last executing test programs: 5m30.779959954s ago: executing program 1 (id=476): r0 = socket(0x10, 0x803, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x7, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x10800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d0000000000000000000000ff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000000000800"/28], 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c774802000000a41849f3673f9376bdd950550a39f6421788d905a275aa4cb54161d3ac8681137d06b0ad4f96", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x28000) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000680)={0x9, 0x3, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0xdb, 0x1ff, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x0, 0x112, 0x7}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000210001002abd7000000000000a000000000000000000000008000a00262d0c6ab7bfeddb95485f2fc5e46706000000d5e25ae80e457f2320bcf4720d69a0f59f06c17f7c6c3edd2886406a846b7094b8804c75ee9f6d1bdc7ef26f246bb4cd4a3fa6558272636eea6b63540d109eb43810b57ef3fa11edc68a62a154fa83da79bb81cbc69dbc76934d6c1e5d54282d89ebeb156a297c8a82f8014536064b8ddd4cc4698d9835fb08bba049a3e06abe27778f84"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc8) 5m28.026946766s ago: executing program 1 (id=484): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x8ab, 0x0, @private0, @rand_addr=' \x01\x00', 0x8}}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000480)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000ac0), 0x6e, 0x0}}], 0x2, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r7, 0x0, 0x7, 0x0) read(r6, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 5m27.040483486s ago: executing program 1 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) pipe2(0x0, 0x0) io_setup(0x2869b0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0xa, &(0x7f0000000000)={r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c080}, 0x24040000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x80, 0x100}, 0xc) socket$inet6(0xa, 0x3, 0x2f) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_adj\x00') read$FUSE(r5, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) 5m26.397902821s ago: executing program 1 (id=493): r0 = socket(0x1, 0x803, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000140)={0x10, 0x1000000}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0xfd46, 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000081067fe80a9c18bc3b1cca04c8c8de28120000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRESOCT, @ANYRES64=r6, @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20000000) 5m25.016711102s ago: executing program 1 (id=495): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7ffffffc]}, 0x8) close(r1) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xfffffe08, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x846) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1200440, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'ext4\x00'}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@nodevmap}, {@cache_mmap}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}]}}) fcntl$setown(0xffffffffffffffff, 0x8, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setown(r0, 0x8, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) preadv(r5, &(0x7f0000002ac0), 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5m24.43914088s ago: executing program 1 (id=498): ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000240)={0x6000, 0x15000}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000f99000/0x3000)=nil, 0x3000}}) 5m24.339634788s ago: executing program 32 (id=498): ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000240)={0x6000, 0x15000}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000f99000/0x3000)=nil, 0x3000}}) 4m34.130206641s ago: executing program 4 (id=635): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) 4m33.229040938s ago: executing program 4 (id=637): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000000a1b7880610cc945000088a80008e0e0eb0e089e29ed", 0x26, 0x24048000, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x1, 0x6, @local}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0x3c, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000001040)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) syz_open_dev$tty1(0xc, 0x4, 0x1) 4m30.998164651s ago: executing program 4 (id=644): prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}}, 0x20000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) ioctl$BLKRRPART(r5, 0x125f, 0x0) 4m30.511104627s ago: executing program 4 (id=646): r0 = socket(0x1, 0x803, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000140)={0x10, 0x1000000}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0xfd46, 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000081067fe80a9c18bc3b1cca04c8c8de28120000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRESOCT, @ANYRES64=r6, @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20000000) 4m29.235590698s ago: executing program 4 (id=649): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000100001140000006cec41d89f37fa5897", @ANYRES32=r2, @ANYBLOB="72972d4d15e1"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@mpls_newroute={0x48, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x10, 0x0, 0x8, 0x0, 0x5a7d61ac2e65e9ca, 0xfd, 0x5, 0x1800}, [@RTA_DST={0x8, 0x1, {0x4d6}}, @RTA_VIA={0x14, 0x12, {0x9, "f8dfa34d742f9df64b73ba93d1a5"}}, @RTA_DST={0x8, 0x1, {0x100}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}]}, 0x48}, 0x1, 0xf303000000000000}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x366b5fc5e49be913, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/190, 0xbe, 0x0, &(0x7f0000000600)=""/85, 0x55}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) r9 = dup3(r1, r0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xcb20, 0x197, 0x4, 0x0, 0xffffffffffffffff, 0x7f, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x8, @void, @value, @void, @value}, 0x50) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800), 0x501001, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc388}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a3}}, @jmp={0x5, 0x1, 0x0, 0xb, 0x0, 0x20, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}]}, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x29, '\x00', r2, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r5, 0x0, &(0x7f00000008c0)=[r8, r9, r10, r11, r12], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_usb_control_io(r4, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140002"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m26.114089382s ago: executing program 4 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547e514b984cc9c89b9b7d4e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) syz_emit_ethernet(0xffffffffffffff79, &(0x7f0000000180)={@random="984797021070", @empty, @val={@void, {0x8100, 0x1, 0x1}}, {@x25={0x805, {0x0, 0xa, 0xf1, "919d7d67505b63246eadba009cc6fa06efeac215c22195f9be58159bbd"}}}}, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0xa}, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000000c0)=0x800, 0x4) 4m25.461636772s ago: executing program 33 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547e514b984cc9c89b9b7d4e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) syz_emit_ethernet(0xffffffffffffff79, &(0x7f0000000180)={@random="984797021070", @empty, @val={@void, {0x8100, 0x1, 0x1}}, {@x25={0x805, {0x0, 0xa, 0xf1, "919d7d67505b63246eadba009cc6fa06efeac215c22195f9be58159bbd"}}}}, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0xa}, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000000c0)=0x800, 0x4) 4m5.637337242s ago: executing program 0 (id=712): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/231, 0xe7}], 0x1, 0x2000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000540), 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000580)="42a8280030fda3d6b9ef61628b0e81973ea85c6eed362500df429cbea9e6d298890bb8e1c651c13319f6551207ff755526fcdcc7f756b7dd657314d8ee5f7bd1e21726b0834785b968a5a8746bce291821720c8fca06ce6a33614112879f3eb0020f119008aaf2cc1c0e97c7e2b4f3524e58cb9b4d8701b6070a2eecc21b5eea34e0600a4869960501d4425c9896e344", 0x90}, {&(0x7f0000000800)="b0c0535d48c66a88271d3e10ce6946cffcbbf281008ecba85da2b527b7cee9b1da6dab1b6c741b7e92488a4192a1d9bfd86906e3a9fa02b4dcb360040bc703f32dc7d120d6699a105528e4196144ad8a40b2826bfdf8089f3b1d458f58471d84caaf89b31212aa6d3b299884f50f0f3cd849b9da109d48a353b9815ecf6229cef2a7a97ad52707f40bc0cbb4543ff5c0a88f", 0x92}, {&(0x7f00000008c0)="ebcb0b62ca32ff740c3e18ddf7b310d54490bc1322376c3549f029757c3c827248f5ccd00b325d663cd31d90dce7985c867b23b4022ea765e681733f5481eb2c5b9f44573ce18b65ec9b149b37b58b6e8385cfd196dc7fc4f2748208654d64c380ce422464722ce5aa85a58033597794f758076824d78f12270aacfcdbc6b2ea4b3ea417b855d36d683923139ab044a612ff21af141bfc48df3a4eb7ec4a48e2a71e1174baad684d9a00b4a0b07dad51d07ac83fe2ead3bb35c28dd7f55085669d0ce36359808ddbbf110dad41c546f387c5a13838a73235859233a3ca7fe8176872c49ec16cc659979c53d29c62ae4510115a778dde3c", 0xf7}, {&(0x7f00000009c0)="5852f4a04d990f34f3b5a4dbf6510f443c50263801245f7d07cbf88a12fdd393af4c80ad982fc9e9e2fd350599bc2a87b0a124e1fea3a97ba510684ec3a00e65d44d8e7fbe524ce7ddaec284c5e50e43f060767a82ca6ef85eed3d0f7a1570a57ddaedf9e9a564d997d6d00c32a6c1cf3b795e1d2bc93795a73084df430ffdd13528c8b912e0399fcc73364df0b084339a7603aa30e64c8d512bb7f706d67c79c92cbd8d7c61b4aac70463086e4aa0aad59c3fee0050edd60bd49018979d2dfa0afd094683ae2613d761d5c52f7c53c7724e2b52", 0xd4}], 0x4, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xa0}, 0x4054) ptrace(0x10, r5) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001fb7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) 4m5.143891635s ago: executing program 0 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x194) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000000000300000000000500010007000000"], 0x1c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) 4m4.147770489s ago: executing program 0 (id=719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) r2 = io_uring_setup(0x7e6c, &(0x7f0000000100)={0x0, 0x3229, 0x4, 0x3, 0x2d6}) syz_io_uring_setup(0x5dc4, &(0x7f0000000200)={0x0, 0x9a5c, 0x1000, 0x1, 0x204, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r3) 4m3.862605135s ago: executing program 0 (id=721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x20000040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000140)="66b9eb02000066b80060000066ba000000000f300f2011b800008ee8f080b63f5e9466ded966b92d09000066b80d0ab7e966ba000000000f3066b9800000c00f326635000100000f30baf80c66b8a161b08266efbafc0cb00aee640fc76c8b3e0ff432", 0x63}], 0x1, 0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000001c0)=0xd0) r8 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x11002) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="9ed3ec396eed5c92fae82443f212010000ab6d21400a11512f60a60102080109021200010000000009048300009ed3d500"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000001c0)=0xd0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000100)=0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES8=r10, @ANYRES32, @ANYBLOB="080027bd7000ffdbdf2576020000f3fa85dc", @ANYRES32=r10, @ANYBLOB="0c00580022000000000000000c00580069000000000000000c00580009000000000000000c0058003c000000000000000c00580023000000000000000c0058007f000000000000000c00580075000000000000000c0058007900000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8991}, 0x408d0) 4m1.606457604s ago: executing program 0 (id=724): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) kcmp(r1, 0x0, 0x6, r0, r0) 4m0.901188588s ago: executing program 0 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1101}) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r5, 0x1048}, {r4, 0x100}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4042c00}, 0x20000014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r9 = syz_open_pts(r1, 0x444102) ioctl$TIOCNXCL(r9, 0x540d) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 4m0.722733263s ago: executing program 34 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1101}) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r5, 0x1048}, {r4, 0x100}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4042c00}, 0x20000014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r9 = syz_open_pts(r1, 0x444102) ioctl$TIOCNXCL(r9, 0x540d) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 2m30.808652972s ago: executing program 2 (id=989): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x60503, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000003c0)=0x7, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) io_uring_setup(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x11050) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffd7d, 0x2, 0x10000}}]}, 0x40}}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x7fffffff, {{0x2, 0x4e1d, @multicast2}}}, 0xe4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) listen(r0, 0x0) 2m27.698962111s ago: executing program 2 (id=995): r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x4004550d, 0x0) r3 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r6}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r7}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) ioperm(0x6, 0x1, 0x95d) r12 = inotify_init() inotify_add_watch(r12, &(0x7f0000000340)='.\x00', 0xa50003d1) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) io_uring_enter(r3, 0x2dbe, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000001200)=""/99, 0x63, 0x0) 2m26.42923786s ago: executing program 2 (id=999): r0 = socket$inet6(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(r1, 0x2, &(0x7f00000000c0), 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x2, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000100)="f20f210e66b806000f00d0b8008000000f23d80f21f835c00000100f23f8650f6be53e0fc718676f0f0dbccc55d900000f09f30f09650fb028", 0x39}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 2m26.007202096s ago: executing program 2 (id=1003): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (fail_nth: 11) 2m25.416459292s ago: executing program 2 (id=1004): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000004503"]) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0xffffff01}}, &(0x7f0000000180), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) iopl(0x3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) setpriority(0x1, r4, 0x444) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r9, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a656334a0d71dff1ace0f5f6d6f675f743a7330207379"], 0x29) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008ac053702400001020301090224070000000000000000000003011d00092100000001220000090581030000000000"], 0x0) writev(r3, &(0x7f0000001580)=[{&(0x7f0000000200)="92aef0666c908334461be007719181d4de2c7e8ded920df6b8c0f190b3e7951c8895911bac660ec61ac0cded686d3bfb0547dd4fadfa18397d0400e7706ec7db2bfbe32343a1e65302b72161433417f4a5d2970973672cd7a85e6ff7d80252bbf1f6bc8914921976f03701be7359f309b7bb85bf1da9f44eb5c37853c78a0f4b0528c57e21febff614cab538", 0x8c}, {&(0x7f00000002c0)="a35d8c998934431374136e29e63d55c62d2f179900c1ce547b1f310a6322c13c9ecf2931b3ffcda16af6", 0x2a}, {&(0x7f0000000300)="aace49550a8bded0f9d3b6fe8297600b86d8099ae6bc118e26b3d30bb80a662ee7e4fe829cb24c3a979144f2bf4e007161f62743a24ceda3c6175af67920", 0x3e}, {&(0x7f0000000340)="05ad7f49719783a3ea1c3cc147ead987f2bb25e642e5b20889816c2624bee4c8e94e21c635785668dc40d48c58ad54580754526b129ee44c53aac5e71f77fb5d0df8a97b000b9ebf0017408b206d39da17bcf65a98df108ed38235e4d20644a8b3c14f037e0515f87216905444266bdb3affacca1ddf893abe5566a6b080bf4502b097667cf2e5e449cd054a7482c5722cbebe3f1efbf244d07cf64fcfd15f4e995222d35792198e6776ae4dc75ac7e0b0a3", 0xb2}, {&(0x7f0000000440)="64167c7d3542befff96cdadda069b70200014d206637f21040cf44a3e636c5053fe1c4f7a625fa3c1e04a59cb2e7828ea04e6ae56b6fa5970717bee7715f56ef204100d19759162efd59e11d26ef1d6770d7799ef36adc5e9ec226edd32dea220f62c403c89d5a2c0239734d177fd7cef9019d0d370800976b5daefdb92710bb335fffec213a45f86f9830712088a7fd275291c961ff39e0132edb1f162912ecf6c295517a6756cb5edbda09a34ea4", 0xaf}, {&(0x7f0000000500)="a01107c951c4d978d62a879f7c810cf3a80669ce5045d5d952705688415b398bef48857026749ee82d81fdb5de44cca0e0fd834b094a5bf2343a07e9ba22413e942a247eae70311494658e", 