826020][T12921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.837564][T12921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.844736][T12921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.871529][T12921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.907895][T12927] team0: Port device team_slave_0 added [ 1022.916487][T12927] team0: Port device team_slave_1 added [ 1022.935236][T12931] hsr_slave_0: entered promiscuous mode [ 1022.941349][T12931] hsr_slave_1: entered promiscuous mode [ 1022.947666][T12931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.955494][T12931] Cannot create hsr debugfs directory [ 1022.964020][T12923] hsr_slave_0: entered promiscuous mode [ 1022.970504][T12923] hsr_slave_1: entered promiscuous mode [ 1022.976531][T12923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.985059][T12923] Cannot create hsr debugfs directory [ 1023.007930][T12927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.015171][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.041888][ T5836] Bluetooth: hci5: command tx timeout [ 1023.043608][T12927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.067228][T12921] hsr_slave_0: entered promiscuous mode [ 1023.073338][T12921] hsr_slave_1: entered promiscuous mode [ 1023.079184][T12921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.086922][T12921] Cannot create hsr debugfs directory [ 1023.101264][T12925] hsr_slave_0: entered promiscuous mode [ 1023.107468][T12925] hsr_slave_1: entered promiscuous mode [ 1023.114858][T12925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.122546][ T5836] Bluetooth: hci2: command tx timeout [ 1023.124600][T12925] Cannot create hsr debugfs directory [ 1023.134278][T12927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.141456][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.167639][T12927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.200191][ T5836] Bluetooth: hci8: command tx timeout [ 1023.224450][T12927] hsr_slave_0: entered promiscuous mode [ 1023.231680][T12927] hsr_slave_1: entered promiscuous mode [ 1023.237561][T12927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.245139][T12927] Cannot create hsr debugfs directory [ 1023.347077][T11609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.361080][ T5836] Bluetooth: hci9: command tx timeout [ 1023.414739][T11609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.475613][T11609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.526927][T11609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.638146][T11609] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.723193][T11609] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.804195][T11609] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.876627][T11609] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.999285][T11609] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.080602][T11609] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.135145][T11609] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.217161][T11609] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.338217][T11609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.416366][T11609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.477916][T11609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.524644][T11609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.605120][T11609] bridge_slave_1: left allmulticast mode [ 1024.616028][T11609] bridge_slave_1: left promiscuous mode [ 1024.621878][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.631623][T11609] bridge_slave_0: left allmulticast mode [ 1024.637247][T11609] bridge_slave_0: left promiscuous mode [ 1024.647100][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.655675][T11609] bridge_slave_1: left allmulticast mode [ 1024.661522][T11609] bridge_slave_1: left promiscuous mode [ 1024.667721][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.675651][T11609] bridge_slave_0: left allmulticast mode [ 1024.681470][T11609] bridge_slave_0: left promiscuous mode [ 1024.687058][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.699412][T11609] bridge_slave_1: left allmulticast mode [ 1024.705219][T11609] bridge_slave_1: left promiscuous mode [ 1024.711012][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.718883][T11609] bridge_slave_0: left allmulticast mode [ 1024.724576][ T5836] Bluetooth: hci1: command tx timeout [ 1024.732256][T11609] bridge_slave_0: left promiscuous mode [ 1024.737879][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.746667][T11609] bridge_slave_1: left allmulticast mode [ 1024.752509][T11609] bridge_slave_1: left promiscuous mode [ 1024.758103][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.766463][T11609] bridge_slave_0: left allmulticast mode [ 1024.772299][T11609] bridge_slave_0: left promiscuous mode [ 1024.777931][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.122722][ T5836] Bluetooth: hci5: command tx timeout [ 1025.204342][ T5836] Bluetooth: hci2: command tx timeout [ 1025.290243][ T5836] Bluetooth: hci8: command tx timeout [ 1025.440003][ T5836] Bluetooth: hci9: command tx timeout [ 1025.599300][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.615162][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.624615][T11609] bond0 (unregistering): Released all slaves [ 1025.718067][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.727895][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.739763][T11609] bond0 (unregistering): Released all slaves [ 1025.829275][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.839468][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.851691][T11609] bond0 (unregistering): Released all slaves [ 1025.938980][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.948928][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.960011][T11609] bond0 (unregistering): Released all slaves [ 1026.326832][T12923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1026.350639][T12923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1026.375804][T12923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1026.385232][T12923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1026.452101][T12925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1026.460448][T12925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1026.473500][T12925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1026.494999][T12925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1026.555911][T12931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1026.567571][T12931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1026.579009][T12931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1026.595607][T12931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1026.683391][T12921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1026.693718][T12921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1026.704357][T12921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1026.719436][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.752288][T12921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1026.777790][T12925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.795970][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.803003][ T5836] Bluetooth: hci1: command tx timeout [ 1026.818981][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.826045][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.837690][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.844735][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.868367][T11609] hsr_slave_0: left promiscuous mode [ 1026.874294][T11609] hsr_slave_1: left promiscuous mode [ 1026.879815][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.887458][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.896816][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.904701][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.914029][T11609] hsr_slave_0: left promiscuous mode [ 1026.919656][T11609] hsr_slave_1: left promiscuous mode [ 1026.925404][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.933125][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.942872][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.950476][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.959662][T11609] hsr_slave_0: left promiscuous mode [ 1026.965365][T11609] hsr_slave_1: left promiscuous mode [ 1026.975205][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.982726][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.993662][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.001267][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.014154][T11609] hsr_slave_0: left promiscuous mode [ 1027.019821][T11609] hsr_slave_1: left promiscuous mode [ 1027.025494][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.033527][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.042156][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.049522][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.085112][T11609] veth1_macvtap: left promiscuous mode [ 1027.090762][T11609] veth0_macvtap: left promiscuous mode [ 1027.096254][T11609] veth1_vlan: left promiscuous mode [ 1027.101529][T11609] veth0_vlan: left promiscuous mode [ 1027.107333][T11609] veth1_macvtap: left promiscuous mode [ 1027.112861][T11609] veth0_macvtap: left promiscuous mode [ 1027.118369][T11609] veth1_vlan: left promiscuous mode [ 1027.123716][T11609] veth0_vlan: left promiscuous mode [ 1027.132137][T11609] veth1_macvtap: left promiscuous mode [ 1027.137624][T11609] veth0_macvtap: left promiscuous mode [ 1027.143301][T11609] veth1_vlan: left promiscuous mode [ 1027.148513][T11609] veth0_vlan: left promiscuous mode [ 1027.154494][T11609] veth1_macvtap: left promiscuous mode [ 1027.160025][T11609] veth0_macvtap: left promiscuous mode [ 1027.165515][T11609] veth1_vlan: left promiscuous mode [ 1027.170914][T11609] veth0_vlan: left promiscuous mode [ 1027.199998][ T5836] Bluetooth: hci5: command tx timeout [ 1027.280027][ T5836] Bluetooth: hci2: command tx timeout [ 1027.360172][ T5836] Bluetooth: hci8: command tx timeout [ 1027.520449][ T5836] Bluetooth: hci9: command tx timeout [ 1027.564376][T11609] team0 (unregistering): Port device team_slave_1 removed [ 1027.595242][T11609] team0 (unregistering): Port device team_slave_0 removed [ 1028.111001][T11609] team0 (unregistering): Port device team_slave_1 removed [ 1028.148605][T11609] team0 (unregistering): Port device team_slave_0 removed [ 1028.695223][T11609] team0 (unregistering): Port device team_slave_1 removed [ 1028.731459][T11609] team0 (unregistering): Port device team_slave_0 removed [ 1029.267595][T11609] team0 (unregistering): Port device team_slave_1 removed [ 1029.304128][T11609] team0 (unregistering): Port device team_slave_0 removed [ 1029.618923][T12927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1029.659252][T12931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.670657][T12927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1029.681737][T12927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1029.698218][T12927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1029.726636][T12925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.766572][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.773653][T11624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.805379][T12931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.831573][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.838644][T11624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.855566][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.862689][T11624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.884993][T12921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.949426][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.956541][ T7217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.983436][T12921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.006686][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.013767][T11618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.053757][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.060834][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.086053][T12921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.136948][T12923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.225298][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.276498][T12927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.342908][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.350002][T11618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.390915][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.398017][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.439622][T12931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.455223][T12925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.546342][T12921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.568729][T12927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1030.590418][T12927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.644581][T12931] veth0_vlan: entered promiscuous mode [ 1030.654260][T12931] veth1_vlan: entered promiscuous mode [ 1030.668603][T12923] veth0_vlan: entered promiscuous mode [ 1030.701887][T12923] veth1_vlan: entered promiscuous mode [ 1030.718329][T12925] veth0_vlan: entered promiscuous mode [ 1030.772450][T12925] veth1_vlan: entered promiscuous mode [ 1030.795168][T12931] veth0_macvtap: entered promiscuous mode [ 1030.810278][T12931] veth1_macvtap: entered promiscuous mode [ 1030.831992][T12923] veth0_macvtap: entered promiscuous mode [ 1030.840850][T12921] veth0_vlan: entered promiscuous mode [ 1030.849541][T12923] veth1_macvtap: entered promiscuous mode [ 1030.869728][T12927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.879401][T12931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.900272][T12921] veth1_vlan: entered promiscuous mode [ 1030.911764][T12925] veth0_macvtap: entered promiscuous mode [ 1030.930668][T12931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.939043][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.950311][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.962051][T12923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.974407][T12931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.983669][T12931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.992730][T12931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.001643][T12931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.014279][T12925] veth1_macvtap: entered promiscuous mode [ 1031.031025][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.054376][T11609] IPVS: stop unused estimator thread 0... [ 1031.060573][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.079417][T12923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.100676][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.111680][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.122104][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.132746][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.143664][T12925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.165405][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.176350][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.187142][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.201263][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.212200][T12925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.220836][T12923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.229516][T12923] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.238387][T12923] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.247273][T12923] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.266428][T12921] veth0_macvtap: entered promiscuous mode [ 1031.275066][T12921] veth1_macvtap: entered promiscuous mode [ 1031.287301][T12925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.296853][T12925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.305690][T12925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.315506][T12925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.395327][T12921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.406735][T12921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.417305][T12921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.427876][T12921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.437809][T12921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.448920][T12921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.459498][T12921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.471727][ T7217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.477024][T12927] veth0_vlan: entered promiscuous mode [ 1031.479529][ T7217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.488214][T12927] veth1_vlan: entered promiscuous mode [ 1031.508666][T12921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.519810][T12921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.530196][T12921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.540973][T12921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.550995][T12921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.561445][T12921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.571878][T12921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.590509][T12921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.599203][T12921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.608942][T12921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.617751][T12921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.632741][T11609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.644491][T11609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.674547][T12927] veth0_macvtap: entered promiscuous mode [ 1031.693462][T12927] veth1_macvtap: entered promiscuous mode [ 1031.709354][T11621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.718494][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.719297][T11621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.727731][ T7217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.736750][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.743498][ T7217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.769518][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.780258][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.791766][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.802220][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.812314][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.822840][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.832707][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.843233][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.854430][T12927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.881163][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.891836][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.901823][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.912335][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.922337][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.932785][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.942652][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.953178][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.964201][T12927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.986789][T11618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.009894][T11618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.039531][T12927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.056122][T12927] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.068808][T12927] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.086691][T12927] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.081681][T11617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.082819][ T6844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.092810][T11617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.122474][ T6844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.171342][T11624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.183416][T11624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.329018][ T29] audit: type=1400 audit(1732592389.740:685): avc: denied { shutdown } for pid=13011 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1033.348461][T11624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.362300][T11624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.109510][ T5985] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1034.388517][ T5985] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 1034.396829][ T5985] usb 1-1: config 0 has no interface number 0 [ 1034.405145][ T5985] usb 1-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 1034.587252][T13040] overlayfs: conflicting options: userxattr,verity=on [ 1034.597387][ T5985] usb 1-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid maxpacket 128, setting to 64 [ 1035.430136][ T5985] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 1035.439395][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.447866][ T5985] usb 1-1: Product: syz [ 1035.452534][ T5985] usb 1-1: Manufacturer: syz [ 1035.457125][ T5985] usb 1-1: SerialNumber: syz [ 1035.614629][ T5985] usb 1-1: config 0 descriptor?? [ 1035.635339][ T29] audit: type=1400 audit(1732592392.070:686): avc: denied { read write } for pid=12927 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1035.699169][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 1035.859347][T13012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1035.918396][ T29] audit: type=1400 audit(1732592392.130:687): avc: denied { prog_load } for pid=13045 comm="syz.7.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1036.080801][T13044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.113711][T13012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.139996][ T29] audit: type=1400 audit(1732592392.130:688): avc: denied { bpf } for pid=13045 comm="syz.7.1496" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.166300][ T29] audit: type=1400 audit(1732592392.130:689): avc: denied { perfmon } for pid=13045 comm="syz.7.1496" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.210458][ T29] audit: type=1400 audit(1732592392.130:690): avc: denied { create } for pid=13042 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1036.237057][ T29] audit: type=1400 audit(1732592392.150:691): avc: denied { prog_run } for pid=13045 comm="syz.7.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1036.271005][ T29] audit: type=1400 audit(1732592392.180:692): avc: denied { write } for pid=13045 comm="syz.7.1496" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1036.294682][ T29] audit: type=1400 audit(1732592392.200:693): avc: denied { read } for pid=13045 comm="syz.7.1496" dev="nsfs" ino=4026534422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1036.304997][ T5985] usb 1-1: USB disconnect, device number 11 [ 1036.342914][ T29] audit: type=1400 audit(1732592392.200:694): avc: denied { open } for pid=13045 comm="syz.7.1496" path="net:[4026534422]" dev="nsfs" ino=4026534422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1037.668135][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1037.677115][T13070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1037.729347][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 1037.738291][T13071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1500'. [ 1038.699970][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1038.699987][ T29] audit: type=1400 audit(1732592394.720:737): avc: denied { connect } for pid=13072 comm="syz.7.1502" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1038.734924][ T29] audit: type=1400 audit(1732592394.730:738): avc: denied { write } for pid=13072 comm="syz.7.1502" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1038.829801][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 1038.838802][T13086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 1039.030052][ T29] audit: type=1326 audit(1732592394.880:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb7e819 code=0x7ffc0000 [ 1039.124654][ T29] audit: type=1326 audit(1732592394.880:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb7e819 code=0x7ffc0000 [ 1039.173022][ T29] audit: type=1326 audit(1732592394.900:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd52eb7d1b0 code=0x7ffc0000 [ 1039.232532][ T29] audit: type=1326 audit(1732592394.900:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd52eb80047 code=0x7ffc0000 [ 1039.330012][ T29] audit: type=1326 audit(1732592394.900:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52eb7e819 code=0x7ffc0000 [ 1039.422410][ T29] audit: type=1326 audit(1732592394.900:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd52eb80047 code=0x7ffc0000 [ 1039.446489][ T29] audit: type=1326 audit(1732592394.900:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd52eb7d4aa code=0x7ffc0000 [ 1039.470998][ T29] audit: type=1326 audit(1732592394.900:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.7.