0x4b}, {&(0x7f0000000580)="610680ba3e1e0cbdbe32c9336b94ded83978a896f3267abfbd6dc5cde657243dc11dab416e1cfb6b64075953efec5e8a8360e083edbaefaf749ff0d04010741b18d4927e597fddce7d456d8415a177efefe20f554cb68b2092201a1dbbf6184f1b6fa41b09e928ed9c49907043deb9c9f209367a024a35bb3788127ce8fd3ce95d1fb47019f01266c55241ac8056da5cf6cbf144dee088456ad08f58b5c3d595a0ed6aebc0db2045acc633889f609aa9709aadb28e3bae41a5e5cd962e8a9089fd07d5217d2ded10a9a161254b4ed4f4d775cfe9daf627fd992de0a7c3c29be04086df9a0d6c8f9e6ffcf6262b78b5eae28ba0f73e0f6c7683360af03061829932d01116600850b5b4dac855b59177fb815a79964a926332289a6cc9e035b2be627337fdfc9ad6fa7f036f75644cd41722a6667846b9907d30d73317122e0a597dc8305c793c8ac10ec23943f214680635a73b082da74637955ef5116c3151db066c5f45970ab6848c6cfdba8773f8185168900b52fbfa68bce0ec77a608e3f8aab600dda0fc8653c0dc25c4646a8cdc37c80420dfbe871a7e833ab30bd746fa9df79c889ef40f859f4cedb547d32a456c1a8c5d569c3abf08d3b306b68982aa0c349d7550e868b17b1833e5150658898b9a150c297dc4596d579f1a4d5b0a0854d761f0231fef9696ca9f01306bbfc233d14f419a474da2cc4a1c0d4f3d64acac77dd1a5e95daca525e3fae3fd5ad81e5d3e118dfb1cc2a2d8b044ff4311284ee2960e2659bd8380c7b0ac2522191eb4952bbbc6d230e75e3ad856c2b4390a0b702a4eac45004ec7064113b01cc504c9811f254da28adbbd5a328c73ce87fc90cb56179273964056a5f9261a64b0a8a53ae02526b12ca74f15239e312acb0ba35fca9ff274d665f701634db63059267598a3aee9790abfaf2b1ac65d4d886a4b0c9465d9fbd8d0560ec08505582c735dcad4ce93f2915a1a6b96aa9ab5f2246b4113695477e89d6089944f6e5705275b442af9fbf85a4a0398d941ce251efb6a93f0b2efc3ce48aabaf03207127b800d3451b3fd1ab655967252254c4050060b09dbc101cba8cfa6800d3bb6deae6d546592a6b560dd680b020f46e38d05faa88baf55e46cdc276cb8eb04f9ec926eaf9be123bd98d997166ed23ce85ee02d17129ecc929fcc27d71d9d3b0e4e02d722c57fae2f930c787227a55429d8365831ca928525c2bdd61959ef8dd58b3e30024864cac0b8a6c8d9fd629729758096cfd8babffec420c4a7761c89e30e6c3d2609c75f0b8b8ca9736a32e46096e5e0f2f89e7b42b2251babc2cf49f793ddfbb4bebd27304e6f5226355fd7481a65dcda23cf2e4f3f5aea20da374f11ca37774ae451d889142e646b7f510eafec868fd2cb5204f9b46d8647c5e52f9866e2d277fad60eaed8357620de6630ef7b72255f86fceba34e13104a655da6927ee4a6d7b3dfa12ac567994ce1c078945f095f20ae4cf7a54bebe5198e4050a74915aea459ec61edc0b262fcd6ba9feaba8d17ac15aaf355ac8232f3c05ee533945b135a2c16a8610769f8ec88ee623ed498ddaea09725878d4fb19e6622894184a044a56fec2080429550aed9aeeed0f6b37d22a8468b247e3c37908aa997c94284353beb8481823fbb8f0f7fdcdf3e2c0867bd504873940bca43bfb48df2f125abbf62122dec1dcd8dd275de5f43188f906eb71ad65faad69eb5f82f6b7a3bf8b30b17ba58e5ef6be6a9ff54787879ecd5dad70584444d6f8a1565decd174f09130c28866a4b7e04740cb1529c427d10d13def0c50bffa87a88b74f1636b891beedff0344580ee34a82d7be10fe85c84a35ff7eb1d34291362d822d1213ecf998654935b9848ffff85ef8df2d00e75c6448032a50cdc35bc095d2dfd08b1a2564a8a4c0dd9981e1c0228b545e59b2583aa562d25fd187419c70088e9b49540dd41fd4331475c8664e54ac39dbd1616577f58d054c5d09d6c69f21999ee98cb6355530913dc0423fe15529662b781e6a96f9b57cab817115e57929c9cbadb2d41033b2d2cfe7806a0744c7b5518b7cb378ded8a04a743bedb93a73c555c24ce46cf92b71be5a70851af68b35ab684efbc9f82d3d26a47ba10308e101bde6b76d62a0be49e548fcfda18fd8fa8b32dbe34ea15f4c6f1acfd93102fdf70ac93e64b0c95ecac3390fe69d9dec0d4c8ab85eee8b8f3bf5294c0391ec907b33021b2940bee3449b3a6484787ce5773efd12b4629591ff550920d5d75ddb57312687558a8bc7b08a3bba47b323a3b942df82d247baa1148e97ce6212c4c8e02ec881a1a2a7219fcd727ddeba313e2495258f44a3c629b8038fc98624a0ed903fe545f2bf613a2ccc6b3914fdf66d8c429c953488b0178b40721b0a6310912e557fb2631ccb9c76e73292e7b57341b8b0ee9afc62eb1ebc45285f5566212a2adee6a3c7b8c335d66253796443c4270db342d2b81c3e24b0da70a2544893fe36cf28fc763f1cb6e6853fc77659f300decfb1c978f4dd75c2d11f89b9a2dc8b21dabb45359e45c3812a30f7a8b75860e3eb3b51376b9c3a0c2fbee779d2fd1fe2c5ef4a448ea00634c954200b6e31e2d702baa0e986ed2e3c89e0115c26cfdad248b3eda3e4251df8a30de96716a272041b58f89568687c8dbb8ae435d06b72b9f0fb7041bf46bde56d9c7b18e5e983d8deb491ccd6a126d3720f04b30c3d5f5137811f28a9ecfce23d928ec2e41d7f1a912641aa3ac28b8bfa8fc6faa9cfd63e185dc1f9dd2d70f424c153db2cee65f08807d7ec097e9efc476e732e58bd02dc0204fc6e1b361f33310d8faeaa125a05fb3f4b1abc46c881336c294004645dc5f73ff9070d4dcf61701db083aa72f92aaeed939270f4996168f655adf083bdcc8c8186d9aca7b045aa528a90fd6992dcac566fbe1377e50ef6651eb0e22b1eb6a5381fbd31960ef9669f43016f5d32cb4b13eb143cbcdd2dd945f524145032a0beba2802894437148586deb2ecffca650523973c4544718d1373e71a6a149a7cce59bca85ec73240c7cb7081d2bd79be44a8595fcc4f81b30fbaa00d057564b6dbfaddd18abae6c20ed7947c30f1b49e4e493682be3aec51eb5d67651fc074b040187ccb35017316c7b5d77a1d4d89191d9b2f09b37e42ff8cf32466a0f4ce93b90aa97a932b1e6c6fc54c2e6096e2980291489f3545ef22c2fb93b44e97a399eb41310a7cf77295ec6d80263672f1a0628d7382b824d810d48b2713933ca04fa96151af5e0c6b8093fade0a21313b6dbb267ee8c4cb63f56e0aa7f1b1289470c2501d2782484e48616fca61740a38d1f878f03cfc5546e96a08f48c946e9401f3488a2a31f2a2636da1bc4e17152f025187321ce0ff0708340e3f808f7820a4214a59368108c69bbd0a1c9e73caf785b71f91274598d461feae44437ff2a03eae8fede800d3834b072fc50e3fe74d67707ce364bfb9f66fa31f34bb4c0ac4fd513ced1ba7dc33905ed4c57d0892c4900838ade534b28e2fa1abeaa7e5900679148ddcef4f7163af9c080b094f23cdad484ad67f1cb9ff907b7379586bbfe81a1a21b9f18c31272cb450be78d1ceb134c02deb6ccd08826c25b3672af60db009fd238751af2919fdd227665402f82d2956814d5a2dfc09b2ee072936c8230e3d71b7959a1ee3fe9502fdb851040c2e8fb00e6bda6d4bca82b48bafcfc6d2d03011f280fd89ccb6b6061a8c9ffe8e9843ef86dbfb1fca540b5ac24eacd1d5e1bb83d760dfc49044b25abe9f3de92155cdfa90096dad6716bc01dcbbffc991809dbed7ddc2bd53923b0142b0b3a1b1bdeb529aa329a5de005d91fd53da5e72870b21997f6da9f6ce7cf581d220ba1670c921e97832601869460345ef2f92a20e93eac5e10cac67f255fb122dbc645e4f4a226deda93ed124736a3c15107eb4d9a8a8251b6139027b0d6810f0aa4a205d376451a3782c7883138a1bb6dd38457ef14d3cf9216d411e4921fc2d85777f26cda52d2c3bcff128a5f0f68d0649d08ce634fffbe0854c6878783b3589cdaabc10ceba57cadf0e05c19196b107e9a7a61ad0e218e7d1e0e0b6ef35b2e641b77232bd8574382261dc8a412e2e20db9fdd42a4403639088a4be80538cd6fdd0c429de202bf25aa2785b2bc02af51657d92171d18b88bb6fbb0782ccc3d2f0902637915ae13da18043dfc44f6ce442235b3b133ddc5d41c48416dfe4d4b6bef8d74d89254b55f6cb0ff028a35016198daba92147b1ffa3b26b427501fe462f98928c6b37bec26a481c8f0043f55acaf049dfeda0f56ed7cc21c2ba2304b54f7cb1b4a248c8ada1b30721f2c9ccb3cb50e1eaf73516c4b545f08e2e84f99bf6ffdd6872afb222dd3fc70bff50ca413167df93a5b811c7cac33a1c5adfbffdd29167ed5300a7f179a84dde4ebf194a149b5c5d63288abe3fc073bb9124f0e82d59adc6747bc4ee5ef534d0569575fa8f3f2c1705644d624613b5eafb2a882301908c934c3f19b6436113d3aef2f6f9693ec4ab454779cde09a9bd88b07554b35e940d422688f225d6807e6503dc9b0302da33746b95ac9da7ceba4416d095cdd3ba78a3380ed8e49f70539b304cfa1d40d149f7b0f33379f0b1635ac12a72eb82eda7b5221de8cc6252e3b5030b1faef47a26e79e903ea97a37bcca32b4f3f65e6cf0f0987d39fbcb7d1fae28f60aaac67ed73ce3a3f933d1e9ac67a0febc855226d74098ec84cc63bda60c28d77e2b627e90c04c0b07cf94c5526bd122c9087165c81ba8492b5b4dd0a60b02c30b7e9103bf26fb4c6cb919169245f5db9cdec2a6ed2927d500d85c7f1ac5d5c92c47c8548c2aa440ddbb260e9d6f0196ddd6281abf669d8380a5158ae14ea540afcb01a5effd34bed220b09f89b67525b83d404ffc196eac427bed0f6a4e1e617c3d5b05aede243e70c306b7366d9ab5c3ddbb740df1fae0cecffe8459fc7245f0716cb1fc1ce36e48e06fea5859d4febcd82a836e2bf97018dea176641f5d707cd8691505c5cddaa99ec813ca0f81413b28b157f33c95b26b56adb83300c001f9152b121e23cd5d5155430deb1dfb7462f9383a576991990365e4d1eb379da16055600cb8ecbbb7e6bff217e4f62c0c3a78b58a45443b3932ac505db656ab27ce780d0f63a32bff36a71d6afc493b4d17034aad4de4b2852687e98c35bfe1c11751ede056607a93205538656203146f889c459edcb725c66eb0b897cd927ba6a9f35422541be8ba002cd8b74f8e49a51ed8e27f7b1f08b3d56da58d8475a809c601f305252fa11a903f8228c97d9d2de452d8386cf59a7224601753bc9fc5fa5eb7cf7de46435d1042f0a5c330ca5f575097a36e5c00e7fd27ef1ad24488843944fc47437c3a2964f22885ffe1494b124da6c76572b4ec000801e4678", 0xf00}], 0x7) 2m21.433766621s ago: executing program 2 (id=1014): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) r3 = syz_io_uring_setup(0xa6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/240, 0xf0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r12}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m6.362512898s ago: executing program 35 (id=1014): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) r3 = syz_io_uring_setup(0xa6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/240, 0xf0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r12}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.940102493s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m33.573672527s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m30.251079094s ago: executing program 5 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x1, 0x4, 0x4, 0xf7, 0x3, @multicast}, 0x10) socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x49, 0x0, 0x20000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000055f000/0x2000)=nil, 0x2000, 0x16) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x59}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe2(&(0x7f0000000100), 0x80000) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8a) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r4, &(0x7f00000002c0)={&(0x7f0000005440)=@caif, 0x80, 0x0}, 0x8001) sendfile(r4, r3, 0x0, 0xffefffff) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d09696e643a3701"]) 1m28.499858162s ago: executing program 5 (id=1168): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x0, 0x2}, 0x14) listen(r1, 0x1ff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000040)='/dev/cpu/#/msr\x00', 0x0) sendto$inet(r2, &(0x7f0000000500)="ab", 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 1m27.816137943s ago: executing program 5 (id=1169): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c060000) unshare(0x24020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000400)=[{{&(0x7f0000000300)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000480)="e8d319457dd2e42c704001e87ff698a6d69ac7aff915010bb076f3442df5d0db2dd43bec216cb7f7935de89ce3452ce04696ddf29dba3ca940c6ac7a29e0671b2c7891b85a92ed625ace77e703bb4c78a938c8db0b903b9d3e952c5bbd5b8d31c66d7a8397bf2b540cb245f62fb8c68abcb42ac698bf0de4bbd249d6d33cd3646b8b90bbb94e97d114952fe0311231936f62f007aa903950dd59d32dcecef130d7c658402c1e07a1353b64217a8b111d1725718bd0a67e6ac4169c759f5f7c4008a22bc142116d37c3ed096004f80f", 0xcf}, {&(0x7f00000006c0)="aadac8a094508287128a4f2217ae9ec41ace03d87b51e2bce6acffd263985dcc300549dd1e7a3e5d4d8a890156a38a4fc10bbbdfcb1b801b3af934c179d1336026c2261d31ce1404c85027acfa0798c49a4fc4c3dc4a8fe5afb62ca9902c3b6a314781d9dcd5a0afb0cfe8649305e428fb52d488894b33a75ab72235ecf190f0ffc04ef4a1ae93f9630e82a19847efa91f2a36e424a35f5fb9236b74deda2599e60341f09f3eb90813cb559668c0991521ee0a18f19ed4cd2abaf36efe99f149cc54147ffbd90fb5e75b1dd51f252169720592403ffa53d342174bbbdc0a01d309cfffca69bca0aa", 0x82}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001b40)="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", 0x10c}, {&(0x7f0000000580)="175c3ebb426d3221bb5c16c8b7c190874a73e26a74ae45be929b65c351f76dcf32efb50c3a381e5432cb7d34c129964afc043f57f83961da9420daf77c76ed91fc0d53ad91c91d5143fd033fd1d30ff36a7180ea32", 0x55}, {&(0x7f00000007c0)="c30fc958234a941730ce75ca2c66860da8707d2277a0f489444d40173a07dfa48c2e761a2fde3316d2e002c41135de3f1176124ccb2952fe840687d78d824a158899fdb774957312f33aada69b0199120c0d16ca268e093725779621d72c6788063e1b0970c09d5d82de3df8a7e446aa9dc45694b00177dd6af2fd2fb2ded0756126a0d592c65e0adf09788a6a0e57495af3f56f28ea74daa9781a0a4df53e2f44c0e296f9fb2c36a86bca9b7e7d14284971e630b6b99a4ea3aedf4cf65b76b6b99d497973883604591c2f49ca9d63452e84ee6b7961a41c260678", 0xdb}, {&(0x7f00000008c0)="cee1316f642f2e0b9f2803895597b3e5346f392510c2a83252c6dd792b7ab82e14e576889b6d3dce322dd29f08c4536bba76aeb76b6be587d8d62eaf6f25ecb4b98cd39f3ad6e134256c092f058ec1792e3511b650af08610a9c02062748d8b9e8367da24b5cdb29c96eb82dd139755fd4134803fa8b8b447179841ce3e4bd79b5f1bb2d0d40d59abea3f49b4433deab3ed7cbffc6c92f4c4a0c12923774ca1e638f426c4b4832b6c6c13df8b7712be1b5b1e97a4a1e86cd1d343417af722fb290a45a2e505cc204ab9844a34af72e65ce3ea8c15c20c4b2901dd4ef166ceb2679e1a41a9dc2", 0xe6}, {&(0x7f0000001a40)="6637d731e27f7da30629755a62b769e725cf7b92d3972136e7b11290e21b18c9574dfabfa22f5e100d1a77d68d9840e0633ebbd7f7fcb1bf14a19ae7a73b1b886a221c356de8eb4fd0418c51532fce557ca0b4097c72992a4c11137bbc6352560bbee3bcaa5e0b08eb5850d3fc00777e21714887fe", 0x75}], 0x8, 0x0, 0x0, 0x4000080}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r5, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2700000004000000ff0f00000600000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000380), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@remote, @remote, @remote, 0x40000, 0x40, 0x0, 0x100, 0x0, 0xc0180045}) socket$inet6(0xa, 0x2, 0x0) r8 = dup(0xffffffffffffffff) write$FUSE_LSEEK(r8, 0x0, 0x0) 1m26.831213629s ago: executing program 5 (id=1175): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000180200002020702500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000000085000000ca0000009500"/149], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x4008040) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2]) 1m25.93968702s ago: executing program 5 (id=1179): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="000000000100"}) openat(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x5}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x9003, 0xcf, 0x90, [0x20000200, 0x20000230], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000002200000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000004333f6ed087000000fcff"]}, 0x108) 1m24.987371787s ago: executing program 5 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c) 1m24.773780126s ago: executing program 36 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c) 1m0.566214563s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 41.029973305s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 25.123190522s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 11.650782943s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 7.896767554s ago: executing program 9 (id=1404): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xdfff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x8a05}, 0x1c) fcntl$setflags(r0, 0x2, 0x1) socket(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff83d40100000e88a800008100000086dd604d462800101100fe80000000000000008000000000002920010000000000000000000000005e0000004eae5b7ff68d222b105298c938"], 0x4e) iopl(0x3) r3 = syz_io_uring_setup(0x1dac, &(0x7f0000000440)={0x0, 0x0, 0x2, 0xfffffffc}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 7.895889437s ago: executing program 6 (id=1405): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/25, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000000000000000000000007000000440c00010a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 7.746948136s ago: executing program 6 (id=1409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket(0x8, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x3, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x5, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000c6000000000000850000000000000095212df1b19c227584380e2a1b3904998c4a1272621301eee6875fb0ab7a7bb75e22a147c103095a0e1f667da1b48cfde551"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) 7.211734943s ago: executing program 9 (id=1412): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x0, 0x288, 0x0, 0x1f0, 0x158, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00', {}, {}, 0x0, 0x0, 0x52}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @rand_addr, 0xff, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30}, 0x30) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x9, 0x0, 0x20084, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004440)={0x2020, 0x0, 0x0}, 0xfffffdf4) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000b42492081e045340b20c01020301090212000100000000090400000000f33c008aa2434e0759516b86813f460c3fd581868ae7fdbf4ff38fb3"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r9 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, 0x0) dup3(0xffffffffffffffff, r5, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0xd4) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000180)={0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'nq\x00', 0x0, 0x5, 0x1f}, 0x2c) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) bind$alg(r4, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 7.098349757s ago: executing program 7 (id=1413): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0xf101}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$igmp(0x2, 0x3, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000500)={0x28, 0x2, 0x0, {0x1, 0x6, 0x8000000000000000}}, 0x28) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'ip6gre0\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r4}, 0x50) r6 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0xb0) ioctl$FIBMAP(r6, 0x401870cb, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='neigh_create\x00', r0}, 0x10) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x200200, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000012c0)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001280)={{0x1, 0x1, 0x18, r1, {r8, r5}}, './file0/file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 6.751161381s ago: executing program 6 (id=1414): syz_open_dev$ttys(0xc, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) fallocate(r1, 0x2, 0x3, 0x2) getdents64(r0, &(0x7f0000000100)=""/4014, 0xfae) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x7fe, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) 6.201944308s ago: executing program 7 (id=1415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r3 = syz_io_uring_setup(0x111, &(0x7f0000000440)={0x0, 0xb41b, 0x4, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 0'], 0x32) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) r8 = socket(0x37, 0x804, 0xc64) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040)={'#! ', '', [], 0xa, "efbc"}, 0x6) sendfile(r8, r9, &(0x7f0000000000)=0x5, 0x20920c57) dup3(r7, r6, 0x0) r10 = socket$inet6(0xa, 0x800, 0x100) setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) 5.599274137s ago: executing program 6 (id=1416): mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) dup(r0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2a200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) r7 = memfd_create(&(0x7f0000000a00)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\xca`\xf7\x12#\xfcm\xcf\xb2\x14\xf1\xab\xd9d\'\x1a<\xfee7{l\x16}\xa0I\x7f]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9cu\x1f\x85\x14\xae\x81Qy\x92[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd\xcc\xda[\xe1\xc4~\x8b\x9e\xa0\xf9P\xf5a&\xd4\xf4\x8eum\x04\x00~\xfa\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xc) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') lseek(r7, 0x0, 0x4) r8 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.232712243s ago: executing program 7 (id=1418): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a800008100"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0x16, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 4.911016802s ago: executing program 7 (id=1419): syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0xfea5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x260, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00', {}, {}, 0x6, 0x0, 0x56}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev}) syz_io_uring_submit(r0, r1, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.130072514s ago: executing program 9 (id=1421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket(0x10, 0x803, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000001500)=""/252, 0xfc}, {&(0x7f0000001600)=""/129, 