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb7e819 code=0x7ffc0000 [ 1041.712453][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1513'. [ 1041.721595][T13116] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1513'. [ 1042.485750][T12967] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1042.742629][T12967] usb 4-1: Using ep0 maxpacket: 16 [ 1042.799412][T12967] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1042.809061][T12967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.820738][T12967] usb 4-1: Product: syz [ 1042.824971][T12967] usb 4-1: Manufacturer: syz [ 1042.829698][T12967] usb 4-1: SerialNumber: syz [ 1042.836338][T12967] usb 4-1: config 0 descriptor?? [ 1042.843297][T12967] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1043.099772][T12967] usb 4-1: Detected FT-X [ 1043.510994][T12967] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1043.561414][T13112] (syz.3.1512,13112,1):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 1044.763506][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1044.763538][ T29] audit: type=1400 audit(1732592401.050:793): avc: denied { getopt } for pid=13138 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1045.845638][T12967] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1045.875943][ T29] audit: type=1400 audit(1732592402.310:794): avc: denied { create } for pid=13139 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1046.423600][T13148] ubi: mtd0 is already attached to ubi0 [ 1046.441165][T13148] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1000 sclass=netlink_xfrm_socket pid=13148 comm=syz.0.1522 [ 1046.452901][T12967] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1046.469939][ T29] audit: type=1400 audit(1732592402.880:795): avc: denied { write } for pid=13139 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1046.515798][T12967] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1046.525601][T12967] usb 4-1: USB disconnect, device number 11 [ 1046.541794][T12967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1046.554989][T12967] ftdi_sio 4-1:0.0: device disconnected [ 1047.907334][ T29] audit: type=1400 audit(1732592404.340:796): avc: denied { ioctl } for pid=13159 comm="syz.7.1527" path="socket:[48846]" dev="sockfs" ino=48846 ioctlcmd=0x6610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1048.756373][ T29] audit: type=1400 audit(1732592405.190:797): avc: denied { create } for pid=13156 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1049.394799][ T29] audit: type=1400 audit(1732592405.190:798): avc: denied { bind } for pid=13156 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1049.433103][ T29] audit: type=1400 audit(1732592405.190:799): avc: denied { setopt } for pid=13156 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1049.692388][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 1049.701334][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1528'. [ 1050.434201][T13179] loop7: detected capacity change from 0 to 10 [ 1050.736235][T13186] befs: Unknown parameter 'gid0xffffffffffffffff' [ 1050.786921][T13189] warning: `syz.3.1535' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1050.828913][ T29] audit: type=1400 audit(1732592407.180:800): avc: denied { read write } for pid=13185 comm="syz.4.1532" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1050.852862][ T29] audit: type=1400 audit(1732592407.180:801): avc: denied { open } for pid=13185 comm="syz.4.1532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1050.908543][ T29] audit: type=1400 audit(1732592407.190:802): avc: denied { map } for pid=13185 comm="syz.4.1532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1050.936952][ T29] audit: type=1400 audit(1732592407.190:803): avc: denied { execute } for pid=13185 comm="syz.4.1532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1050.950598][T13181] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input23 [ 1050.960526][ T29] audit: type=1400 audit(1732592407.200:804): avc: denied { ioctl } for pid=13185 comm="syz.4.1532" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1050.960561][ T29] audit: type=1400 audit(1732592407.220:805): avc: denied { write } for pid=13188 comm="syz.3.1535" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1050.960589][ T29] audit: type=1400 audit(1732592407.220:806): avc: denied { open } for pid=13188 comm="syz.3.1535" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1050.960620][ T29] audit: type=1400 audit(1732592407.320:807): avc: denied { create } for pid=13184 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1051.658580][ T29] audit: type=1400 audit(1732592407.340:808): avc: denied { bind } for pid=13184 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1051.698861][ T29] audit: type=1400 audit(1732592407.340:809): avc: denied { connect } for pid=13184 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1051.724606][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 1051.734401][T13197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1051.742269][T13197] IPv6: NLM_F_CREATE should be set when creating new route [ 1051.846368][ T5843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1052.127828][T13200] sp0: Synchronizing with TNC [ 1052.174614][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.202668][ T5843] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1052.218217][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.247280][ T5843] usb 5-1: Product: syz [ 1052.268577][ T5843] usb 5-1: Manufacturer: syz [ 1052.284211][ T5843] usb 5-1: SerialNumber: syz [ 1052.588792][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 1052.597790][T13210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1539'. [ 1053.061789][T13215] lo speed is unknown, defaulting to 1000 [ 1053.096320][T13215] lo speed is unknown, defaulting to 1000 [ 1053.116359][T13215] lo speed is unknown, defaulting to 1000 [ 1053.214847][ T7110] lo speed is unknown, defaulting to 1000 [ 1053.225372][T13215] infiniband sz1: set active [ 1053.230676][T13215] infiniband sz1: added lo [ 1053.360472][T12010] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1053.367416][T13215] RDS/IB: sz1: added [ 1053.402306][T13215] smc: adding ib device sz1 with port count 1 [ 1053.434751][T13215] smc: ib device sz1 port 1 has pnetid [ 1053.446874][ T7110] lo speed is unknown, defaulting to 1000 [ 1053.464143][T13215] lo speed is unknown, defaulting to 1000 [ 1053.509890][T12010] usb 3-1: Using ep0 maxpacket: 8 [ 1053.531454][T12010] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1053.558927][T12010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.588670][T12010] usb 3-1: config 0 descriptor?? [ 1053.765648][T13215] lo speed is unknown, defaulting to 1000 [ 1053.837281][T12010] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1053.877869][T12010] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1053.951091][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.973248][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.083496][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.100302][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.109146][ T5843] cdc_ncm 5-1:1.0: failed to get mac address [ 1054.117176][ T5843] cdc_ncm 5-1:1.0: bind() failure [ 1054.138334][ T5843] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1054.146778][ T5843] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1054.156021][ T5843] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1054.172195][ T5843] usb 5-1: USB disconnect, device number 10 [ 1054.256387][T13215] lo speed is unknown, defaulting to 1000 [ 1054.398319][T13215] lo speed is unknown, defaulting to 1000 [ 1054.548109][T13215] lo speed is unknown, defaulting to 1000 [ 1055.038979][T13237] sp0: Synchronizing with TNC [ 1055.742821][T13244] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 1056.317490][T13253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.841896][T12010] usb 3-1: USB disconnect, device number 9 [ 1056.859905][ T5843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1056.968631][T13266] tmpfs: Bad value for 'mpol' [ 1057.291126][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.304457][ T5843] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1057.313711][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.323283][ T5843] usb 5-1: config 0 descriptor?? [ 1057.344663][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1057.344679][ T29] audit: type=1400 audit(1732592413.780:865): avc: denied { mounton } for pid=13265 comm="syz.3.1553" path="/proc/45/task" dev="proc" ino=50237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1057.402662][ T29] audit: type=1400 audit(1732592413.780:866): avc: denied { mount } for pid=13265 comm="syz.3.1553" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1057.431229][ T29] audit: type=1400 audit(1732592413.870:867): avc: denied { read append } for pid=13265 comm="syz.3.1553" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1057.463781][ T29] audit: type=1400 audit(1732592413.900:868): avc: denied { open } for pid=13265 comm="syz.3.1553" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1057.502359][ T29] audit: type=1400 audit(1732592413.930:869): avc: denied { ioctl } for pid=13277 comm="syz.7.1557" path="socket:[49124]" dev="sockfs" ino=49124 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1057.579072][ T29] audit: type=1400 audit(1732592414.010:870): avc: denied { write } for pid=13269 comm="syz.2.1556" name="pfkey" dev="proc" ino=4026534589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1057.610253][T13246] support for cryptoloop has been removed. Use dm-crypt instead. [ 1057.777724][ T29] audit: type=1400 audit(1732592414.210:871): avc: denied { ioctl } for pid=13285 comm="syz.2.1559" path="socket:[50254]" dev="sockfs" ino=50254 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1057.806593][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.815185][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.849536][ T5843] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1057.862826][ T5843] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input24 [ 1057.959270][ T5843] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1058.035287][ T29] audit: type=1400 audit(1732592414.470:872): avc: denied { write } for pid=13280 comm="syz.0.1558" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1058.522301][T13295] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.222131][ T5985] usb 5-1: USB disconnect, device number 11 [ 1059.362883][ T29] audit: type=1400 audit(1732592415.800:873): avc: denied { write } for pid=13302 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1059.367519][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.521674][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.099977][T12967] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1060.301157][T12967] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1061.259754][T12967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1061.270759][T12967] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1061.280296][T12967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.290067][T12967] usb 3-1: config 0 descriptor?? [ 1061.911013][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.959952][ T29] audit: type=1400 audit(1732592418.380:874): avc: denied { nlmsg_write } for pid=13312 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1062.279626][T12967] ath6kl: Failed to submit usb control message: -71 [ 1062.286927][T12967] ath6kl: unable to send the bmi data to the device: -71 [ 1062.295360][T12967] ath6kl: Unable to send get target info: -71 [ 1062.305667][T12967] ath6kl: Failed to init ath6kl core: -71 [ 1062.314416][T12967] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1062.350282][T12967] usb 3-1: USB disconnect, device number 10 [ 1062.437992][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1062.438050][ T29] audit: type=1400 audit(1732592418.870:878): avc: denied { name_bind } for pid=13346 comm="syz.2.1577" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1062.475983][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 1062.840709][T13353] IPVS: Error connecting to the multicast addr [ 1064.517226][T13364] FAULT_INJECTION: forcing a failure. [ 1064.517226][T13364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.550285][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.0.1582 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1064.560745][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1064.570896][T13364] Call Trace: [ 1064.574260][T13364] [ 1064.577187][T13364] dump_stack_lvl+0x16c/0x1f0 [ 1064.581881][T13364] should_fail_ex+0x497/0x5b0 [ 1064.586570][T13364] _copy_to_user+0x32/0xd0 [ 1064.591001][T13364] simple_read_from_buffer+0xd0/0x160 [ 1064.596388][T13364] proc_fail_nth_read+0x198/0x270 [ 1064.601410][T13364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.606955][T13364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.612496][T13364] vfs_read+0x1df/0xbe0 [ 1064.616640][T13364] ? __fget_files+0x1fc/0x3a0 [ 1064.621301][T13364] ? __pfx___mutex_lock+0x10/0x10 [ 1064.626325][T13364] ? __pfx_vfs_read+0x10/0x10 [ 1064.630992][T13364] ? __fget_files+0x206/0x3a0 [ 1064.635659][T13364] ksys_read+0x12b/0x250 [ 1064.639898][T13364] ? __pfx_ksys_read+0x10/0x10 [ 1064.644649][T13364] do_syscall_64+0xcd/0x250 [ 1064.649139][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.655021][T13364] RIP: 0033:0x7fd0ff57d25c [ 1064.659419][T13364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1064.679011][T13364] RSP: 002b:00007fd10037b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1064.687411][T13364] RAX: ffffffffffffffda RBX: 00007fd0ff735fa0 RCX: 00007fd0ff57d25c [ 1064.695368][T13364] RDX: 000000000000000f RSI: 00007fd10037b0a0 RDI: 0000000000000005 [ 1064.703325][T13364] RBP: 00007fd10037b090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.711278][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.719231][T13364] R13: 0000000000000000 R14: 00007fd0ff735fa0 R15: 00007ffe675ef8d8 [ 1064.727193][T13364] [ 1064.864793][T13367] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1584'. [ 1064.931978][T13369] sctp: [Deprecated]: syz.3.1583 (pid 13369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1064.931978][T13369] Use struct sctp_sack_info instead [ 1065.006812][T13376] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1065.064707][ T29] audit: type=1400 audit(1732592421.490:879): avc: denied { setopt } for pid=13379 comm="syz.4.