0x81}, {&(0x7f00000016c0)=""/249, 0xf9}, {&(0x7f00000017c0)=""/193, 0xc1}], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)=@gettaction={0x5c, 0x32, 0x320, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xde8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x48080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f00000000c0)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000001a80)=@usbdevfs_connect={0x6}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8003fffff) fallocate(r1, 0x0, 0x0, 0x8001) ftruncate(r0, 0xd9d) 3.794979423s ago: executing program 7 (id=1423): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="f5", 0x1}], 0x1) ioctl$VT_RELDISP(r0, 0x5605) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000600)='\ay', 0x2}, 0x68) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x7) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 2.686964942s ago: executing program 9 (id=1425): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffff55, 0x160, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000200)=[0xc6], 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x34, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4]}) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10007881bc00000098070b19be8dbe"], 0x20}, 0x0, 0xe3d08660d3cd4684, 0x1}) io_uring_enter(r6, 0x1586, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = epoll_create(0x1000) epoll_pwait(r10, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x120, &(0x7f00000001c0)={[0x8000000000000001]}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.51186345s ago: executing program 6 (id=1426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x4a, 0x0, &(0x7f0000cab000)) creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',w', @ANYBLOB="bd928ac05f9d45"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r3, 0x20, 0x8000, 0xa8e6) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x800, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) 2.049061843s ago: executing program 9 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x1, 0x4, 0x4, 0xf7, 0x3, @multicast}, 0x10) socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x49, 0x0, 0x20000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000055f000/0x2000)=nil, 0x2000, 0x16) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x59}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) pipe2(&(0x7f0000000100), 0x80000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8a) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmsg$sock(r3, &(0x7f00000002c0)={&(0x7f0000005440)=@caif, 0x80, 0x0}, 0x8001) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffefffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000003400)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d09696e643a3701"]) 2.030909984s ago: executing program 6 (id=1428): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x0, 0x288, 0x0, 0x1f0, 0x158, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00', {}, {}, 0x0, 0x0, 0x52}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @rand_addr, 0xff, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30}, 0x30) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x9, 0x0, 0x20084, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004440)={0x2020, 0x0, 0x0}, 0xfffffdf4) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000b42492081e045340b20c01020301090212000100000000090400000000f33c008aa2434e0759516b86813f460c3fd581868ae7fdbf4ff38fb3"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r9 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, 0x0) dup3(0xffffffffffffffff, r5, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0xd4) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000180)={0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'nq\x00', 0x0, 0x5, 0x1f}, 0x2c) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) bind$alg(r4, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 1.662079199s ago: executing program 8 (id=1429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000000010505000000000000000002000000240002"], 0x7c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000820000c0"]) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000580)={0x0, 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000140)=[{}], 0x2, 0x0, &(0x7f0000000180)=[{}, {}]}) 1.363289304s ago: executing program 8 (id=1430): r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x300, 0x0, 0x0) 1.342698702s ago: executing program 8 (id=1431): r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x4004550d, 0x0) r3 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r7}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) ioperm(0x6, 0x1, 0x95d) r12 = inotify_init() inotify_add_watch(r12, &(0x7f0000000340)='.\x00', 0xa50003d1) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) io_uring_enter(r3, 0x2dbe, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000001200)=""/99, 0x63, 0x0) 432.195456ms ago: executing program 9 (id=1432): syz_io_uring_setup(0x16d0, &(0x7f0000000080)={0x0, 0xc2d8, 0x10, 0x20000000, 0x4004}, &(0x7f0000000280), &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$netlink(0x10, 0x3, 0x14) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2, 0xa, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400"], 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$sequencer(0xffffffffffffffff, 0x0, 0x40) r3 = syz_io_uring_setup(0x6ae5, &(0x7f00000002c0)={0x0, 0x6b38, 0x2, 0xfffffffc, 0x3bf}, &(0x7f0000004000), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x2000ac0a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x3, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x30, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x3ff}}, './file0\x00'}) ioctl$TCSBRKP(r6, 0x5425, 0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x15, 0x1) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x0, 0x0) 319.796528ms ago: executing program 8 (id=1433): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 241.479794ms ago: executing program 7 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)=""/164, 0xa4}], 0x1}, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = msgget$private(0x0, 0x180) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000001c80)=""/65) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000019000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/103) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1d1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x1ff}, {0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0xfffffffe, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, {0x3}, {}, {}, {}, {0x6, 0x100}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa4c23e1}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffd}], [{}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b32b6961cae000000000000000071a5f81f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 210.99008ms ago: executing program 8 (id=1435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x48001, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x200) 0s ago: executing program 8 (id=1436): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x166b1ab5eb710134) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_open_dev$video4linux(0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1ff}) listen(r2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) kernel console output (not intermixed with test programs): 18][ T5922] hid-generic 0000:FFFFFFFE:0000.0015: unknown main item tag 0x0 [ 461.879285][ T5922] hid-generic 0000:FFFFFFFE:0000.0015: unknown main item tag 0x0 [ 461.891849][ T5922] hid-generic 0000:FFFFFFFE:0000.0015: unknown main item tag 0x0 [ 461.911925][ T5922] hid-generic 0000:FFFFFFFE:0000.0015: unknown main item tag 0x0 [ 461.934015][ T5922] hid-generic 0000:FFFFFFFE:0000.0015: unknown main item tag 0x0 [ 461.952655][ T5873] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.969233][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.995609][ T5873] usb 9-1: Product: syz [ 461.996195][ T5922] hid-generic 0000:FFFFFFFE:0000.0015: hidraw0: HID vffffff.fb Device [syz0] on syz0 [ 462.025424][ T5873] usb 9-1: Manufacturer: syz [ 462.027589][ T29] audit: type=1400 audit(1730945767.169:1010): avc: denied { create } for pid=12007 comm="syz.5.1091" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.030019][ T5873] usb 9-1: SerialNumber: syz [ 462.075206][ T5873] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 462.090934][ T29] audit: type=1400 audit(1730945767.209:1011): avc: denied { mount } for pid=12007 comm="syz.5.1091" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 462.112577][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.143474][ T29] audit: type=1400 audit(1730945767.219:1012): avc: denied { link } for pid=12007 comm="syz.5.1091" name="file1" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.208065][ T29] audit: type=1400 audit(1730945767.219:1013): avc: denied { append } for pid=12007 comm="syz.5.1091" name="file0" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.230667][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.237219][ T29] audit: type=1400 audit(1730945767.219:1014): avc: denied { open } for pid=12007 comm="syz.5.1091" path="/160/file0/file0" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.260483][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.273881][ T5826] Bluetooth: hci4: command tx timeout [ 462.304533][ T29] audit: type=1400 audit(1730945767.269:1015): avc: denied { unmount } for pid=8218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 462.381500][ T5922] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.643364][T11996] overlayfs: overlapping lowerdir path [ 462.799248][T12021] overlayfs: overlapping lowerdir path [ 462.812404][ T29] audit: type=1400 audit(1730945767.949:1016): avc: denied { mount } for pid=11995 comm="syz.8.1086" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 462.853607][ T5874] usb 9-1: USB disconnect, device number 2 [ 462.871299][ T29] audit: type=1400 audit(1730945768.009:1017): avc: denied { unmount } for pid=11779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 462.899138][T11951] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1077'. [ 463.613218][ T5922] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 463.637418][ T5922] ath9k_htc: Failed to initialize the device [ 463.757921][ T5874] usb 9-1: ath9k_htc: USB layer deinitialized [ 464.570146][ T5826] Bluetooth: hci4: command tx timeout [ 464.594179][T11963] chnl_net:caif_netlink_parms(): no params data found [ 465.095201][T12060] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.433573][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.441237][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.449994][T11963] bridge_slave_0: entered allmulticast mode [ 465.463086][T11963] bridge_slave_0: entered promiscuous mode [ 465.474693][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.482012][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.489408][T11963] bridge_slave_1: entered allmulticast mode [ 465.496509][T11963] bridge_slave_1: entered promiscuous mode [ 465.528959][T12078] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 465.562575][T12076] IPVS: stopping master sync thread 12078 ... [ 465.659721][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.524774][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.552173][T12087] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1105'. [ 466.657925][T12088] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 466.664696][T12088] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 466.674254][T12088] vhci_hcd vhci_hcd.0: Device attached [ 466.684460][ T5826] Bluetooth: hci4: command tx timeout [ 466.690943][T12089] usbip_core: unknown command [ 466.705844][T12089] vhci_hcd: unknown pdu 0 [ 466.710206][T12089] usbip_core: unknown command [ 466.743815][T12088] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 466.750449][T12088] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 466.758491][T12088] vhci_hcd vhci_hcd.0: Device attached [ 466.781048][ T6200] vhci_hcd: stop threads [ 466.814862][ T6200] vhci_hcd: release socket [ 466.842245][ T6200] vhci_hcd: disconnect device [ 466.851206][T11963] team0: Port device team_slave_0 added [ 466.871081][ T966] vhci_hcd: vhci_device speed not set [ 466.896755][T11963] team0: Port device team_slave_1 added [ 466.988442][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.009501][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.025370][ T29] audit: type=1400 audit(1730945772.149:1018): avc: denied { read } for pid=12102 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.103132][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.141842][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.157914][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.254679][T12091] vhci_hcd: connection closed [ 468.255792][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.354215][ T3768] vhci_hcd: stop threads [ 468.361675][ T3768] vhci_hcd: release socket [ 468.408266][ T3768] vhci_hcd: disconnect device [ 468.656231][T11963] hsr_slave_0: entered promiscuous mode [ 468.679270][T11963] hsr_slave_1: entered promiscuous mode [ 468.697376][T11963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.724581][T11963] Cannot create hsr debugfs directory [ 469.222283][ T29] audit: type=1400 audit(1730945774.358:1019): avc: denied { create } for pid=12133 comm="syz.6.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 469.235359][T12139] 9pnet_fd: Insufficient options for proto=fd [ 469.257074][ T29] audit: type=1400 audit(1730945774.378:1020): avc: denied { setopt } for pid=12133 comm="syz.6.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 469.522610][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1116'. [ 469.532864][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1116'. [ 469.906111][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1116'. [ 469.920524][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1116'. [ 469.925758][T12155] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 471.054548][T12164] FAULT_INJECTION: forcing a failure. [ 471.054548][T12164] name failslab, interval 1, probability 0, space 0, times 0 [ 471.123202][T12164] CPU: 1 UID: 0 PID: 12164 Comm: syz.6.1119 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 471.133994][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 471.144036][T12164] Call Trace: [ 471.147301][T12164] [ 471.150221][T12164] dump_stack_lvl+0x16c/0x1f0 [ 471.154883][T12164] should_fail_ex+0x497/0x5b0 [ 471.159549][T12164] ? fs_reclaim_acquire+0xae/0x150 [ 471.164641][T12164] should_failslab+0xc2/0x120 [ 471.169302][T12164] kmem_cache_alloc_node_noprof+0x71/0x310 [ 471.175086][T12164] ? __alloc_skb+0x2b1/0x380 [ 471.179668][T12164] __alloc_skb+0x2b1/0x380 [ 471.184064][T12164] ? __pfx___alloc_skb+0x10/0x10 [ 471.188995][T12164] tipc_nl_compat_dumpit+0x15d/0x820 [ 471.194271][T12164] tipc_nl_compat_recv+0x539/0xc50 [ 471.199361][T12164] ? lock_acquire.part.0+0x11b/0x380 [ 471.204622][T12164] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 471.210232][T12164] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 471.215843][T12164] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 471.222065][T12164] ? __mutex_trylock_common+0xea/0x250 [ 471.227518][T12164] ? rcu_is_watching+0x12/0xc0 [ 471.232260][T12164] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 471.239608][T12164] genl_family_rcv_msg_doit+0x202/0x2f0 [ 471.245132][T12164] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.251179][T12164] ? __radix_tree_lookup+0x21f/0x2c0 [ 471.256456][T12164] genl_rcv_msg+0x565/0x800 [ 471.260936][T12164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.265937][T12164] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 471.271557][T12164] netlink_rcv_skb+0x16b/0x440 [ 471.276299][T12164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.281298][T12164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.286564][T12164] ? down_read+0xc9/0x330 [ 471.290872][T12164] ? __pfx_down_read+0x10/0x10 [ 471.295611][T12164] ? netlink_deliver_tap+0x1ae/0xd90 [ 471.300878][T12164] genl_rcv+0x28/0x40 [ 471.304835][T12164] netlink_unicast+0x53c/0x7f0 [ 471.309579][T12164] ? __pfx_netlink_unicast+0x10/0x10 [ 471.314862][T12164] netlink_sendmsg+0x8b8/0xd70 [ 471.319617][T12164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.324893][T12164] ____sys_sendmsg+0xaaf/0xc90 [ 471.329634][T12164] ? copy_msghdr_from_user+0x10b/0x160 [ 471.335070][T12164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.340335][T12164] ? __pfx___lock_acquire+0x10/0x10 [ 471.345510][T12164] ___sys_sendmsg+0x135/0x1e0 [ 471.350174][T12164] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.355353][T12164] ? lock_acquire+0x2f/0xb0 [ 471.359840][T12164] ? __fget_files+0x40/0x3f0 [ 471.364426][T12164] ? fdget+0x176/0x210 [ 471.368482][T12164] __sys_sendmsg+0x117/0x1f0 [ 471.373056][T12164] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.378141][T12164] ? __fget_files+0x244/0x3f0 [ 471.382804][T12164] do_syscall_64+0xcd/0x250 [ 471.387283][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.393155][T12164] RIP: 0033:0x7f370777e719 [ 471.397543][T12164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.417125][T12164] RSP: 002b:00007f37084ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.425512][T12164] RAX: ffffffffffffffda RBX: 00007f3707935f80 RCX: 00007f370777e719 [ 471.433468][T12164] RDX: 0000000000004000 RSI: 0000000020000280 RDI: 0000000000000003 [ 471.441412][T12164] RBP: 00007f37084ab090 R08: 0000000000000000 R09: 0000000000000000 [ 471.449369][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.457488][T12164] R13: 0000000000000000 R14: 00007f3707935f80 R15: 00007ffe3ce62d18 [ 471.465533][T12164] [ 471.557622][T12168] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 471.654275][T12170] netlink: 'syz.6.1122': attribute type 16 has an invalid length. [ 471.662195][T12170] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1122'. [ 471.897588][T12168] netlink: 'syz.5.1120': attribute type 1 has an invalid length. [ 471.934968][T12168] netlink: 9388 bytes leftover after parsing attributes in process `syz.5.1120'. [ 472.335752][T12180] 9pnet_fd: Insufficient options for proto=fd [ 472.637671][T11963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 472.699583][T11963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.255542][ T5874] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 473.449635][T11963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.465857][T11963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.539597][ T5874] usb 7-1: config 0 has no interfaces? [ 473.546499][ T5874] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 473.644672][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.754600][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 473.820569][ T5874] usb 7-1: config 0 descriptor?? [ 474.174864][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.187819][ T29] audit: type=1400 audit(1730945779.328:1021): avc: denied { ioctl } for pid=12212 comm="syz.7.1132" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 474.213219][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.243329][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.255917][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 474.268599][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.292450][ T9] usb 6-1: config 0 descriptor?? [ 474.295261][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.304503][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.307654][ T9] cp210x 6-1:0.0: cp210x converter detected [ 474.344213][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.351365][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.572456][ T9] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 474.586016][ T9] cp210x 6-1:0.0: querying part number failed [ 474.732973][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 475.899715][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.916546][T10620] usb 7-1: USB disconnect, device number 16 [ 475.941180][T12250] 9pnet_fd: Insufficient options for proto=fd [ 476.027537][T11963] veth0_vlan: entered promiscuous mode [ 476.061294][T11963] veth1_vlan: entered promiscuous mode [ 476.094291][T11963] veth0_macvtap: entered promiscuous mode [ 476.117590][T11963] veth1_macvtap: entered promiscuous mode [ 476.128196][T12259] FAULT_INJECTION: forcing a failure. [ 476.128196][T12259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.141381][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.8.1140 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 476.152146][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.162187][T12259] Call Trace: [ 476.165451][T12259] [ 476.168367][T12259] dump_stack_lvl+0x16c/0x1f0 [ 476.173117][T12259] should_fail_ex+0x497/0x5b0 [ 476.177782][T12259] _copy_to_user+0x32/0xd0 [ 476.182201][T12259] simple_read_from_buffer+0xd0/0x160 [ 476.187562][T12259] proc_fail_nth_read+0x198/0x270 [ 476.192571][T12259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.198102][T12259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.203639][T12259] vfs_read+0x1df/0xbe0 [ 476.207801][T12259] ? __fget_files+0x23a/0x3f0 [ 476.212468][T12259] ? fdget_pos+0x24c/0x360 [ 476.216864][T12259] ? __pfx_lock_release+0x10/0x10 [ 476.221869][T12259] ? trace_lock_acquire+0x14a/0x1d0 [ 476.227055][T12259] ? __pfx_vfs_read+0x10/0x10 [ 476.231728][T12259] ? __pfx___mutex_lock+0x10/0x10 [ 476.236747][T12259] ? __fget_files+0x244/0x3f0 [ 476.241417][T12259] ksys_read+0x12f/0x260 [ 476.245648][T12259] ? __pfx_ksys_read+0x10/0x10 [ 476.250406][T12259] do_syscall_64+0xcd/0x250 [ 476.254895][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.260789][T12259] RIP: 0033:0x7f3cdbf7d15c [ 476.265185][T12259] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 476.284877][T12259] RSP: 002b:00007f3cdcd07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.293286][T12259] RAX: ffffffffffffffda RBX: 00007f3cdc136058 RCX: 00007f3cdbf7d15c [ 476.301329][T12259] RDX: 000000000000000f RSI: 00007f3cdcd070a0 RDI: 000000000000000b [ 476.309282][T12259] RBP: 00007f3cdcd07090 R08: 0000000000000000 R09: 0000000000000000 [ 476.317245][T12259] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 476.325211][T12259] R13: 0000000000000000 R14: 00007f3cdc136058 R15: 00007ffc33c8e988 [ 476.333173][T12259] [ 476.371133][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.383883][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.415101][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.485733][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.500642][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.514822][ T7837] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 476.522573][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.549653][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.560663][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.584402][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.600784][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.612134][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.622824][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.633751][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.644113][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.661645][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.673012][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.691569][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.721649][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.732598][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.743882][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.754358][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.765294][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.775813][T12266] netlink: 'syz.8.1142': attribute type 10 has an invalid length. [ 476.801338][ T7837] usb 8-1: Using ep0 maxpacket: 8 [ 476.816135][ T7837] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 476.818615][T12266] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 476.824393][ T7837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.824413][ T7837] usb 8-1: config 0 has no interfaces? [ 476.854431][ T7837] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 476.872590][T12270] wlan1: mtu less than device minimum [ 476.874840][ T7837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.894631][ T7837] usb 8-1: Product: syz [ 476.901426][T11963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.920505][ T7837] usb 8-1: Manufacturer: syz [ 476.925392][T11963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.934154][ T7837] usb 8-1: SerialNumber: syz [ 476.940923][T11963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.950696][ T7837] usb 8-1: config 0 descriptor?? [ 476.955908][T11963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.113021][T11018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.141247][T11018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.190033][ T5874] usb 6-1: USB disconnect, device number 29 [ 477.200801][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 477.250517][ T5874] cp210x 6-1:0.0: device disconnected [ 477.361251][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.405172][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.594345][T10620] usb 8-1: USB disconnect, device number 14 [ 478.624583][T12299] tmpfs: Bad value for 'mpol' [ 478.856042][T12324] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1152'. [ 478.916442][ T7837] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 479.113516][ T7837] usb 7-1: config 0 has no interfaces? [ 479.127041][ T7837] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 479.231443][ T7837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.293440][ T7837] usb 7-1: config 0 descriptor?? [ 480.157205][ T5922] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 480.368106][ T5874] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 480.453559][T11018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.467055][T12348] input: syz1 as /devices/virtual/input/input27 [ 480.546166][T11018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.617773][ T966] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 480.628532][T11018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.683447][T11018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.754192][T11018] bridge_slave_1: left allmulticast mode [ 480.760893][T11018] bridge_slave_1: left promiscuous mode [ 480.768597][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.778759][T11018] bridge_slave_0: left allmulticast mode [ 480.784500][T11018] bridge_slave_0: left promiscuous mode [ 480.790653][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.791024][ T966] usb 6-1: Using ep0 maxpacket: 16 [ 480.805677][ T966] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.816261][ T966] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.827926][ T966] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.837438][ T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.846524][ T966] usb 6-1: Product: syz [ 480.850701][ T966] usb 6-1: Manufacturer: syz [ 480.855657][ T966] usb 6-1: SerialNumber: syz [ 481.221750][T11018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.233579][T11018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.249933][T11018] bond0 (unregistering): Released all slaves [ 481.369494][T12355] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1155'. [ 481.725765][T11018] hsr_slave_0: left promiscuous mode [ 481.736107][T11018] hsr_slave_1: left promiscuous mode [ 481.745830][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.753248][T11018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.762352][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.771466][T11018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.791616][T11018] veth1_macvtap: left promiscuous mode [ 481.797363][T11018] veth0_macvtap: left promiscuous mode [ 481.802987][T11018] veth1_vlan: left promiscuous mode [ 481.814055][T11018] veth0_vlan: left promiscuous mode [ 481.860527][ T7837] usb 7-1: USB disconnect, device number 17 [ 482.975951][T10620] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 483.190485][T10620] usb 9-1: config 0 has no interfaces? [ 483.193140][T12383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.204865][T10620] usb 9-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 483.233961][T12383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.256320][T12383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.262947][T10620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.289813][T12383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.313605][T12383] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 483.326779][T12383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 483.409893][T10620] usb 9-1: config 0 descriptor?? [ 483.514323][ T966] usb 6-1: 0:2 : does not exist [ 483.521932][ T966] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 483.564248][ T966] usb 6-1: USB disconnect, device number 30 [ 484.072828][T11591] udevd[11591]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.328029][ T29] audit: type=1400 audit(1730945789.456:1022): avc: denied { ioctl } for pid=12388 comm="syz.7.1163" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 484.644832][T12392] tmpfs: Bad value for 'mpol' [ 485.045926][T12402] kernel profiling enabled (shift: 17) [ 485.383691][ T7837] usb 9-1: USB disconnect, device number 3 [ 485.463175][ T5826] Bluetooth: hci4: command tx timeout [ 485.577060][ T29] audit: type=1400 audit(1730945790.716:1023): avc: denied { listen } for pid=12403 comm="syz.5.1168" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.696900][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 485.994173][T11018] team0 (unregistering): Port device team_slave_1 removed [ 486.063493][T11018] team0 (unregistering): Port device team_slave_0 removed [ 486.114712][ T29] audit: type=1400 audit(1730945791.246:1024): avc: denied { watch } for pid=12405 comm="syz.8.1167" path="/proc/87" dev="proc" ino=42652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 486.137361][ T29] audit: type=1400 audit(1730945791.256:1025): avc: denied { watch_reads } for pid=12405 comm="syz.8.1167" path="/proc/87" dev="proc" ino=42652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 486.601451][ T7837] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 486.709997][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1165'. [ 486.721754][T12411] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1167'. [ 486.794033][ T7837] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 486.851039][ T7837] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 486.872364][ T7837] usb 8-1: config 0 interface 0 has no altsetting 0 [ 486.881776][ T7837] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 486.891053][ T7837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.984316][ T7837] usb 8-1: Product: syz [ 486.988927][ T7837] usb 8-1: Manufacturer: syz [ 486.993600][ T7837] usb 8-1: SerialNumber: syz [ 487.065325][ T7837] usb 8-1: config 0 descriptor?? [ 487.083202][ T7837] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 487.108120][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 487.136939][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 487.197839][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 487.314503][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 487.450197][T12442] netlink: 'syz.5.1175': attribute type 1 has an invalid length. [ 487.536227][ T5826] Bluetooth: hci4: command tx timeout [ 487.594117][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 487.634769][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 487.661581][T12442] bond1: entered promiscuous mode [ 487.668698][ T7837] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 487.754367][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 487.767813][T12443] team0: Port device team_slave_1 removed [ 487.778294][T12443] bond1: (slave team_slave_1): making interface the new active one [ 487.795109][T12443] team_slave_1: entered promiscuous mode [ 487.798255][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3 [ 487.802640][T12443] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 487.836483][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 487.867611][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1177'. [ 487.891737][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 487.906564][ T7837] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 487.921479][ T7837] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 487.943914][ T7837] usb 8-1: USB disconnect, device number 15 [ 488.100537][ T7837] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 488.396322][T12456] : Can't lookup blockdev [ 488.423045][ T7837] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 488.433008][ T7837] keyspan 8-1:0.0: device disconnected [ 488.923771][ T29] audit: type=1400 audit(1730945794.056:1026): avc: denied { append } for pid=12489 comm="syz.8.1185" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 489.085536][ T6200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.107939][T12382] chnl_net:caif_netlink_parms(): no params data found [ 489.276163][ T6200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.460663][T12383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.473057][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.483859][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.494680][T12382] bridge_slave_0: entered allmulticast mode [ 489.505063][T12382] bridge_slave_0: entered promiscuous mode [ 489.685335][T12383] Bluetooth: hci4: command tx timeout [ 489.695852][T12383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.707406][T12383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.720239][T12383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.756787][T12383] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.766759][T12383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.979615][ T6200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.075380][ T6200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.116641][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.126630][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.142010][T12382] bridge_slave_1: entered allmulticast mode [ 490.766914][ T29] audit: type=1400 audit(1730945795.426:1027): avc: denied { ioctl } for pid=12515 comm="syz.6.1191" path="socket:[42804]" dev="sockfs" ino=42804 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 490.782524][T12382] bridge_slave_1: entered promiscuous mode [ 490.823182][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 490.832331][T12520] netlink: 'syz.6.1191': attribute type 3 has an invalid length. [ 491.095144][T12382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.219607][T12382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.336059][T12536] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1194'. [ 491.435496][T12382] team0: Port device team_slave_0 added [ 491.480873][T12382] team0: Port device team_slave_1 added [ 491.696748][ T5838] Bluetooth: hci4: command tx timeout [ 491.710692][T12382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.744876][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.857772][ T5838] Bluetooth: hci2: command tx timeout [ 491.890961][T12382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.993975][T12382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.021711][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.074029][T12382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.191400][ T6200] bridge_slave_1: left allmulticast mode [ 492.209724][ T6200] bridge_slave_1: left promiscuous mode [ 492.230943][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.244304][ T6200] bridge_slave_0: left allmulticast mode [ 492.253268][ T6200] bridge_slave_0: left promiscuous mode [ 492.263411][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.870626][T12571] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1198'. [ 493.027665][T12573] FAULT_INJECTION: forcing a failure. [ 493.027665][T12573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.134674][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.7.1199 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 493.145484][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 493.155551][T12573] Call Trace: [ 493.158835][T12573] [ 493.161765][T12573] dump_stack_lvl+0x16c/0x1f0 [ 493.166450][T12573] should_fail_ex+0x497/0x5b0 [ 493.171135][T12573] _copy_to_user+0x32/0xd0 [ 493.175559][T12573] drm_ioctl+0x5fe/0xc00 [ 493.179816][T12573] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 493.185986][T12573] ? __pfx_drm_ioctl+0x10/0x10 [ 493.190764][T12573] ? trace_lock_acquire+0x14a/0x1d0 [ 493.195983][T12573] ? selinux_file_ioctl+0x180/0x270 [ 493.201192][T12573] ? selinux_file_ioctl+0xb4/0x270 [ 493.206290][T12573] ? __pfx_drm_ioctl+0x10/0x10 [ 493.211082][T12573] __x64_sys_ioctl+0x18f/0x220 [ 493.215863][T12573] do_syscall_64+0xcd/0x250 [ 493.220387][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.226290][T12573] RIP: 0033:0x7fb9ec97e719 [ 493.230685][T12573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.250288][T12573] RSP: 002b:00007fb9eadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.258691][T12573] RAX: ffffffffffffffda RBX: 00007fb9ecb35f80 RCX: 00007fb9ec97e719 [ 493.266636][T12573] RDX: 0000000020000000 RSI: 00000000c01064bd RDI: 0000000000000003 [ 493.274582][T12573] RBP: 00007fb9eadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.282528][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.290478][T12573] R13: 0000000000000000 R14: 00007fb9ecb35f80 R15: 00007ffe23a8fa08 [ 493.298434][T12573] [ 493.339575][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.359486][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.382724][ T6200] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 493.394540][ T6200] bond0 (unregistering): Released all slaves [ 493.405914][ T6200] bond1 (unregistering): (slave team_slave_1): Releasing active interface [ 493.414820][ T6200] team_slave_1: left promiscuous mode [ 493.424155][ T6200] bond1 (unregistering): Released all slaves [ 493.759800][ T6200] IPVS: stopping master sync thread 12155 ... [ 493.936834][ T5838] Bluetooth: hci2: command tx timeout [ 494.079869][T12382] hsr_slave_0: entered promiscuous mode [ 494.097185][T12382] hsr_slave_1: entered promiscuous mode [ 494.103706][T12382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.128794][T12382] Cannot create hsr debugfs directory [ 494.951066][T12508] chnl_net:caif_netlink_parms(): no params data found [ 495.031996][T12592] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1204'. [ 495.115979][ T29] audit: type=1400 audit(1730945800.245:1028): avc: denied { append } for pid=12590 comm="syz.7.1204" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 496.017288][ T5838] Bluetooth: hci2: command tx timeout [ 496.247564][T12617] FAULT_INJECTION: forcing a failure. [ 496.247564][T12617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.283563][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.8.1208 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 496.294353][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 496.304392][T12617] Call Trace: [ 496.307652][T12617] [ 496.310562][T12617] dump_stack_lvl+0x16c/0x1f0 [ 496.315221][T12617] should_fail_ex+0x497/0x5b0 [ 496.319882][T12617] _copy_to_user+0x32/0xd0 [ 496.324306][T12617] simple_read_from_buffer+0xd0/0x160 [ 496.329667][T12617] proc_fail_nth_read+0x198/0x270 [ 496.334678][T12617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.340202][T12617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.345723][T12617] vfs_read+0x1df/0xbe0 [ 496.349860][T12617] ? __fget_files+0x23a/0x3f0 [ 496.354528][T12617] ? fdget_pos+0x24c/0x360 [ 496.358918][T12617] ? __pfx_lock_release+0x10/0x10 [ 496.363928][T12617] ? trace_lock_acquire+0x14a/0x1d0 [ 496.369132][T12617] ? __pfx_vfs_read+0x10/0x10 [ 496.373789][T12617] ? __pfx___mutex_lock+0x10/0x10 [ 496.378805][T12617] ? __fget_files+0x244/0x3f0 [ 496.383470][T12617] ksys_read+0x12f/0x260 [ 496.387693][T12617] ? __pfx_ksys_read+0x10/0x10 [ 496.392439][T12617] do_syscall_64+0xcd/0x250 [ 496.396920][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.402796][T12617] RIP: 0033:0x7f3cdbf7d15c [ 496.407203][T12617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 496.426805][T12617] RSP: 002b:00007f3cdcd28030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.435203][T12617] RAX: ffffffffffffffda RBX: 00007f3cdc135f80 RCX: 00007f3cdbf7d15c [ 496.443154][T12617] RDX: 000000000000000f RSI: 00007f3cdcd280a0 RDI: 0000000000000006 [ 496.451120][T12617] RBP: 00007f3cdcd28090 R08: 0000000000000000 R09: 0000000000000000 [ 496.459076][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.467041][T12617] R13: 0000000000000000 R14: 00007f3cdc135f80 R15: 00007ffc33c8e988 [ 496.474997][T12617] [ 496.478051][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.582991][T12613] tmpfs: Bad value for 'mpol' [ 496.654894][ T6200] hsr_slave_0: left promiscuous mode [ 496.705779][ T6200] hsr_slave_1: left promiscuous mode [ 496.944527][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.967291][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.063662][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.111379][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.121964][ T29] audit: type=1400 audit(1730945802.245:1029): avc: denied { connect } for pid=12629 comm="syz.7.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 497.202757][T12630] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 497.209303][T12630] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 497.228492][ T6200] veth1_macvtap: left promiscuous mode [ 497.233982][ T6200] veth0_macvtap: left promiscuous mode [ 497.248615][T12630] vhci_hcd vhci_hcd.0: Device attached [ 497.254497][ T6200] veth1_vlan: left promiscuous mode [ 497.259885][ T6200] veth0_vlan: left promiscuous mode [ 497.303346][T12627] tmpfs: Bad value for 'mpol' [ 497.567613][ T7837] usb 48-1: SetAddress Request (2) to port 0 [ 497.627868][ T7837] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 497.952163][T12631] vhci_hcd: connection reset by peer [ 498.001770][ T6198] vhci_hcd: stop threads [ 498.030445][ T6198] vhci_hcd: release socket [ 498.035148][ T6198] vhci_hcd: disconnect device [ 498.107812][ T5838] Bluetooth: hci2: command tx timeout [ 500.702127][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 501.098171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.816463][T12508] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.824059][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.831555][T12508] bridge_slave_0: entered allmulticast mode [ 501.840370][T12508] bridge_slave_0: entered promiscuous mode [ 501.878806][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.898530][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.905763][T12508] bridge_slave_1: entered allmulticast mode [ 501.923222][T12508] bridge_slave_1: entered promiscuous mode [ 501.937921][ T25] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 502.145640][ T29] audit: type=1400 audit(1730945807.264:1030): avc: denied { mount } for pid=12677 comm="syz.6.1220" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 502.168176][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.270079][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.294279][ T25] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 502.307102][ T29] audit: type=1400 audit(1730945807.264:1031): avc: denied { mounton } for pid=12677 comm="syz.6.1220" path="/147/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 502.867053][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 502.869030][ T29] audit: type=1400 audit(1730945807.274:1032): avc: denied { read } for pid=12677 comm="syz.6.1220" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 502.902913][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 502.916107][ T7837] usb 48-1: device descriptor read/8, error -110 [ 502.923082][ T29] audit: type=1400 audit(1730945807.274:1033): avc: denied { open } for pid=12677 comm="syz.6.1220" path="/147/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 502.951608][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 502.961984][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.003043][ T25] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 503.014877][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.023054][ T25] usb 9-1: Product: syz [ 503.027315][ T25] usb 9-1: Manufacturer: syz [ 503.034761][ T25] usb 9-1: SerialNumber: syz [ 503.051943][ T25] usb 9-1: config 0 descriptor?? [ 503.065586][T12508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.087075][T12670] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 503.103627][T12508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.115597][ T25] ati_remote 9-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 503.318348][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.327141][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.345239][T12508] team0: Port device team_slave_0 added [ 503.351248][ T7837] usb usb48-port1: attempt power cycle [ 503.407448][T12508] team0: Port device team_slave_1 added [ 503.512657][T12508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.537029][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.569800][T12508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.589634][T12508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.597013][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.624745][T12508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.778449][T12508] hsr_slave_0: entered promiscuous mode [ 503.788564][T12508] hsr_slave_1: entered promiscuous mode [ 503.796323][T12508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.804327][T12508] Cannot create hsr debugfs directory [ 503.815066][T12382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 503.828137][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 503.838499][T12382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 503.858551][T12382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 503.887772][T12382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 503.945304][ T7837] usb usb48-port1: unable to enumerate USB device [ 504.030259][ T25] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 504.056075][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.096452][ T25] usb 8-1: config 0 descriptor?? [ 504.125618][ T29] audit: type=1400 audit(1730945809.254:1034): avc: denied { unmount } for pid=9263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 504.158590][ T25] cp210x 8-1:0.0: cp210x converter detected [ 504.270258][T12382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.303530][T12508] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 504.338968][T12508] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 504.361196][T12382] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.365519][ T25] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 504.377811][T12508] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 504.392048][ T25] cp210x 8-1:0.0: querying part number failed [ 504.411899][ T25] usb 8-1: cp210x converter now attached to ttyUSB0 [ 504.413085][T12508] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 504.457090][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.464226][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.729054][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.736161][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.746621][ T9] usb 9-1: USB disconnect, device number 4 [ 504.896922][T12382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.909094][T12382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.966266][T12508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.043367][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.071099][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.078230][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.108424][ T5874] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 505.275873][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.283514][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.930949][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 505.942872][T12508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.088726][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.863622][T12382] veth0_vlan: entered promiscuous mode [ 506.921117][T12382] veth1_vlan: entered promiscuous mode [ 507.019709][T12382] veth0_macvtap: entered promiscuous mode [ 507.585365][T12382] veth1_macvtap: entered promiscuous mode [ 507.609101][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.625952][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.648360][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.682815][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.708665][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.728711][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.748463][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.768518][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.792428][ T5874] usb 7-1: unable to read config index 0 descriptor/all [ 507.793232][T12382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.801632][ T5874] usb 7-1: can't read configurations, error -71 [ 507.863039][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.878296][ T29] audit: type=1400 audit(1730945813.004:1035): avc: denied { read } for pid=12753 comm="syz.8.1230" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 507.911178][ T5880] usb 8-1: USB disconnect, device number 16 [ 507.920672][ T29] audit: type=1400 audit(1730945813.004:1036): avc: denied { open } for pid=12753 comm="syz.8.1230" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 507.945442][ T29] audit: type=1400 audit(1730945813.004:1037): avc: denied { ioctl } for pid=12753 comm="syz.8.1230" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 508.054835][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.065536][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.184537][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.775085][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.800683][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 508.817062][ T5880] cp210x 8-1:0.0: device disconnected [ 508.938498][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.980603][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.073825][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.109464][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.296369][T12382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.411033][T12382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.439716][T12382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.472745][T12382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.620237][T12382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.060554][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.078992][T12779] tmpfs: Bad value for 'mpol' [ 511.099691][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.127588][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.162235][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.194060][T12508] veth0_vlan: entered promiscuous mode [ 511.215693][T12508] veth1_vlan: entered promiscuous mode [ 512.113127][T12508] veth0_macvtap: entered promiscuous mode [ 512.142353][T12508] veth1_macvtap: entered promiscuous mode [ 512.458256][ T29] audit: type=1400 audit(1730945817.583:1038): avc: denied { write } for pid=12819 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 513.069792][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.097084][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.107551][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.118416][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.128841][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.144152][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.162820][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.173713][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.247452][ T29] audit: type=1400 audit(1730945818.363:1039): avc: denied { getopt } for pid=12830 comm="syz.7.