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1065.697288][ T29] audit: type=1400 audit(1732592422.130:880): avc: denied { read } for pid=13390 comm="syz.0.1593" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1065.726639][ T29] audit: type=1400 audit(1732592422.130:881): avc: denied { open } for pid=13390 comm="syz.0.1593" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1066.370577][ T29] audit: type=1400 audit(1732592422.160:882): avc: denied { ioctl } for pid=13390 comm="syz.0.1593" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1066.460071][T12967] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1066.614127][ T29] audit: type=1400 audit(1732592422.990:883): avc: denied { write } for pid=13390 comm="syz.0.1593" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1067.789466][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1594'. [ 1067.798939][T13403] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1594'. [ 1068.341336][T12967] usb 3-1: Using ep0 maxpacket: 16 [ 1068.361171][T13412] nbd: device at index 7 is going down [ 1068.454066][T12967] usb 3-1: config 128 has an invalid interface number: 87 but max is 0 [ 1068.510695][T12967] usb 3-1: config 128 has an invalid interface number: 134 but max is 0 [ 1068.686175][T12967] usb 3-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1068.700173][T12967] usb 3-1: config 128 has no interface number 0 [ 1068.706445][T12967] usb 3-1: config 128 has no interface number 1 [ 1068.730251][T12967] usb 3-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1068.748756][T12967] usb 3-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1068.777957][T12967] usb 3-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1068.807315][T12967] usb 3-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1068.837653][T12967] usb 3-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1068.855925][T12967] usb 3-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1068.872685][T12967] usb 3-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1068.884326][T12967] usb 3-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1068.895656][T12967] usb 3-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1069.433821][T12967] usb 3-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1069.448129][T12967] usb 3-1: config 128 interface 87 has no altsetting 0 [ 1069.455561][T12967] usb 3-1: config 128 interface 134 has no altsetting 0 [ 1069.463857][T12967] usb 3-1: string descriptor 0 read error: -71 [ 1069.472864][T12967] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1069.482339][T12967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.508697][T12967] usb 3-1: can't set config #128, error -71 [ 1069.517572][T12967] usb 3-1: USB disconnect, device number 11 [ 1071.666357][ T29] audit: type=1400 audit(1732592428.100:884): avc: denied { remount } for pid=13452 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1071.719104][T13463] syzkaller1: entered promiscuous mode [ 1071.726726][T13463] syzkaller1: entered allmulticast mode [ 1071.783645][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1614'. [ 1071.910066][ T5985] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1071.929928][ T29] audit: type=1400 audit(1732592428.340:885): avc: denied { sys_module } for pid=13462 comm="syz.7.1614" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1071.950982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.018112][ T29] audit: type=1400 audit(1732592428.450:886): avc: denied { read write } for pid=13470 comm="syz.3.1617" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1072.070092][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 1072.082079][ T5985] usb 1-1: config 128 has an invalid interface number: 87 but max is 0 [ 1072.096320][ T5985] usb 1-1: config 128 has an invalid interface number: 134 but max is 0 [ 1072.120074][ T29] audit: type=1400 audit(1732592428.450:887): avc: denied { open } for pid=13470 comm="syz.3.1617" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1072.150667][ T5985] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1072.175398][ T5985] usb 1-1: config 128 has no interface number 0 [ 1072.182105][ T5985] usb 1-1: config 128 has no interface number 1 [ 1072.296427][ T5985] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1072.308531][ T5985] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1072.319739][ T5985] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1072.331114][ T5985] usb 1-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1072.342624][ T5985] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1072.354492][ T5985] usb 1-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1072.377832][ T5985] usb 1-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1072.398017][ T29] audit: type=1400 audit(1732592428.780:888): avc: denied { create } for pid=13477 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1072.398029][ T5985] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1072.398056][ T5985] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1072.449502][ T5985] usb 1-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1072.465024][ T5985] usb 1-1: config 128 interface 87 has no altsetting 0 [ 1072.472588][ T5985] usb 1-1: config 128 interface 134 has no altsetting 0 [ 1072.480300][ T29] audit: type=1400 audit(1732592428.880:889): avc: denied { open } for pid=13477 comm="syz.4.1620" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1072.538533][ T5985] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1072.547815][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.556111][ T5985] usb 1-1: Product: syz [ 1072.560963][ T5985] usb 1-1: Manufacturer: syz [ 1072.565568][ T5985] usb 1-1: SerialNumber: syz [ 1073.227995][ T5985] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1073.255300][ T5985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1073.269585][ T5985] dib0700: firmware download failed at 7 with -22 [ 1073.296245][ T5985] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1073.512983][T13501] IPVS: Error connecting to the multicast addr [ 1073.872630][ T5985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1073.880756][ T5985] dib0700: firmware download failed at 7 with -22 [ 1073.895177][ T5985] usb 1-1: USB disconnect, device number 12 [ 1073.947542][ T29] audit: type=1400 audit(1732592430.380:890): avc: denied { create } for pid=13503 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1074.964638][ T29] audit: type=1400 audit(1732592430.610:891): avc: denied { watch watch_reads } for pid=13512 comm="syz.3.1630" path="/28" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1075.065299][ T29] audit: type=1400 audit(1732592430.610:892): avc: denied { create } for pid=13512 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1075.099164][ T29] audit: type=1400 audit(1732592430.620:893): avc: denied { write } for pid=13512 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1075.260340][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'. [ 1075.472061][T13531] overlay: ./file0 is not a directory [ 1076.193820][T13536] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 1076.673308][ T25] IPVS: starting estimator thread 0... [ 1076.705321][T13542] xt_ecn: cannot match TCP bits for non-tcp packets [ 1077.211284][T13534] IPVS: using max 37 ests per chain, 88800 per kthread [ 1077.340259][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1077.340275][ T29] audit: type=1400 audit(1732592433.770:896): avc: denied { connect } for pid=13525 comm="syz.0.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1077.377129][ T29] audit: type=1400 audit(1732592433.770:897): avc: denied { ioctl } for pid=13525 comm="syz.0.1633" path="socket:[51787]" dev="sockfs" ino=51787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1077.594088][ T5843] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1078.011201][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.029278][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.067276][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1078.096948][ T5843] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1078.110551][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.141515][ T5843] usb 4-1: config 0 descriptor?? [ 1078.960665][ T7110] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1079.220098][ T5843] holtek_mouse 0003:04D9:A081.0017: unknown main item tag 0x0 [ 1079.231462][ T5843] holtek_mouse 0003:04D9:A081.0017: unknown main item tag 0x0 [ 1079.239211][ T5843] holtek_mouse 0003:04D9:A081.0017: unknown main item tag 0x0 [ 1079.247707][ T5843] holtek_mouse 0003:04D9:A081.0017: unknown main item tag 0x0 [ 1079.256312][ T5843] holtek_mouse 0003:04D9:A081.0017: unknown main item tag 0x0 [ 1079.497274][ T5843] holtek_mouse 0003:04D9:A081.0017: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.3-1/input0 [ 1079.506611][T13573] netlink: 'syz.2.1647': attribute type 2 has an invalid length. [ 1079.623623][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.643399][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.679727][ T5843] usb 4-1: USB disconnect, device number 12 [ 1080.552012][ T7110] usb 8-1: Using ep0 maxpacket: 16 [ 1080.567220][ T7110] usb 8-1: config 128 has an invalid interface number: 87 but max is 0 [ 1080.575855][ T7110] usb 8-1: config 128 has an invalid interface number: 134 but max is 0 [ 1080.611032][ T7110] usb 8-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1080.656601][ T7110] usb 8-1: config 128 has no interface number 0 [ 1080.681029][ T7110] usb 8-1: config 128 has no interface number 1 [ 1080.699311][ T7110] usb 8-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1080.728870][ T7110] usb 8-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1080.745216][ T7110] usb 8-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1080.756476][ T7110] usb 8-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1080.767906][ T7110] usb 8-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1080.779389][ T7110] usb 8-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1081.166103][ T7110] usb 8-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1081.177603][ T7110] usb 8-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1081.188850][ T7110] usb 8-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1081.200328][ T7110] usb 8-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1081.214018][ T7110] usb 8-1: config 128 interface 87 has no altsetting 0 [ 1081.221369][ T7110] usb 8-1: config 128 interface 134 has no altsetting 0 [ 1081.236825][ T7110] usb 8-1: string descriptor 0 read error: -71 [ 1081.243338][ T7110] usb 8-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1081.252669][ T7110] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.267884][ T7110] usb 8-1: can't set config #128, error -71 [ 1081.277197][ T7110] usb 8-1: USB disconnect, device number 13 [ 1081.288030][T13602] input: syz0 as /devices/virtual/input/input25 [ 1081.364630][T13600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.580162][ T5985] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1081.669931][ T5843] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1081.792192][ T5985] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1081.803969][ T5985] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1081.816099][ T5985] usb 1-1: config 0 has no interface number 0 [ 1081.822937][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 1081.827869][ T5985] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1081.850849][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1081.869987][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1082.191097][ T5985] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1082.211065][ T5985] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1082.219439][ T5985] usb 1-1: Product: syz [ 1082.223718][ T5985] usb 1-1: Manufacturer: syz [ 1082.228323][ T5985] usb 1-1: SerialNumber: syz [ 1082.251656][ T5843] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1082.254934][ T5985] usb 1-1: config 0 descriptor?? [ 1082.260855][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1082.274298][ T5843] usb 5-1: Product: syz [ 1082.278471][ T5843] usb 5-1: Manufacturer: syz [ 1082.283582][ T5843] usb 5-1: SerialNumber: syz [ 1082.296843][ T5843] usb 5-1: config 0 descriptor?? [ 1082.442524][ T29] audit: type=1400 audit(1732592438.880:898): avc: denied { create } for pid=13622 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1083.177329][T13602] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1655'. [ 1083.193193][T13602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.204959][T13602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.216222][ T5985] usb 1-1: USB disconnect, device number 13 [ 1083.260114][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1083.640097][ T5843] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1083.671164][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 1083.679100][ T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.817656][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 1083.826619][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1667'. [ 1084.515464][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1084.526775][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1084.538219][ T25] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1084.547320][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.558039][ T25] usb 8-1: config 0 descriptor?? [ 1084.563610][ T5985] usb 5-1: USB disconnect, device number 12 [ 1084.569583][T13616] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1084.584647][ T25] hub 8-1:0.0: USB hub found [ 1084.590309][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1084.599783][ T5843] usb 4-1: config 128 has an invalid interface number: 87 but max is 0 [ 1084.614826][ T5843] usb 4-1: config 128 has an invalid interface number: 134 but max is 0 [ 1084.623854][ T5843] usb 4-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1084.633178][ T5843] usb 4-1: config 128 has no interface number 0 [ 1084.639459][ T5843] usb 4-1: config 128 has no interface number 1 [ 1084.646708][ T5843] usb 4-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1084.658237][ T5843] usb 4-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1084.669339][ T5843] usb 4-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1084.680696][ T5843] usb 4-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1084.691620][ T5843] usb 4-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1084.703105][ T5843] usb 4-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1084.716977][ T5843] usb 4-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1084.728290][ T5843] usb 4-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1084.739512][ T5843] usb 4-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1084.750964][ T5843] usb 4-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1084.764394][ T5843] usb 4-1: config 128 interface 87 has no altsetting 0 [ 1084.771758][ T5843] usb 4-1: config 128 interface 134 has no altsetting 0 [ 1084.790541][ T5843] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1084.800363][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.808368][ T5843] usb 4-1: Product: syz [ 1084.813011][ T5843] usb 4-1: Manufacturer: syz [ 1084.817749][ T5843] usb 4-1: SerialNumber: syz [ 1084.844260][ T25] hub 8-1:0.0: 2 ports detected [ 1085.095968][ T29] audit: type=1400 audit(1732592441.530:899): avc: denied { map } for pid=13614 comm="syz.7.1659" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1085.317860][ T5843] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1085.329602][ T5843] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1085.332921][ T25] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1085.337667][ T5843] dib0700: firmware download failed at 7 with -22 [ 1085.350393][ T25] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1085.356058][ T5843] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1085.369672][ T5843] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1085.370961][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 1085.381557][ T5843] dib0700: firmware download failed at 7 with -22 [ 1085.390491][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1085.410401][ T5843] usb 4-1: USB disconnect, device number 13 [ 1085.417589][ T25] usb 8-1: USB disconnect, device number 14 [ 1086.659987][ T29] audit: type=1400 audit(1732592442.970:900): avc: denied { ioctl } for pid=13663 comm="syz.3.1675" path="socket:[51966]" dev="sockfs" ino=51966 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1087.088196][T13677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1678'. [ 1087.111966][T13678] IPVS: Error connecting to the multicast addr [ 1087.829938][ T29] audit: type=1400 audit(1732592444.240:901): avc: denied { audit_write } for pid=13675 comm="syz.4.1678" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1087.886670][ T29] audit: type=1400 audit(1732592444.240:902): avc: denied { read write } for pid=13675 comm="syz.4.1678" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1087.989695][ T29] audit: type=1400 audit(1732592444.240:903): avc: denied { open } for pid=13675 comm="syz.4.1678" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1088.106670][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 1088.115589][T13688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1679'. [ 1088.525328][ T29] audit: type=1400 audit(1732592444.960:904): avc: denied { create } for pid=13690 comm="syz.7.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.057999][T13707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.197652][ T5985] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1089.470853][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 1089.589617][ T5985] usb 3-1: config 128 has an invalid interface number: 87 but max is 0 [ 1089.613753][ T5985] usb 3-1: config 128 has an invalid interface number: 134 but max is 0 [ 1089.622262][ T5985] usb 3-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1089.631483][ T5985] usb 3-1: config 128 has no interface number 0 [ 1089.637756][ T5985] usb 3-1: config 128 has no interface number 1 [ 1089.644075][ T5985] usb 3-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1089.655332][ T5985] usb 3-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1089.666403][ T5985] usb 3-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1089.677586][ T5985] usb 3-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1089.688487][ T5985] usb 3-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1089.699931][ T5985] usb 3-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1089.713680][ T5985] usb 3-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1089.725699][ T5985] usb 3-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1089.737016][ T5985] usb 3-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1089.748421][ T5985] usb 3-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1089.762207][ T5985] usb 3-1: config 128 interface 87 has no altsetting 0 [ 1089.769081][ T5985] usb 3-1: config 128 interface 134 has no altsetting 0 [ 1089.790919][ T5985] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1089.800110][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.808106][ T5985] usb 3-1: Product: syz [ 1089.817344][ T5985] usb 3-1: Manufacturer: syz [ 1089.825600][ T5985] usb 3-1: SerialNumber: syz [ 1090.744489][ T5985] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1090.770616][ T5985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1090.797748][ T5985] dib0700: firmware download failed at 7 with -22 [ 1090.827655][ T5985] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1090.857824][ T5985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1090.877566][ T5985] dib0700: firmware download failed at 7 with -22 [ 1090.957780][T13732] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1693'. [ 1091.049234][ T5985] usb 3-1: USB disconnect, device number 12 [ 1091.202835][T13738] overlay: ./file0 is not a directory [ 1091.216694][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1695'. [ 1091.225928][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1695'. [ 1092.304728][ T5843] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1092.391635][ T29] audit: type=1400 audit(1732592448.800:905): avc: denied { name_bind } for pid=13742 comm="syz.7.1696" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1092.421902][ T29] audit: type=1400 audit(1732592448.860:906): avc: denied { ioctl } for pid=13742 comm="syz.7.1696" path="/dev/ptyr3" dev="devtmpfs" ino=138 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1092.506562][ T5843] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1092.533725][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.571856][ T5843] usb 4-1: Product: syz [ 1092.577129][ T5843] usb 4-1: Manufacturer: syz [ 1092.678334][ T5843] usb 4-1: SerialNumber: syz [ 1092.753934][ T5843] usb 4-1: config 0 descriptor?? [ 1093.530358][ T29] audit: type=1400 audit(1732592449.720:907): avc: denied { mount } for pid=13757 comm="syz.2.1701" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1093.575690][ T29] audit: type=1400 audit(1732592449.880:908): avc: denied { accept } for pid=13757 comm="syz.2.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1094.603984][ T966] usb 4-1: USB disconnect, device number 14 [ 1095.445127][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 1095.454871][T13784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1707'. [ 1095.980543][T13785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.571518][ T29] audit: type=1400 audit(1732592453.010:909): avc: denied { unmount } for pid=12925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1096.750100][ T7674] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1096.979291][ T7674] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.992131][ T7674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1097.020198][ T7674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1097.032234][ T7674] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1097.100679][ T7674] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1097.117163][ T7674] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.140083][ T7674] usb 8-1: config 0 descriptor?? [ 1097.145642][T13787] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1097.248800][ T29] audit: type=1400 audit(1732592453.680:910): avc: denied { getopt } for pid=13800 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1097.278084][ T29] audit: type=1400 audit(1732592453.680:911): avc: denied { create } for pid=13800 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1097.509468][ T966] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1098.521512][ T7674] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 1098.533066][ T7674] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1098.788173][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 1098.906524][ T966] usb 1-1: config 128 has an invalid interface number: 87 but max is 0 [ 1098.911391][ T7674] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1098.991618][ T966] usb 1-1: config 128 has an invalid interface number: 134 but max is 0 [ 1099.048953][ T966] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1099.362453][ T966] usb 1-1: config 128 has no interface number 0 [ 1099.374157][ T966] usb 1-1: config 128 has no interface number 1 [ 1099.386941][ T966] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1099.398614][ T966] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1099.411964][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 1099.421364][T13834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 1099.443508][ T966] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1099.454835][ T966] usb 1-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1099.465783][ T966] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1099.477058][ T966] usb 1-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1099.490638][ T966] usb 1-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1099.501839][ T966] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1099.513012][ T966] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1099.525643][ T966] usb 1-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1099.539105][ T966] usb 1-1: config 128 interface 87 has no altsetting 0 [ 1099.546478][ T966] usb 1-1: config 128 interface 134 has no altsetting 0 [ 1099.556236][ T966] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1099.565475][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.573488][ T966] usb 1-1: Product: syz [ 1099.577669][ T966] usb 1-1: Manufacturer: syz [ 1099.582611][ T966] usb 1-1: SerialNumber: syz [ 1099.680125][ T5843] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1099.797974][ T966] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1099.813239][ T966] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1099.822940][ T966] dib0700: firmware download failed at 7 with -22 [ 1099.844384][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.856782][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.866815][ T966] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1099.923452][ T966] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1099.947915][ T5843] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1099.959094][ T966] dib0700: firmware download failed at 7 with -22 [ 1099.973262][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.988545][ T966] usb 1-1: USB disconnect, device number 14 [ 1100.001774][ T5843] usb 5-1: config 0 descriptor?? [ 1100.160988][T13849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.645577][ T5843] chicony 0003:04F2:1421.0019: hidraw1: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.4-1/input0 [ 1100.762313][ T5886] usb 8-1: reset high-speed USB device number 15 using dummy_hcd [ 1101.747158][ T966] usb 5-1: USB disconnect, device number 13 [ 1102.524503][ T5843] usb 8-1: USB disconnect, device number 15 [ 1103.003364][ T7110] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1103.423121][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1733'. [ 1103.432185][T13887] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1733'. [ 1103.521091][ T7110] usb 4-1: Using ep0 maxpacket: 32 [ 1103.529793][ T7110] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1103.539381][ T7110] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1103.551311][ T7110] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1103.568592][ T7110] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 1103.749704][ T7110] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1103.915817][ T7110] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.167119][ T7110] usb 4-1: string descriptor 0 read error: -71 [ 1104.173465][ T7110] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1104.182940][ T7110] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1104.208334][ T7110] usb 4-1: config 0 descriptor?? [ 1104.278085][ T7110] usb 4-1: can't set config #0, error -71 [ 1104.291707][ T29] audit: type=1400 audit(1732592460.690:912): avc: denied { bind } for pid=13896 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1104.812887][T13906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.136910][ T7110] usb 4-1: USB disconnect, device number 15 [ 1105.241246][T13911] xt_hashlimit: size too large, truncated to 1048576 [ 1105.323001][ T29] audit: type=1400 audit(1732592461.760:913): avc: denied { read } for pid=13921 comm="syz.2.1742" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1105.389708][ T29] audit: type=1400 audit(1732592461.760:914): avc: denied { open } for pid=13921 comm="syz.2.1742" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1105.509201][ T966] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1105.554501][ T29] audit: type=1400 audit(1732592461.940:915): avc: denied { ioctl } for pid=13921 comm="syz.2.1742" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1105.599246][ T29] audit: type=1400 audit(1732592461.960:916): avc: denied { create } for pid=13921 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1105.880240][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 1105.898005][ T966] usb 1-1: config 128 has an invalid interface number: 87 but max is 0 [ 1106.215972][ T966] usb 1-1: config 128 has an invalid interface number: 134 but max is 0 [ 1106.573093][ T966] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1106.582276][ T966] usb 1-1: config 128 has no interface number 0 [ 1106.588517][ T966] usb 1-1: config 128 has no interface number 1 [ 1106.597973][ T966] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1106.609649][ T966] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1106.621089][ T966] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1106.632469][ T966] usb 1-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1106.643386][ T966] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1106.660123][ T966] usb 1-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1106.677243][ T966] usb 1-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1106.688526][ T966] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1106.699978][ T966] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1106.711422][ T966] usb 1-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1106.725077][ T966] usb 1-1: config 128 interface 87 has no altsetting 0 [ 1106.732243][ T966] usb 1-1: config 128 interface 134 has no altsetting 0 [ 1106.810811][ T966] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1106.820778][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.828764][ T966] usb 1-1: Product: syz [ 1106.833106][ T966] usb 1-1: Manufacturer: syz [ 1106.837698][ T966] usb 1-1: SerialNumber: syz [ 1107.148930][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1107.158757][T13940] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1107.518107][ T29] audit: type=1400 audit(1732592463.890:917): avc: denied { write } for pid=13934 comm="syz.7.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1107.559248][ T966] usb 1-1: can't set config #128, error -71 [ 1107.583966][ T966] usb 1-1: USB disconnect, device number 15 [ 1108.957153][ T29] audit: type=1400 audit(1732592465.390:918): avc: denied { write } for pid=13956 comm="syz.7.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1109.051099][T13962] IPVS: Error connecting to the multicast addr [ 1110.824382][T13981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.079907][ T7110] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1112.211405][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1760'. [ 1112.220635][T13992] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1760'. [ 1113.120325][ T7110] usb 1-1: Using ep0 maxpacket: 16 [ 1113.387560][ T7110] usb 1-1: config 128 has an invalid interface number: 87 but max is 0 [ 1113.399966][ T7110] usb 1-1: config 128 has an invalid interface number: 134 but max is 0 [ 1113.408323][ T7110] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1113.417719][ T7110] usb 1-1: config 128 has no interface number 0 [ 1113.424292][ T7110] usb 1-1: config 128 has no interface number 1 [ 1113.430627][ T7110] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1113.442039][ T7110] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1113.453547][ T7110] usb 1-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1113.464701][ T7110] usb 1-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1113.475946][ T7110] usb 1-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1113.487875][ T7110] usb 1-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1113.509599][ T7110] usb 1-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1113.521205][ T7110] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1113.532400][ T7110] usb 1-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1113.543999][ T7110] usb 1-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1113.557720][ T7110] usb 1-1: config 128 interface 87 has no altsetting 0 [ 1113.564685][ T7110] usb 1-1: config 128 interface 134 has no altsetting 0 [ 1113.937022][ T7110] usb 1-1: string descriptor 0 read error: -71 [ 1113.953638][ T7110] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1114.058545][ T7110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.069924][ T29] audit: type=1400 audit(1732592470.510:919): avc: denied { append } for pid=14011 comm="syz.0.1765" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1114.106681][ T7110] usb 1-1: can't set config #128, error -71 [ 1114.320143][ T7110] usb 1-1: USB disconnect, device number 16 [ 1114.617758][T14018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1767'. [ 1115.522469][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.528989][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.753159][T14039] overlay: ./file0 is not a directory [ 1116.683495][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1773'. [ 1116.692447][T14054] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1773'. [ 1117.278566][T14055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.989997][ T7110] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1119.885127][ T29] audit: type=1400 audit(1732592475.830:920): avc: denied { read } for pid=14069 comm="syz.0.1777" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1120.049951][ T7110] usb 3-1: Using ep0 maxpacket: 16 [ 1120.070219][ T7110] usb 3-1: config 128 has an invalid interface number: 87 but max is 0 [ 1120.078665][ T7110] usb 3-1: config 128 has an invalid interface number: 134 but max is 0 [ 1120.242120][ T7110] usb 3-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1120.257235][ T7110] usb 3-1: config 128 has no interface number 0 [ 1120.290853][ T7110] usb 3-1: config 128 has no interface number 1 [ 1120.297275][ T7110] usb 3-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1120.308831][ T7110] usb 3-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1120.319945][ T7110] usb 3-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1120.331570][ T7110] usb 3-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1120.467817][ T7110] usb 3-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1120.479202][ T7110] usb 3-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1120.492878][ T7110] usb 3-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1120.504250][ T7110] usb 3-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1120.515651][ T7110] usb 3-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1120.558386][ T7110] usb 3-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1120.572234][ T7110] usb 3-1: config 128 interface 87 has no altsetting 0 [ 1120.579264][ T7110] usb 3-1: config 128 interface 134 has no altsetting 0 [ 1121.129693][ T7110] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1121.138774][ T7110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.153613][T14084] sp0: Synchronizing with TNC [ 1121.166430][ T7110] usb 3-1: can't set config #128, error -71 [ 1121.185128][ T7110] usb 3-1: USB disconnect, device number 13 [ 1121.390928][T14100] loop4: detected capacity change from 0 to 524287999 [ 1121.834430][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 1121.843842][T14104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1786'. [ 1121.861552][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1787'. [ 1121.871528][T14108] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1787'. [ 1121.934108][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.943479][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1121.971108][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.980313][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1121.989530][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.998712][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.015869][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.025093][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.038004][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.047192][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.079035][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.088242][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.102309][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.111567][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.124112][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.133356][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.141799][T14100] ldm_validate_partition_table(): Disk read failed. [ 1122.153033][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.162284][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.200049][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1122.209307][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.262576][T14100] Dev loop4: unable to read RDB block 0 [ 1122.320955][T14100] loop4: unable to read partition table [ 1122.345724][T14100] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1123.414206][T14117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.920630][ T7110] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1126.900206][ T7110] usb 5-1: Using ep0 maxpacket: 16 [ 1126.927155][T14152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1126.933695][T14152] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1126.945824][T14152] vhci_hcd vhci_hcd.0: Device attached [ 1126.953454][T14140] sp0: Synchronizing with TNC [ 1126.963841][T14154] vhci_hcd: connection closed [ 1126.970902][ T6844] vhci_hcd: stop threads [ 1126.974286][ T29] audit: type=1400 audit(1732592483.400:921): avc: denied { setopt } for pid=14151 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1126.975706][ T6844] vhci_hcd: release socket [ 1127.009753][ T6844] vhci_hcd: disconnect device [ 1127.281609][ T7110] usb 5-1: config 128 has an invalid interface number: 87 but max is 0 [ 1127.291478][ T7110] usb 5-1: config 128 has an invalid interface number: 134 but max is 0 [ 1127.312781][ T7110] usb 5-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1127.323000][ T7110] usb 5-1: config 128 has no interface number 0 [ 1127.329232][ T7110] usb 5-1: config 128 has no interface number 1 [ 1127.351082][ T7110] usb 5-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1127.369952][ T7110] usb 5-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1127.381143][ T7110] usb 5-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1127.392405][ T7110] usb 5-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1127.404044][ T7110] usb 5-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1127.415250][ T7110] usb 5-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1127.428809][ T7110] usb 5-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1127.440017][ T7110] usb 5-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1127.451468][ T7110] usb 5-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1127.462709][ T7110] usb 5-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1127.479648][ T7110] usb 5-1: config 128 interface 87 has no altsetting 0 [ 1127.486946][ T7110] usb 5-1: config 128 interface 134 has no altsetting 0 [ 1127.667582][ T7110] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1127.676799][ T7110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.685186][ T7110] usb 5-1: Product: syz [ 1127.689371][ T7110] usb 5-1: Manufacturer: syz [ 1127.696647][ T7110] usb 5-1: SerialNumber: syz [ 1127.839562][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1127.849069][T14166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1128.274769][ T7110] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1128.292576][ T7110] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1128.300775][ T7110] dib0700: firmware download failed at 7 with -22 [ 1128.312544][ T7110] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 1128.331057][ T7110] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1128.339113][ T7110] dib0700: firmware download failed at 7 with -22 [ 1128.362766][T14170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1128.376751][T14170] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1128.387012][ T7110] usb 5-1: USB disconnect, device number 14 [ 1128.576278][T14170] overlayfs: missing 'lowerdir' [ 1129.811447][ T29] audit: type=1326 audit(1732592486.230:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb46d7e819 code=0x7fc00000 [ 1129.834839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.658712][T14196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.249648][T14206] sp0: Synchronizing with TNC [ 1132.510008][ T29] audit: type=1400 audit(1732592488.850:923): avc: denied { create } for pid=14212 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1132.840875][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 1133.054941][T14212] block nbd4: shutting down sockets [ 1133.187277][ T29] audit: type=1400 audit(1732592489.620:924): avc: denied { write } for pid=14222 comm="syz.7.1818" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1133.214119][ T7110] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1134.644512][ T7110] usb 4-1: Using ep0 maxpacket: 16 [ 1134.652493][ T7110] usb 4-1: config 128 has an invalid interface number: 87 but max is 0 [ 1134.950615][ T7110] usb 4-1: config 128 has an invalid interface number: 134 but max is 0 [ 1134.958993][ T7110] usb 4-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1134.968699][ T7110] usb 4-1: config 128 has no interface number 0 [ 1135.109844][T14247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.530557][ T7110] usb 4-1: config 128 has no interface number 1 [ 1135.536881][ T7110] usb 4-1: config 128 interface 87 altsetting 15 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1135.548107][ T7110] usb 4-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1135.559212][ T7110] usb 4-1: config 128 interface 87 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1135.570610][ T7110] usb 4-1: config 128 interface 87 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1135.582321][ T7110] usb 4-1: config 128 interface 87 altsetting 15 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1135.593853][ T7110] usb 4-1: config 128 interface 87 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1135.607736][ T7110] usb 4-1: too many endpoints for config 128 interface 134 altsetting 55: 84, using maximum allowed: 30 [ 1135.618945][ T7110] usb 4-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1135.630448][ T7110] usb 4-1: config 128 interface 134 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 1135.641616][ T7110] usb 4-1: config 128 interface 134 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 84 [ 1135.655082][ T7110] usb 4-1: config 128 interface 87 has no altsetting 0 [ 1135.662248][ T7110] usb 4-1: config 128 interface 134 has no altsetting 0 [ 1135.688957][ T7110] usb 4-1: string descriptor 0 read error: -71 [ 1135.696481][ T7110] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=c9.5a [ 1135.705704][ T7110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.715696][ T7110] usb 4-1: can't set config #128, error -71 [ 1135.723721][ T7110] usb 4-1: USB disconnect, device number 16 [ 1137.647591][ T29] audit: type=1400 audit(1732592494.050:925): avc: denied { mounton } for pid=14266 comm="syz.4.1833" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1137.671421][ T29] audit: type=1400 audit(1732592494.050:926): avc: denied { bind } for pid=14266 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1138.127299][T14270] sp0: Synchronizing with TNC [ 1138.136576][ T6498] [ 1138.138881][ T6498] ===================================================== [ 1138.145777][ T6498] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1138.153198][ T6498] 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 Not tainted [ 1138.159926][ T6498] ----------------------------------------------------- [ 1138.166820][ T6498] kworker/u8:10/6498 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1138.174678][ T6498] ffffffff8f336158 (disc_data_lock#2){.?.?}-{3:3}, at: sp_get+0x18/0xf0 [ 1138.183006][ T6498] [ 1138.183006][ T6498] and this task is already holding: [ 1138.190349][ T6498] ffffffff9ab3d538 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1138.199014][ T6498] which would create a new lock dependency: [ 1138.204871][ T6498] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.?.?}-{3:3} [ 1138.212664][ T6498] [ 1138.212664][ T6498] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1138.222079][ T6498] (&port_lock_key){-.-.}-{3:3} [ 1138.222092][ T6498] [ 1138.222092][ T6498] ... which became HARDIRQ-irq-safe at: [ 1138.234582][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1138.239753][ T6498] _raw_spin_lock_irqsave+0x3a/0x60 [ 1138.245004][ T6498] serial8250_handle_irq+0x95/0xc80 [ 1138.250253][ T6498] serial8250_default_handle_irq+0x9a/0x210 [ 1138.256197][ T6498] serial8250_interrupt+0x103/0x210 [ 1138.261459][ T6498] __handle_irq_event_percpu+0x229/0x7d0 [ 1138.267164][ T6498] handle_irq_event+0xab/0x1e0 [ 1138.272002][ T6498] handle_edge_irq+0x263/0xd10 [ 1138.276833][ T6498] __common_interrupt+0xdf/0x250 [ 1138.281843][ T6498] common_interrupt+0xba/0xe0 [ 1138.286577][ T6498] asm_common_interrupt+0x26/0x40 [ 1138.291657][ T6498] acpi_safe_halt+0x1a/0x20 [ 1138.296214][ T6498] acpi_idle_enter+0xc5/0x160 [ 1138.300946][ T6498] cpuidle_enter_state+0xaa/0x4f0 [ 1138.306024][ T6498] cpuidle_enter+0x4e/0xa0 [ 1138.310493][ T6498] do_idle+0x310/0x3f0 [ 1138.314614][ T6498] cpu_startup_entry+0x4f/0x60 [ 1138.319438][ T6498] start_secondary+0x222/0x2b0 [ 1138.324252][ T6498] common_startup_64+0x13e/0x148 [ 1138.329243][ T6498] [ 1138.329243][ T6498] to a HARDIRQ-irq-unsafe lock: [ 1138.336223][ T6498] (disc_data_lock#2){.?.?}-{3:3} [ 1138.336241][ T6498] [ 1138.336241][ T6498] ... which became HARDIRQ-irq-unsafe at: [ 1138.349076][ T6498] ... [ 1138.349080][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1138.356789][ T6498] _raw_read_lock+0x5f/0x70 [ 1138.361343][ T6498] sp_get+0x18/0xf0 [ 1138.365213][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1138.370377][ T6498] tty_wakeup+0xe5/0x120 [ 1138.374673][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1138.380013][ T6498] uart_flush_buffer+0x37b/0x890 [ 1138.385006][ T6498] tty_driver_flush_buffer+0x61/0x80 [ 1138.390342][ T6498] tty_ldisc_hangup+0xde/0x6a0 [ 1138.395159][ T6498] __tty_hangup.part.0+0x3f8/0x890 [ 1138.400326][ T6498] tty_ioctl+0xf42/0x15d0 [ 1138.404710][ T6498] __x64_sys_ioctl+0x190/0x200 [ 1138.409536][ T6498] do_syscall_64+0xcd/0x250 [ 1138.414092][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.420037][ T6498] [ 1138.420037][ T6498] other info that might help us debug this: [ 1138.420037][ T6498] [ 1138.430229][ T6498] Possible interrupt unsafe locking scenario: [ 1138.430229][ T6498] [ 1138.438510][ T6498] CPU0 CPU1 [ 1138.443839][ T6498] ---- ---- [ 1138.449169][ T6498] lock(disc_data_lock#2); [ 1138.453641][ T6498] local_irq_disable(); [ 1138.460361][ T6498] lock(&port_lock_key); [ 1138.467183][ T6498] lock(disc_data_lock#2); [ 1138.474173][ T6498] [ 1138.477592][ T6498] lock(&port_lock_key); [ 1138.482060][ T6498] [ 1138.482060][ T6498] *** DEADLOCK *** [ 1138.482060][ T6498] [ 1138.490168][ T6498] 6 locks held by kworker/u8:10/6498: [ 1138.495500][ T6498] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1138.506599][ T6498] #1: ffffc9000e267d80 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1138.517599][ T6498] #2: ffff888025470ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 1138.526605][ T6498] #3: ffff88807b39d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1138.535876][ T6498] #4: ffffffff9ab3d538 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1138.544973][ T6498] #5: ffff88807b39d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1138.554235][ T6498] [ 1138.554235][ T6498] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1138.564601][ T6498] -> (&port_lock_key){-.-.}-{3:3} { [ 1138.569772][ T6498] IN-HARDIRQ-W at: [ 1138.573717][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1138.580445][ T6498] _raw_spin_lock_irqsave+0x3a/0x60 [ 1138.587257][ T6498] serial8250_handle_irq+0x95/0xc80 [ 1138.594071][ T6498] serial8250_default_handle_irq+0x9a/0x210 [ 1138.601579][ T6498] serial8250_interrupt+0x103/0x210 [ 1138.608393][ T6498] __handle_irq_event_percpu+0x229/0x7d0 [ 1138.615643][ T6498] handle_irq_event+0xab/0x1e0 [ 1138.622024][ T6498] handle_edge_irq+0x263/0xd10 [ 1138.628406][ T6498] __common_interrupt+0xdf/0x250 [ 1138.634962][ T6498] common_interrupt+0xba/0xe0 [ 1138.641259][ T6498] asm_common_interrupt+0x26/0x40 [ 1138.647904][ T6498] acpi_safe_halt+0x1a/0x20 [ 1138.654023][ T6498] acpi_idle_enter+0xc5/0x160 [ 1138.660318][ T6498] cpuidle_enter_state+0xaa/0x4f0 [ 1138.666960][ T6498] cpuidle_enter+0x4e/0xa0 [ 1138.673002][ T6498] do_idle+0x310/0x3f0 [ 1138.678684][ T6498] cpu_startup_entry+0x4f/0x60 [ 1138.685060][ T6498] start_secondary+0x222/0x2b0 [ 1138.691441][ T6498] common_startup_64+0x13e/0x148 [ 1138.697993][ T6498] IN-SOFTIRQ-W at: [ 1138.701937][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1138.708663][ T6498] _raw_spin_lock_irqsave+0x3a/0x60 [ 1138.715475][ T6498] serial8250_handle_irq+0x95/0xc80 [ 1138.722297][ T6498] serial8250_default_handle_irq+0x9a/0x210 [ 1138.729804][ T6498] serial8250_interrupt+0x103/0x210 [ 1138.736619][ T6498] __handle_irq_event_percpu+0x229/0x7d0 [ 1138.743869][ T6498] handle_irq_event+0xab/0x1e0 [ 1138.750252][ T6498] handle_edge_irq+0x263/0xd10 [ 1138.756633][ T6498] __common_interrupt+0xdf/0x250 [ 1138.763189][ T6498] common_interrupt+0x61/0xe0 [ 1138.769491][ T6498] asm_common_interrupt+0x26/0x40 [ 1138.776131][ T6498] unwind_next_frame+0x22d/0x20c0 [ 1138.782771][ T6498] arch_stack_walk+0x95/0x100 [ 1138.789076][ T6498] stack_trace_save+0x95/0xd0 [ 1138.795388][ T6498] kasan_save_stack+0x33/0x60 [ 1138.801716][ T6498] kasan_save_track+0x14/0x30 [ 1138.808018][ T6498] kasan_save_free_info+0x3b/0x60 [ 1138.814663][ T6498] __kasan_slab_free+0x51/0x70 [ 1138.821042][ T6498] kmem_cache_free+0x152/0x4b0 [ 1138.827426][ T6498] rcu_core+0x79d/0x14d0 [ 1138.833290][ T6498] handle_softirqs+0x213/0x8f0 [ 1138.839673][ T6498] do_softirq+0xb2/0xf0 [ 1138.845448][ T6498] __local_bh_enable_ip+0x100/0x120 [ 1138.852263][ T6498] fpu_clone+0x398/0xd80 [ 1138.858126][ T6498] copy_thread+0x451/0xb80 [ 1138.864160][ T6498] copy_process+0x382c/0x8cc0 [ 1138.870455][ T6498] kernel_clone+0xfd/0x960 [ 1138.876491][ T6498] __do_sys_vfork+0x89/0xc0 [ 1138.882613][ T6498] do_syscall_64+0xcd/0x250 [ 1138.888734][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.896242][ T6498] INITIAL USE at: [ 1138.900101][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1138.906742][ T6498] _raw_spin_lock_irqsave+0x3a/0x60 [ 1138.913480][ T6498] serial8250_do_set_termios+0x307/0x16f0 [ 1138.920740][ T6498] serial8250_set_termios+0x6e/0x80 [ 1138.927481][ T6498] uart_set_options+0x31b/0x5f0 [ 1138.933871][ T6498] serial8250_console_setup+0x18a/0x460 [ 1138.940947][ T6498] univ8250_console_setup+0x1d4/0x2c0 [ 1138.947851][ T6498] try_enable_preferred_console+0x2fd/0x530 [ 1138.955291][ T6498] register_console+0x3ac/0x1170 [ 1138.961766][ T6498] univ8250_console_init+0x5f/0x90 [ 1138.968418][ T6498] console_init+0xbb/0x6a0 [ 1138.974370][ T6498] start_kernel+0x29a/0x4d0 [ 1138.980421][ T6498] x86_64_start_reservations+0x18/0x30 [ 1138.987428][ T6498] x86_64_start_kernel+0xb2/0xc0 [ 1138.993911][ T6498] common_startup_64+0x13e/0x148 [ 1139.000383][ T6498] } [ 1139.002852][ T6498] ... key at: [] port_lock_key+0x0/0x40 [ 1139.010467][ T6498] [ 1139.010467][ T6498] the dependencies between the lock to be acquired [ 1139.010473][ T6498] and HARDIRQ-irq-unsafe lock: [ 1139.023924][ T6498] -> (disc_data_lock#2){.?.?}-{3:3} { [ 1139.029285][ T6498] IN-HARDIRQ-R at: [ 1139.033239][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.039982][ T6498] _raw_read_lock+0x3a/0x70 [ 1139.046109][ T6498] sp_get+0x18/0xf0 [ 1139.051535][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1139.058268][ T6498] tty_wakeup+0xe5/0x120 [ 1139.064128][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1139.071034][ T6498] serial8250_tx_chars+0x68e/0x860 [ 1139.077762][ T6498] serial8250_handle_irq+0x74d/0xc80 [ 1139.084673][ T6498] serial8250_default_handle_irq+0x9a/0x210 [ 1139.092181][ T6498] serial8250_interrupt+0x103/0x210 [ 1139.098995][ T6498] __handle_irq_event_percpu+0x229/0x7d0 [ 1139.106246][ T6498] handle_irq_event+0xab/0x1e0 [ 1139.112627][ T6498] handle_edge_irq+0x263/0xd10 [ 1139.119007][ T6498] __common_interrupt+0xdf/0x250 [ 1139.125565][ T6498] common_interrupt+0x61/0xe0 [ 1139.131861][ T6498] asm_common_interrupt+0x26/0x40 [ 1139.138507][ T6498] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1139.145763][ T6498] dummy_timer+0x1e49/0x3930 [ 1139.151969][ T6498] __hrtimer_run_queues+0x20a/0xae0 [ 1139.158799][ T6498] hrtimer_run_softirq+0x17d/0x350 [ 1139.165527][ T6498] handle_softirqs+0x213/0x8f0 [ 1139.171909][ T6498] __irq_exit_rcu+0x109/0x170 [ 1139.178202][ T6498] irq_exit_rcu+0x9/0x30 [ 1139.184061][ T6498] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1139.191308][ T6498] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1139.198904][ T6498] acpi_safe_halt+0x1a/0x20 [ 1139.205024][ T6498] acpi_idle_enter+0xc5/0x160 [ 1139.211320][ T6498] cpuidle_enter_state+0xaa/0x4f0 [ 1139.217961][ T6498] cpuidle_enter+0x4e/0xa0 [ 1139.224005][ T6498] do_idle+0x310/0x3f0 [ 1139.229699][ T6498] cpu_startup_entry+0x4f/0x60 [ 1139.236079][ T6498] rest_init+0x16b/0x2b0 [ 1139.241964][ T6498] start_kernel+0x3e4/0x4d0 [ 1139.248101][ T6498] x86_64_start_reservations+0x18/0x30 [ 1139.255187][ T6498] x86_64_start_kernel+0xb2/0xc0 [ 1139.261752][ T6498] common_startup_64+0x13e/0x148 [ 1139.268310][ T6498] HARDIRQ-ON-R at: [ 1139.272268][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.279008][ T6498] _raw_read_lock+0x5f/0x70 [ 1139.285137][ T6498] sp_get+0x18/0xf0 [ 1139.290567][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1139.297302][ T6498] tty_wakeup+0xe5/0x120 [ 1139.303169][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1139.310083][ T6498] uart_flush_buffer+0x37b/0x890 [ 1139.316640][ T6498] tty_driver_flush_buffer+0x61/0x80 [ 1139.323542][ T6498] tty_ldisc_hangup+0xde/0x6a0 [ 1139.329924][ T6498] __tty_hangup.part.0+0x3f8/0x890 [ 1139.336656][ T6498] tty_ioctl+0xf42/0x15d0 [ 1139.342603][ T6498] __x64_sys_ioctl+0x190/0x200 [ 1139.348996][ T6498] do_syscall_64+0xcd/0x250 [ 1139.355125][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.362635][ T6498] IN-SOFTIRQ-R at: [ 1139.366590][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.373318][ T6498] _raw_read_lock+0x3a/0x70 [ 1139.379435][ T6498] sp_get+0x18/0xf0 [ 1139.384859][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1139.391589][ T6498] tty_wakeup+0xe5/0x120 [ 1139.397448][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1139.404352][ T6498] serial8250_tx_chars+0x68e/0x860 [ 1139.411078][ T6498] serial8250_handle_irq+0x74d/0xc80 [ 1139.417989][ T6498] serial8250_default_handle_irq+0x9a/0x210 [ 1139.425498][ T6498] serial8250_interrupt+0x103/0x210 [ 1139.432322][ T6498] __handle_irq_event_percpu+0x229/0x7d0 [ 1139.439572][ T6498] handle_irq_event+0xab/0x1e0 [ 1139.445954][ T6498] handle_edge_irq+0x263/0xd10 [ 1139.452334][ T6498] __common_interrupt+0xdf/0x250 [ 1139.458890][ T6498] common_interrupt+0x61/0xe0 [ 1139.465184][ T6498] asm_common_interrupt+0x26/0x40 [ 1139.471827][ T6498] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1139.479075][ T6498] dummy_timer+0x1e49/0x3930 [ 1139.485282][ T6498] __hrtimer_run_queues+0x20a/0xae0 [ 1139.492099][ T6498] hrtimer_run_softirq+0x17d/0x350 [ 1139.498827][ T6498] handle_softirqs+0x213/0x8f0 [ 1139.505210][ T6498] __irq_exit_rcu+0x109/0x170 [ 1139.511502][ T6498] irq_exit_rcu+0x9/0x30 [ 1139.517361][ T6498] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1139.524612][ T6498] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1139.532209][ T6498] acpi_safe_halt+0x1a/0x20 [ 1139.538330][ T6498] acpi_idle_enter+0xc5/0x160 [ 1139.544624][ T6498] cpuidle_enter_state+0xaa/0x4f0 [ 1139.551269][ T6498] cpuidle_enter+0x4e/0xa0 [ 1139.557302][ T6498] do_idle+0x310/0x3f0 [ 1139.562985][ T6498] cpu_startup_entry+0x4f/0x60 [ 1139.569362][ T6498] rest_init+0x16b/0x2b0 [ 1139.575221][ T6498] start_kernel+0x3e4/0x4d0 [ 1139.581342][ T6498] x86_64_start_reservations+0x18/0x30 [ 1139.588419][ T6498] x86_64_start_kernel+0xb2/0xc0 [ 1139.594972][ T6498] common_startup_64+0x13e/0x148 [ 1139.601528][ T6498] SOFTIRQ-ON-R at: [ 1139.605474][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.612202][ T6498] _raw_read_lock+0x5f/0x70 [ 1139.618320][ T6498] sp_get+0x18/0xf0 [ 1139.623744][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1139.630472][ T6498] tty_wakeup+0xe5/0x120 [ 1139.636332][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1139.643235][ T6498] uart_flush_buffer+0x37b/0x890 [ 1139.649799][ T6498] tty_driver_flush_buffer+0x61/0x80 [ 1139.656699][ T6498] tty_ldisc_hangup+0xde/0x6a0 [ 1139.663079][ T6498] __tty_hangup.part.0+0x3f8/0x890 [ 1139.669810][ T6498] tty_ioctl+0xf42/0x15d0 [ 1139.675756][ T6498] __x64_sys_ioctl+0x190/0x200 [ 1139.682137][ T6498] do_syscall_64+0xcd/0x250 [ 1139.688257][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.695766][ T6498] INITIAL USE at: [ 1139.699633][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.706312][ T6498] _raw_write_lock_irq+0x36/0x50 [ 1139.712788][ T6498] sixpack_close+0x1e/0x2f0 [ 1139.718851][ T6498] tty_ldisc_close+0x111/0x1a0 [ 1139.725177][ T6498] tty_ldisc_kill+0x8e/0x150 [ 1139.731322][ T6498] tty_ldisc_hangup+0x311/0x6a0 [ 1139.737717][ T6498] __tty_hangup.part.0+0x3f8/0x890 [ 1139.744366][ T6498] tty_ioctl+0xf42/0x15d0 [ 1139.750230][ T6498] __x64_sys_ioctl+0x190/0x200 [ 1139.756529][ T6498] do_syscall_64+0xcd/0x250 [ 1139.762568][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.769993][ T6498] INITIAL READ USE at: [ 1139.774289][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.781364][ T6498] _raw_read_lock+0x5f/0x70 [ 1139.787829][ T6498] sp_get+0x18/0xf0 [ 1139.793623][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1139.800697][ T6498] tty_wakeup+0xe5/0x120 [ 1139.806920][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1139.814171][ T6498] uart_flush_buffer+0x37b/0x890 [ 1139.821076][ T6498] tty_driver_flush_buffer+0x61/0x80 [ 1139.828324][ T6498] tty_ldisc_hangup+0xde/0x6a0 [ 1139.835062][ T6498] __tty_hangup.part.0+0x3f8/0x890 [ 1139.842137][ T6498] tty_ioctl+0xf42/0x15d0 [ 1139.848431][ T6498] __x64_sys_ioctl+0x190/0x200 [ 1139.855161][ T6498] do_syscall_64+0xcd/0x250 [ 1139.861629][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.869484][ T6498] } [ 1139.871952][ T6498] ... key at: [] disc_data_lock+0x18/0xfe0 [ 1139.879809][ T6498] ... acquired at: [ 1139.883575][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1139.888826][ T6498] _raw_read_lock+0x5f/0x70 [ 1139.893465][ T6498] sp_get+0x18/0xf0 [ 1139.897421][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1139.902671][ T6498] tty_wakeup+0xe5/0x120 [ 1139.907052][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1139.912480][ T6498] serial8250_tx_chars+0x68e/0x860 [ 1139.917730][ T6498] __start_tx+0x3e9/0x4a0 [ 1139.922199][ T6498] serial8250_start_tx+0x363/0x530 [ 1139.927458][ T6498] __uart_start+0x292/0x4c0 [ 1139.932102][ T6498] uart_write+0x218/0xb30 [ 1139.936589][ T6498] sixpack_receive_buf+0x3d7/0x1c80 [ 1139.941940][ T6498] tty_ldisc_receive_buf+0x153/0x190 [ 1139.947376][ T6498] tty_port_default_receive_buf+0x70/0xb0 [ 1139.953270][ T6498] flush_to_ldisc+0x264/0x780 [ 1139.958096][ T6498] process_one_work+0x9c5/0x1ba0 [ 1139.963199][ T6498] worker_thread+0x6c8/0xf00 [ 1139.967931][ T6498] kthread+0x2c1/0x3a0 [ 1139.972145][ T6498] ret_from_fork+0x45/0x80 [ 1139.976703][ T6498] ret_from_fork_asm+0x1a/0x30 [ 1139.981617][ T6498] [ 1139.983911][ T6498] [ 1139.983911][ T6498] stack backtrace: [ 1139.989770][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: kworker/u8:10 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1140.000333][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1140.010378][ T6498] Workqueue: events_unbound flush_to_ldisc [ 1140.016164][ T6498] Call Trace: [ 1140.019417][ T6498] [ 1140.022320][ T6498] dump_stack_lvl+0x116/0x1f0 [ 1140.026976][ T6498] check_irq_usage+0xf22/0x1290 [ 1140.031810][ T6498] ? __pfx_mark_lock+0x10/0x10 [ 1140.036549][ T6498] ? __pfx_check_irq_usage+0x10/0x10 [ 1140.041805][ T6498] ? hlock_conflict+0x58/0x200 [ 1140.046536][ T6498] ? __bfs+0x2fa/0x670 [ 1140.050569][ T6498] ? __pfx_hlock_conflict+0x10/0x10 [ 1140.055732][ T6498] ? hlock_conflict+0x58/0x200 [ 1140.060465][ T6498] ? lockdep_lock+0xc6/0x200 [ 1140.065033][ T6498] ? __pfx_lockdep_lock+0x10/0x10 [ 1140.070028][ T6498] ? __lock_acquire+0x24b4/0x3c40 [ 1140.075027][ T6498] __lock_acquire+0x24b4/0x3c40 [ 1140.079857][ T6498] ? __pfx___lock_acquire+0x10/0x10 [ 1140.085029][ T6498] ? lock_acquire.part.0+0x11b/0x380 [ 1140.090285][ T6498] lock_acquire.part.0+0x11b/0x380 [ 1140.095364][ T6498] ? sp_get+0x18/0xf0 [ 1140.099314][ T6498] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1140.104913][ T6498] ? rcu_is_watching+0x12/0xc0 [ 1140.109664][ T6498] ? trace_lock_acquire+0x146/0x1e0 [ 1140.114844][ T6498] ? sp_get+0x18/0xf0 [ 1140.118795][ T6498] ? lock_acquire+0x2f/0xb0 [ 1140.123264][ T6498] ? sp_get+0x18/0xf0 [ 1140.127213][ T6498] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1140.132900][ T6498] _raw_read_lock+0x5f/0x70 [ 1140.137370][ T6498] ? sp_get+0x18/0xf0 [ 1140.141318][ T6498] sp_get+0x18/0xf0 [ 1140.145101][ T6498] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1140.150789][ T6498] sixpack_write_wakeup+0x20/0x390 [ 1140.155869][ T6498] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1140.161563][ T6498] tty_wakeup+0xe5/0x120 [ 1140.165776][ T6498] tty_port_default_wakeup+0x2a/0x40 [ 1140.171031][ T6498] serial8250_tx_chars+0x68e/0x860 [ 1140.176110][ T6498] __start_tx+0x3e9/0x4a0 [ 1140.180414][ T6498] serial8250_start_tx+0x363/0x530 [ 1140.185493][ T6498] __uart_start+0x292/0x4c0 [ 1140.189969][ T6498] uart_write+0x218/0xb30 [ 1140.194272][ T6498] sixpack_receive_buf+0x3d7/0x1c80 [ 1140.199447][ T6498] ? ldsem_down_read_trylock+0x121/0x180 [ 1140.205047][ T6498] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1140.210996][ T6498] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1140.216598][ T6498] tty_ldisc_receive_buf+0x153/0x190 [ 1140.221854][ T6498] tty_port_default_receive_buf+0x70/0xb0 [ 1140.227549][ T6498] flush_to_ldisc+0x264/0x780 [ 1140.232198][ T6498] ? lock_acquire+0x2f/0xb0 [ 1140.236682][ T6498] ? process_one_work+0x921/0x1ba0 [ 1140.241774][ T6498] process_one_work+0x9c5/0x1ba0 [ 1140.246693][ T6498] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1140.252294][ T6498] ? __pfx_process_one_work+0x10/0x10 [ 1140.257635][ T6498] ? rcu_is_watching+0x12/0xc0 [ 1140.262377][ T6498] ? assign_work+0x1a0/0x250 [ 1140.267039][ T6498] worker_thread+0x6c8/0xf00 [ 1140.271601][ T6498] ? __kthread_parkme+0x148/0x220 [ 1140.276597][ T6498] ? __pfx_worker_thread+0x10/0x10 [ 1140.281694][ T6498] kthread+0x2c1/0x3a0 [ 1140.285745][ T6498] ? _raw_spin_unlock_irq+0x23/0x50 [ 1140.290923][ T6498] ? __pfx_kthread+0x10/0x10 [ 1140.295485][ T6498] ret_from_fork+0x45/0x80 [ 1140.299873][ T6498] ? __pfx_kthread+0x10/0x10 [ 1140.304435][ T6498] ret_from_fork_asm+0x1a/0x30 [ 1140.309262][ T6498] [ 1140.312394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.201603][T12803] Bluetooth: hci5: command 0x0406 tx timeout [ 1143.207938][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 1143.208314][T12803] Bluetooth: hci8: command 0x0406 tx timeout [ 1143.219863][T11249] Bluetooth: hci1: command 0x0406 tx timeout