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 513.267695][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.280360][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.292464][T12508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.044778][T11304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.105922][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.117666][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.128182][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.138729][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.148612][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.165516][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.175758][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.195198][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.206188][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.216967][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.227951][T12508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.286049][T11304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.350778][T12508] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.361409][T12508] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.379349][T12508] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.388204][T12508] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.431836][T11304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.524174][T11304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.547076][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.565214][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.609046][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.632122][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.685892][T11304] bridge_slave_1: left allmulticast mode [ 514.694036][T11304] bridge_slave_1: left promiscuous mode [ 514.700184][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.708776][T11304] bridge_slave_0: left allmulticast mode [ 514.715703][T11304] bridge_slave_0: left promiscuous mode [ 514.723095][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.089147][T11304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.103725][T11304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.113749][T11304] bond0 (unregistering): Released all slaves [ 515.403121][T11304] hsr_slave_0: left promiscuous mode [ 515.409270][T11304] hsr_slave_1: left promiscuous mode [ 515.416182][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.424833][T11304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.433041][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.440706][T11304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.457039][T11304] veth1_macvtap: left promiscuous mode [ 515.463202][T11304] veth0_macvtap: left promiscuous mode [ 515.468724][T11304] veth1_vlan: left promiscuous mode [ 515.474052][T11304] veth0_vlan: left promiscuous mode [ 516.639648][ T5922] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 516.648549][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 516.982487][ T9] usb 10-1: config 0 has an invalid interface number: 95 but max is 0 [ 516.992391][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.015025][ T9] usb 10-1: config 0 has no interface number 0 [ 517.021648][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.032321][ T9] usb 10-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 4 [ 517.043405][ T5922] usb 8-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 517.053134][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.084519][ T5922] usb 8-1: config 0 descriptor?? [ 517.131467][ T9] usb 10-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 517.156491][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.171524][T12514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 517.196361][ T9] usb 10-1: Product: syz [ 517.201126][ T9] usb 10-1: Manufacturer: syz [ 517.205914][ T9] usb 10-1: SerialNumber: syz [ 517.208807][T12514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 517.218315][ T9] usb 10-1: config 0 descriptor?? [ 517.225305][T12514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 517.228426][T12876] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 517.236732][T12514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 517.425307][T12514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 517.435164][T12514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 517.653128][ T5922] smartjoyplus 0003:6666:8801.0016: unknown main item tag 0x0 [ 517.661460][ T5922] smartjoyplus 0003:6666:8801.0016: unknown main item tag 0x0 [ 517.673579][ T5922] smartjoyplus 0003:6666:8801.0016: hidraw0: USB HID v0.00 Device [HID 6666:8801] on usb-dummy_hcd.7-1/input0 [ 517.686205][ T5922] smartjoyplus 0003:6666:8801.0016: Force feedback for SmartJoy PLUS PS2/USB adapter [ 517.739986][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.748685][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.899035][T12904] fuse: Unknown parameter 'group_i00000000000000000000' [ 518.978512][T12898] tmpfs: Bad value for 'mpol' [ 519.004518][T11304] team0 (unregistering): Port device team_slave_1 removed [ 519.095257][T12908] 9pnet_fd: Insufficient options for proto=fd [ 519.172338][ T29] audit: type=1400 audit(1730945824.222:1040): avc: denied { read write } for pid=12905 comm="syz.6.1256" dev="sockfs" ino=45006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 519.710860][T12514] Bluetooth: hci4: command tx timeout [ 519.743231][T11304] team0 (unregistering): Port device team_slave_0 removed [ 519.959268][ T29] audit: type=1400 audit(1730945825.082:1041): avc: denied { create } for pid=12915 comm="syz.6.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 520.038254][ T29] audit: type=1400 audit(1730945825.172:1042): avc: denied { bind } for pid=12915 comm="syz.6.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 520.479878][T12876] netlink: 'syz.9.1187': attribute type 4 has an invalid length. [ 520.566591][ T5922] usb 8-1: USB disconnect, device number 17 [ 520.576933][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.592890][ T9] usb 10-1: MIDIStreaming interface descriptor not found [ 520.614890][ T9] usb 10-1: USB disconnect, device number 2 [ 520.891960][ T7412] udevd[7412]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.500167][ T5922] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 521.671426][ T5922] usb 8-1: Using ep0 maxpacket: 8 [ 521.736022][ T5922] usb 8-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 521.763457][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.785133][ T5922] usb 8-1: Product: syz [ 521.789332][ T5922] usb 8-1: Manufacturer: syz [ 521.795969][ T5922] usb 8-1: SerialNumber: syz [ 521.801741][T12514] Bluetooth: hci4: command tx timeout [ 521.825744][T12891] chnl_net:caif_netlink_parms(): no params data found [ 521.839452][ T5922] usb 8-1: config 0 descriptor?? [ 521.851906][ T5922] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 521.900388][ T5874] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 522.070416][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 522.142306][ T5874] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 522.296873][ T29] audit: type=1400 audit(1730945827.422:1043): avc: denied { setopt } for pid=12942 comm="syz.8.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 522.302552][ T5922] gspca_zc3xx: reg_r err -71 [ 522.330973][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 522.354063][ T5874] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.376803][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.377560][ T5922] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 522.385125][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.401164][T12891] bridge_slave_0: entered allmulticast mode [ 522.408023][T12891] bridge_slave_0: entered promiscuous mode [ 522.416998][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.425972][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.448553][ T5922] usb 8-1: USB disconnect, device number 18 [ 522.450283][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.460301][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.469797][T12891] bridge_slave_1: entered allmulticast mode [ 522.490099][T12891] bridge_slave_1: entered promiscuous mode [ 522.510850][T12514] Bluetooth: hci5: unknown advertising packet type: 0x69 [ 522.510930][T12514] Bluetooth: hci5: Dropping invalid advertising data [ 522.525248][T12514] Bluetooth: hci5: Malformed LE Event: 0x02 [ 522.536434][ T5874] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 522.550272][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 522.566329][ T5874] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.613021][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.628319][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.641949][ T5874] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 522.655512][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 522.680142][ T5874] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.697724][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.732575][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.752955][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.775112][ T5874] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.792175][ T5874] usb 7-1: string descriptor 0 read error: -22 [ 522.810046][ T5874] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 522.829566][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.858220][T12891] team0: Port device team_slave_0 added [ 522.866270][ T5874] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 522.917777][T12891] team0: Port device team_slave_1 added [ 523.017534][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.040058][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.234133][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.253371][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.292254][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.594362][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.605964][ T5922] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 523.750504][ T5922] usb 9-1: device descriptor read/64, error -71 [ 523.812341][T12891] hsr_slave_0: entered promiscuous mode [ 523.844424][T12891] hsr_slave_1: entered promiscuous mode [ 523.860168][T12891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.869536][T12514] Bluetooth: hci4: command tx timeout [ 523.875792][T12891] Cannot create hsr debugfs directory [ 523.916504][T13000] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1271'. [ 523.936129][T13000] netlink: 'syz.9.1271': attribute type 7 has an invalid length. [ 523.965201][T13000] netlink: 'syz.9.1271': attribute type 8 has an invalid length. [ 523.985111][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1271'. [ 524.013106][ T5922] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 524.030321][T13000] gretap0: entered promiscuous mode [ 524.052860][T13000] batadv_slave_1: entered promiscuous mode [ 524.070036][T13000] gretap0: left promiscuous mode [ 524.090181][T13000] batadv_slave_1: left promiscuous mode [ 524.150701][ T5922] usb 9-1: device descriptor read/64, error -71 [ 524.291298][ T5922] usb usb9-port1: attempt power cycle [ 524.651285][ T5922] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 524.692679][ T5922] usb 9-1: device descriptor read/8, error -71 [ 524.765749][ T5880] usb 7-1: USB disconnect, device number 20 [ 525.160646][ T5922] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 525.266222][ T5922] usb 9-1: device descriptor read/8, error -71 [ 525.271521][T12891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.826323][T12891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 525.856126][T12891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 525.890189][T12891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 525.911167][ T5922] usb usb9-port1: unable to enumerate USB device [ 525.941793][T12514] Bluetooth: hci4: command tx timeout [ 525.994095][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.008941][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.025830][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.033068][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.067714][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.074848][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.100777][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 526.218784][T13061] netlink: 288 bytes leftover after parsing attributes in process `syz.8.1280'. [ 526.261132][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 526.272555][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.292812][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.305134][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.320119][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.337692][ T9] usb 8-1: Product: syz [ 526.347618][ T9] usb 8-1: Manufacturer: syz [ 526.356919][ T9] usb 8-1: SerialNumber: syz [ 526.456996][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.550413][T12891] veth0_vlan: entered promiscuous mode [ 526.585381][T12891] veth1_vlan: entered promiscuous mode [ 526.737021][T12891] veth0_macvtap: entered promiscuous mode [ 526.765058][T12891] veth1_macvtap: entered promiscuous mode [ 526.898760][T13091] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1277'. [ 527.126436][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.264366][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.280882][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.320838][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.331101][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.353610][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.367469][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.382532][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.393333][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.408039][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.420014][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.962741][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.988115][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.004162][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.020158][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.036118][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.047352][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.064173][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.078190][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.090772][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.102102][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.113968][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.164315][T12891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.179503][T12891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.206910][T12891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.229839][T12891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.926487][ T9] usb 8-1: 0:2 : does not exist [ 529.018698][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 529.032738][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.040799][T11304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.049594][T11304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.099985][ T9] usb 8-1: USB disconnect, device number 19 [ 529.136315][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.054395][T11591] udevd[11591]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.405622][ T9] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 530.442813][ T5873] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 531.289532][ T9] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 531.297901][ T9] usb 7-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 531.314665][ T9] usb 7-1: config 0 has no interface number 0 [ 531.322046][ T5873] usb 8-1: Using ep0 maxpacket: 8 [ 531.327741][ T9] usb 7-1: too many endpoints for config 0 interface 29 altsetting 243: 91, using maximum allowed: 30 [ 531.340240][ T9] usb 7-1: config 0 interface 29 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 91 [ 531.340347][ T5873] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 531.505056][ T9] usb 7-1: config 0 interface 29 has no altsetting 0 [ 531.538460][ T5873] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 531.549264][ T5873] usb 8-1: config 6 has no interface number 0 [ 531.556668][ T5873] usb 8-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.570267][ T9] usb 7-1: New USB device found, idVendor=ff72, idProduct=0003, bcdDevice= 0.00 [ 532.093842][ T9] usb 7-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 532.102712][ T9] usb 7-1: Manufacturer: syz [ 532.108938][ T9] usb 7-1: config 0 descriptor?? [ 532.118462][ T5873] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 532.128039][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.143499][ T5873] usb 8-1: Product: syz [ 532.151891][ T5873] usb 8-1: Manufacturer: syz [ 532.161408][ T5873] usb 8-1: SerialNumber: syz [ 532.202648][ T5873] hso 8-1:6.2: Failed to find INT IN ep [ 532.864952][ T5880] usb 8-1: USB disconnect, device number 20 [ 533.061233][ T6200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.224051][ T6200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.312547][ T6200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.371283][ T6200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.486225][ T6200] bridge_slave_1: left allmulticast mode [ 533.493485][ T6200] bridge_slave_1: left promiscuous mode [ 533.499959][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.509396][ T6200] bridge_slave_0: left allmulticast mode [ 533.515877][ T6200] bridge_slave_0: left promiscuous mode [ 533.521613][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.849103][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.860337][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.871657][ T6200] bond0 (unregistering): Released all slaves [ 534.019616][ T9] usb 7-1: USB disconnect, device number 21 [ 534.210193][ T6200] hsr_slave_0: left promiscuous mode [ 534.219345][ T6200] hsr_slave_1: left promiscuous mode [ 534.225819][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.233782][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.241279][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.248989][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.262656][ T6200] veth1_macvtap: left promiscuous mode [ 534.268126][ T6200] veth0_macvtap: left promiscuous mode [ 534.274013][ T6200] veth1_vlan: left promiscuous mode [ 534.279242][ T6200] veth0_vlan: left promiscuous mode [ 534.637227][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 534.687036][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 534.893163][T13229] 9pnet_fd: Insufficient options for proto=fd [ 534.899865][T13228] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1299'. [ 536.053150][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.063072][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.071467][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.088756][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.099085][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 536.117501][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.312192][ T5838] Bluetooth: hci4: command tx timeout [ 538.524099][T13242] chnl_net:caif_netlink_parms(): no params data found [ 539.387654][ T29] audit: type=1400 audit(1730945844.520:1044): avc: denied { ioctl } for pid=13306 comm="syz.8.1313" path="socket:[47641]" dev="sockfs" ino=47641 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 539.516018][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.534374][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.589132][T13242] bridge_slave_0: entered allmulticast mode [ 539.609261][T13242] bridge_slave_0: entered promiscuous mode [ 539.662882][T13312] netlink: 'syz.8.1313': attribute type 3 has an invalid length. [ 539.678438][T13312] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1313'. [ 539.806657][ T5880] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 539.877082][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.996167][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.047066][T13242] bridge_slave_1: entered allmulticast mode [ 540.072383][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 540.091602][ T5880] usb 8-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 540.186274][T13242] bridge_slave_1: entered promiscuous mode [ 540.274706][ T5880] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.288304][ T5880] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 540.301678][ T5880] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 540.323678][ T5880] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.353610][ T5838] Bluetooth: hci4: command tx timeout [ 540.369487][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.378198][ T5880] usb 8-1: Product: syz [ 540.382889][ T5880] usb 8-1: Manufacturer: syz [ 540.388389][ T5880] usb 8-1: SerialNumber: syz [ 540.398966][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.410295][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.439632][T13242] team0: Port device team_slave_0 added [ 540.463356][T13242] team0: Port device team_slave_1 added [ 540.492289][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.523572][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.597576][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.612762][ T29] audit: type=1400 audit(1730945845.750:1045): avc: denied { watch watch_reads } for pid=13336 comm="syz.9.1318" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 540.620255][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.678684][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.709076][T13341] fuse: Bad value for 'fd' [ 540.728727][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.733034][T10620] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 540.776633][T13339] IPVS: stopping master sync thread 13344 ... [ 540.780472][ T5880] usb 8-1: 0:2 : does not exist [ 540.787545][T13344] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 540.801189][ T5880] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 540.840464][ T5880] usb 8-1: USB disconnect, device number 21 [ 540.904157][T13242] hsr_slave_0: entered promiscuous mode [ 540.979675][T13242] hsr_slave_1: entered promiscuous mode [ 540.992793][T13242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.039084][T13242] Cannot create hsr debugfs directory [ 541.078186][T10620] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.090211][T10620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.101282][T10620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.111349][T10620] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.124430][T10620] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.133752][T10620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.153647][T10620] usb 9-1: config 0 descriptor?? [ 541.225489][T11591] udevd[11591]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.743600][T10620] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 541.856546][T10620] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 542.438289][ T5838] Bluetooth: hci4: command tx timeout [ 542.579700][ T29] audit: type=1326 audit(1730945847.709:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.9.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cfef7e719 code=0x0 [ 543.120717][T13242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.150154][T13242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.347610][ T25] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 543.362900][ T5880] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 543.449046][T13242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.517429][T13242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.652858][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 543.674211][ T25] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 543.698774][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.701029][T13242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.729864][ T25] usb 7-1: Product: syz [ 543.742185][ T25] usb 7-1: Manufacturer: syz [ 543.776721][ T25] usb 7-1: SerialNumber: syz [ 543.786476][T13242] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.815812][ T25] usb 7-1: config 0 descriptor?? [ 543.824897][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.828923][ T25] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 543.832017][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.895260][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.902400][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.027597][ T25] gspca_sn9c2028: read1 error -32 [ 544.083968][ T25] gspca_sn9c2028: read1 error -32 [ 544.094397][ T25] gspca_sn9c2028: read1 error 0 [ 544.131704][ T25] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -5 [ 544.466627][ T5873] usb 7-1: USB disconnect, device number 22 [ 544.503579][ T5838] Bluetooth: hci4: command tx timeout [ 544.704223][ T9] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 544.924631][ T9] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 544.943105][ T5880] usb 9-1: device descriptor read/64, error -71 [ 545.023873][T13445] fuse: Bad value for 'fd' [ 545.050234][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.148816][T13242] veth0_vlan: entered promiscuous mode [ 545.228065][T13242] veth1_vlan: entered promiscuous mode [ 545.283123][ T5880] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 545.292216][ T5880] usb 9-1: device reset changed ep0 maxpacket size! [ 545.323208][ T966] usb 9-1: USB disconnect, device number 9 [ 545.695779][ T966] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 545.774183][T13242] veth0_macvtap: entered promiscuous mode [ 545.796556][T13458] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1340'. [ 545.825994][T13242] veth1_macvtap: entered promiscuous mode [ 545.843848][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.854677][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.865608][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.876090][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.886021][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.896641][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.907491][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.943059][ T966] usb 9-1: Using ep0 maxpacket: 8 [ 545.975444][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.006796][ T29] audit: type=1400 audit(1730945851.139:1047): avc: denied { module_load } for pid=13436 comm="syz.6.1337" path="/sys/power/wakeup_count" dev="sysfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 546.031124][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.049700][ T966] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 546.065009][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.324174][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.347378][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.393158][ T966] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 546.459785][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.489860][ T966] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 546.505013][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.518504][T13468] FAULT_INJECTION: forcing a failure. [ 546.518504][T13468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.538110][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.548816][ T966] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 546.558465][T13468] CPU: 1 UID: 0 PID: 13468 Comm: syz.6.1342 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 546.569245][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 546.579311][T13468] Call Trace: [ 546.582595][T13468] [ 546.585533][T13468] dump_stack_lvl+0x16c/0x1f0 [ 546.590220][T13468] should_fail_ex+0x497/0x5b0 [ 546.594915][T13468] _copy_to_user+0x32/0xd0 [ 546.599348][T13468] simple_read_from_buffer+0xd0/0x160 [ 546.604734][T13468] proc_fail_nth_read+0x198/0x270 [ 546.609778][T13468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.615346][T13468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.620896][T13468] vfs_read+0x1df/0xbe0 [ 546.625065][T13468] ? __fget_files+0x23a/0x3f0 [ 546.629755][T13468] ? fdget_pos+0x24c/0x360 [ 546.634174][T13468] ? __pfx_lock_release+0x10/0x10 [ 546.639202][T13468] ? trace_lock_acquire+0x14a/0x1d0 [ 546.644414][T13468] ? __pfx_vfs_read+0x10/0x10 [ 546.649097][T13468] ? __pfx___mutex_lock+0x10/0x10 [ 546.654116][T13468] ? __fget_files+0x244/0x3f0 [ 546.658797][T13468] ksys_read+0x12f/0x260 [ 546.663019][T13468] ? __pfx_ksys_read+0x10/0x10 [ 546.667769][T13468] do_syscall_64+0xcd/0x250 [ 546.672251][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.678123][T13468] RIP: 0033:0x7f370777d15c [ 546.682512][T13468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 546.683199][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.702086][T13468] RSP: 002b:00007f37084ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.702109][T13468] RAX: ffffffffffffffda RBX: 00007f3707935f80 RCX: 00007f370777d15c [ 546.702121][T13468] RDX: 000000000000000f RSI: 00007f37084ab0a0 RDI: 0000000000000004 [ 546.702132][T13468] RBP: 00007f37084ab090 R08: 0000000000000000 R09: 0000000000000000 [ 546.702144][T13468] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 546.702155][T13468] R13: 0000000000000000 R14: 00007f3707935f80 R15: 00007ffe3ce62d18 [ 546.702180][T13468] [ 546.702948][ T966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.792890][ T966] usb 9-1: Product: syz [ 546.798606][ T966] usb 9-1: Manufacturer: syz [ 546.803295][ T966] usb 9-1: SerialNumber: syz [ 546.815425][ T966] usb 9-1: config 0 descriptor?? [ 546.833536][ T966] radio-si470x 9-1:0.0: could not find interrupt in endpoint [ 546.843307][ T966] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 546.871437][ T966] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 546.885256][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.931785][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.979740][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.008315][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.022479][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.044400][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.045066][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.062358][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.083336][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.122778][ T29] audit: type=1400 audit(1730945852.249:1048): avc: denied { read write } for pid=13432 comm="syz.8.1336" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 547.131988][T13242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.186901][ T29] audit: type=1400 audit(1730945852.279:1049): avc: denied { open } for pid=13432 comm="syz.8.1336" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 547.188607][T13242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.219537][ T966] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 547.225125][ T9] usb 9-1: USB disconnect, device number 10 [ 547.228551][T13242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.251134][T13242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.376534][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.414329][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.481686][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.490303][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.525180][ T966] usb 8-1: Using ep0 maxpacket: 8 [ 547.651847][ T29] audit: type=1400 audit(1730945852.709:1050): avc: denied { mount } for pid=13496 comm="syz.8.1345" name="/" dev="rpc_pipefs" ino=47977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 548.043540][ T966] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 548.073133][ T966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.101558][ T966] usb 8-1: config 0 has no interfaces? [ 548.244025][ T29] audit: type=1400 audit(1730945853.339:1051): avc: denied { unmount } for pid=11779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 548.318518][ T966] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 548.360428][ T966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.383538][ T966] usb 8-1: Product: syz [ 548.387727][ T966] usb 8-1: Manufacturer: syz [ 548.419944][ T966] usb 8-1: SerialNumber: syz [ 548.459729][ T966] usb 8-1: config 0 descriptor?? [ 548.612052][T13530] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1351'. [ 548.741347][ T29] audit: type=1400 audit(1730945853.869:1052): avc: denied { ioctl } for pid=13533 comm="syz.6.1352" path="socket:[48752]" dev="sockfs" ino=48752 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 548.928402][ T6200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.106745][ T6200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.126885][ T966] usb 8-1: USB disconnect, device number 22 [ 549.178037][ T6200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.319513][ T6200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.462014][ T6200] bridge_slave_1: left allmulticast mode [ 549.470403][ T6200] bridge_slave_1: left promiscuous mode [ 549.482752][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.493174][ T6200] bridge_slave_0: left allmulticast mode [ 549.503063][ T6200] bridge_slave_0: left promiscuous mode [ 549.510646][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.983163][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.994667][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.007450][ T6200] bond0 (unregistering): Released all slaves [ 550.302653][ T6200] hsr_slave_0: left promiscuous mode [ 550.309636][ T6200] hsr_slave_1: left promiscuous mode [ 550.317003][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.324536][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.332745][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.340657][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.362125][ T6200] veth1_macvtap: left promiscuous mode [ 550.367772][ T6200] veth0_macvtap: left promiscuous mode [ 550.373269][ T6200] veth1_vlan: left promiscuous mode [ 550.378601][ T6200] veth0_vlan: left promiscuous mode [ 550.748973][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 550.791190][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 551.638599][T12514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.649510][T12514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.659752][T12514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.745622][T12514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.753874][T12514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 551.763957][T12514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.063793][ T966] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 552.209665][ T966] usb 7-1: device descriptor read/64, error -71 [ 552.504576][T13619] netlink: 'syz.9.1360': attribute type 1 has an invalid length. [ 552.573868][ T966] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 552.766130][ T966] usb 7-1: device descriptor read/64, error -71 [ 553.068637][T13631] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1362'. [ 553.070570][ T966] usb usb7-port1: attempt power cycle [ 553.868301][T13609] chnl_net:caif_netlink_parms(): no params data found [ 553.907414][ T5838] Bluetooth: hci4: command tx timeout [ 553.914830][ T966] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 553.995183][ T966] usb 7-1: device descriptor read/8, error -71 [ 554.294096][ T966] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 554.325601][ T966] usb 7-1: device descriptor read/8, error -71 [ 554.398967][T13609] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.416576][T13609] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.466572][ T966] usb usb7-port1: unable to enumerate USB device [ 554.468339][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 554.508031][T13609] bridge_slave_0: entered allmulticast mode [ 554.606703][T13609] bridge_slave_0: entered promiscuous mode [ 554.789084][T13609] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.819261][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 554.884174][ T9] usb 8-1: config 0 has an invalid interface number: 199 but max is 0 [ 554.921625][ T9] usb 8-1: config 0 has no interface number 0 [ 554.937990][T13609] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.958183][ T9] usb 8-1: config 0 interface 199 has no altsetting 0 [ 554.978684][T13609] bridge_slave_1: entered allmulticast mode [ 555.013934][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=02d5, bcdDevice=f5.78 [ 555.023294][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.034309][T13609] bridge_slave_1: entered promiscuous mode [ 555.128758][ T9] usb 8-1: Product: syz [ 555.173264][ T9] usb 8-1: Manufacturer: syz [ 555.741867][ T9] usb 8-1: SerialNumber: syz [ 555.944462][ T5838] Bluetooth: hci4: command tx timeout [ 555.967353][T13609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.502048][ T9] usb 8-1: config 0 descriptor?? [ 556.557842][T13609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.658721][ T966] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 556.976228][ T966] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 557.010795][T13609] team0: Port device team_slave_0 added [ 557.021009][ T966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.058552][T13609] team0: Port device team_slave_1 added [ 557.070633][ T966] usb 7-1: config 0 descriptor?? [ 557.127884][T13609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.146424][T13609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.224668][T13609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.270813][T13609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.284558][ T7837] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 557.302116][T13609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.381136][T13609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.467605][T13609] hsr_slave_0: entered promiscuous mode [ 557.480716][T13609] hsr_slave_1: entered promiscuous mode [ 557.491333][T13609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.499814][T13609] Cannot create hsr debugfs directory [ 557.507206][ T966] ath6kl: Unsupported hardware version: 0x56a55dcb [ 557.515290][ T966] ath6kl: Failed to init ath6kl core: -22 [ 557.521879][ T966] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 557.694772][ T5874] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 557.836742][ T5874] usb 10-1: device descriptor read/64, error -71 [ 558.036114][ T5838] Bluetooth: hci4: command tx timeout [ 558.084602][ T5874] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 558.103745][ T9] dvb-usb: found a 'Microsoft Xbox One Digital TV Tuner' in cold state, will try to load a firmware [ 558.136407][T13609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 558.162333][T13609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 558.175216][T13609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 558.181663][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 558.193598][T13609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 558.208771][ T9] dib0700: firmware download failed at 7 with -22 [ 558.229624][ T9] usb 8-1: USB disconnect, device number 23 [ 558.244728][ T5874] usb 10-1: device descriptor read/64, error -71 [ 558.341344][T13609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.360563][T13609] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.396221][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.403418][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.420911][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.428085][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.466784][ T5874] usb usb10-port1: attempt power cycle [ 558.825586][ T5874] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 558.918434][ T5874] usb 10-1: device descriptor read/8, error -71 [ 559.211159][ T5880] usb 7-1: USB disconnect, device number 27 [ 559.274808][ T5874] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 559.317410][ T5874] usb 10-1: device descriptor read/8, error -71 [ 559.401187][T13609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.474959][ T5874] usb usb10-port1: unable to enumerate USB device [ 559.639648][T13609] veth0_vlan: entered promiscuous mode [ 559.653075][ T7837] usb 9-1: unable to get BOS descriptor or descriptor too short [ 559.658108][T13765] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 559.677049][ T7837] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 559.703398][T13609] veth1_vlan: entered promiscuous mode [ 559.768711][ T7837] usb 9-1: can't read configurations, error -71 [ 560.027460][T13609] veth0_macvtap: entered promiscuous mode [ 560.094191][T13771] kvm: user requested TSC rate below hardware speed [ 560.101295][T13609] veth1_macvtap: entered promiscuous mode [ 560.116115][ T5838] Bluetooth: hci4: command tx timeout [ 560.139416][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1386'. [ 560.159181][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.177730][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.205042][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.217501][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.230211][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.241423][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.252180][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.270770][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.283459][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.301145][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.312417][T13609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.389854][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.418680][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.428940][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.446001][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.471839][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.492727][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.513072][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.535257][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.551827][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.566049][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.588001][T13609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.623379][T13609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.643411][T13609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.653864][T13609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.685380][T13609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.705057][ T7837] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 561.015126][ T7837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.047888][ T7837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.090943][ T7837] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 561.135164][ T7837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.196429][ T7837] usb 9-1: config 0 descriptor?? [ 561.238989][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.258932][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.309881][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.331240][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.637573][T13789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.652522][T13789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.726053][ T7837] holtek 0003:1241:5015.0018: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.8-1/input0 [ 561.774060][ T7837] holtek 0003:1241:5015.0018: no inputs found [ 562.071233][ T7837] usb 9-1: USB disconnect, device number 12 [ 562.378344][ T6200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.426683][ T51] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 562.509370][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.595111][ T51] usb 10-1: Using ep0 maxpacket: 8 [ 562.609627][ T51] usb 10-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 562.633481][ T51] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.662147][ T51] usb 10-1: Product: syz [ 562.670884][ T51] usb 10-1: Manufacturer: syz [ 562.685848][ T51] usb 10-1: SerialNumber: syz [ 562.704671][ T51] usb 10-1: config 0 descriptor?? [ 562.724527][ T51] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 562.808011][ T6200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.966623][ T6200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.127409][ T51] gspca_zc3xx: reg_r err -71 [ 563.132141][ T51] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 563.153079][ T6200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.161230][ T51] usb 10-1: USB disconnect, device number 7 [ 563.328818][ T6200] bridge_slave_1: left allmulticast mode [ 563.334777][ T6200] bridge_slave_1: left promiscuous mode [ 563.340921][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.353080][ T6200] bridge_slave_0: left allmulticast mode [ 563.359953][ T6200] bridge_slave_0: left promiscuous mode [ 563.366082][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.722915][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.733591][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.743835][ T6200] bond0 (unregistering): Released all slaves [ 564.013663][ T6200] hsr_slave_0: left promiscuous mode [ 564.019424][ T6200] hsr_slave_1: left promiscuous mode [ 564.025067][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.032651][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.041026][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.049040][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.063456][ T6200] veth1_macvtap: left promiscuous mode [ 564.068997][ T6200] veth0_macvtap: left promiscuous mode [ 564.074759][ T6200] veth1_vlan: left promiscuous mode [ 564.080132][ T6200] veth0_vlan: left promiscuous mode [ 564.410485][ T29] audit: type=1400 audit(1730945869.537:1053): avc: denied { execute_no_trans } for pid=13895 comm="syz.6.1401" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 564.540629][ T29] audit: type=1400 audit(1730945869.637:1054): avc: denied { map } for pid=13891 comm="syz.7.1398" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 564.595154][ T29] audit: type=1400 audit(1730945869.637:1055): avc: denied { execute } for pid=13891 comm="syz.7.1398" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 564.654217][T12514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.665869][T12514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.676776][T12514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.684539][T12514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.692577][T12514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 564.699948][T12514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.991770][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 565.357210][T13912] trusted_key: syz.8.1400 sent an empty control message without MSG_MORE. [ 565.498938][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 566.090898][T13923] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1405'. [ 566.224879][ T29] audit: type=1326 audit(1730945871.347:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.331927][ T29] audit: type=1326 audit(1730945871.347:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.357451][ T29] audit: type=1326 audit(1730945871.397:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.390434][ T29] audit: type=1326 audit(1730945871.397:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.426790][ T29] audit: type=1326 audit(1730945871.397:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.450876][ T29] audit: type=1326 audit(1730945871.417:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.518593][ T29] audit: type=1326 audit(1730945871.417:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370777e719 code=0x7ffc0000 [ 566.666025][ T5874] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 566.729491][T13905] chnl_net:caif_netlink_parms(): no params data found [ 566.746405][ T5838] Bluetooth: hci4: command tx timeout [ 566.826208][ T5874] usb 9-1: Using ep0 maxpacket: 8 [ 566.840163][ T5874] usb 9-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 566.861754][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.879457][ T5874] usb 9-1: Product: syz [ 566.883767][ T5874] usb 9-1: Manufacturer: syz [ 566.885508][T13956] IPVS: stopping master sync thread 11104 ... [ 566.889830][ T5874] usb 9-1: SerialNumber: syz [ 566.904298][ T5874] usb 9-1: config 0 descriptor?? [ 566.917666][ T5874] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 566.924337][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.945979][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.953349][T13905] bridge_slave_0: entered allmulticast mode [ 566.961002][T13905] bridge_slave_0: entered promiscuous mode [ 566.970961][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.978483][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.986369][T13905] bridge_slave_1: entered allmulticast mode [ 566.993479][T13905] bridge_slave_1: entered promiscuous mode [ 566.995751][ T966] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 567.025772][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.038308][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.125366][T13905] team0: Port device team_slave_0 added [ 567.157256][T13905] team0: Port device team_slave_1 added [ 567.165709][ T966] usb 10-1: Using ep0 maxpacket: 8 [ 567.187437][ T966] usb 10-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 567.196950][ T966] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.205037][ T966] usb 10-1: Product: syz [ 567.209799][ T966] usb 10-1: Manufacturer: syz [ 567.214492][ T966] usb 10-1: SerialNumber: syz [ 567.227313][ T966] usb 10-1: config 0 descriptor?? [ 567.246515][ T966] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 567.269876][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.293013][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.355607][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.367646][ T5874] gspca_zc3xx: reg_r err -71 [ 567.373901][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.382145][ T5874] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 567.390870][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.423359][ T5874] usb 9-1: USB disconnect, device number 13 [ 567.433415][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.644760][T13905] hsr_slave_0: entered promiscuous mode [ 567.681437][T13905] hsr_slave_1: entered promiscuous mode [ 567.698550][T13905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.706710][T13905] Cannot create hsr debugfs directory [ 567.933249][ T966] gspca_zc3xx: reg_r err -71 [ 567.938503][ T966] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 567.950011][ T966] usb 10-1: USB disconnect, device number 8 [ 568.900704][ T5838] Bluetooth: hci4: command tx timeout [ 569.059864][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1417'. [ 569.690544][T14010] ipt_ECN: cannot use operation on non-tcp rule [ 569.714870][T14009] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1420'. [ 570.424772][T14020] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 570.553751][T13905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 570.579939][T13905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.641232][T13905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 570.727556][T14023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.192641][T12514] Bluetooth: hci4: command tx timeout [ 571.202261][T13905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 571.216368][ T966] IPVS: starting estimator thread 0... [ 571.306935][ T2150] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 571.319749][T14027] ubi: mtd0 is already attached to ubi0 [ 571.326108][T14024] IPVS: using max 26 ests per chain, 62400 per kthread [ 571.401542][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.433915][T14029] 9pnet_fd: Insufficient options for proto=fd [ 571.439762][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.542396][ T2150] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.702409][ T2150] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 571.767186][ T2150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.780286][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.787407][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.808604][ T2150] usb 8-1: config 0 descriptor?? [ 571.868346][ T2150] pwc: Askey VC010 type 2 USB webcam detected. [ 571.890832][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.897972][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.093815][ T2150] pwc: send_video_command error -71 [ 572.149838][ T2150] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 572.186233][ T966] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 572.189470][T13905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.210614][ T2150] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 572.226986][ T2150] usb 8-1: USB disconnect, device number 24 [ 572.356315][ T966] usb 7-1: Using ep0 maxpacket: 8 [ 572.391527][ T966] usb 7-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 572.447035][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.471697][ T966] usb 7-1: Product: syz [ 572.485481][T14036] tmpfs: Bad value for 'mpol' [ 572.498204][ T966] usb 7-1: Manufacturer: syz [ 572.503747][ T966] usb 7-1: SerialNumber: syz [ 572.518312][ T966] usb 7-1: config 0 descriptor?? [ 572.532907][ T966] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 572.647941][T13905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.666580][ T2150] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 572.722637][T13905] veth0_vlan: entered promiscuous mode [ 572.740846][T13905] veth1_vlan: entered promiscuous mode [ 572.829055][ T2150] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.861466][T13905] veth0_macvtap: entered promiscuous mode [ 573.266339][ T5838] Bluetooth: hci4: command tx timeout [ 573.454394][ T966] gspca_zc3xx: reg_r err -110 [ 573.466355][ T966] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 573.486409][ T2150] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 573.562351][ T966] usb 7-1: USB disconnect, device number 28 [ 573.569606][ T2150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.590712][T13905] veth1_macvtap: entered promiscuous mode [ 573.608943][ T2150] usb 8-1: config 0 descriptor?? [ 573.619000][ T2150] usb 8-1: can't set config #0, error -71 [ 573.626157][ T2150] usb 8-1: USB disconnect, device number 25 [ 573.645224][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.675968][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.716400][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.765955][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.815937][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.871498][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.896387][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.922394][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.961728][T11392] unregister_netdevice: waiting for vxcan0 to become free. Usage count = 2 [ 574.015932][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.323946][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.479558][ T5873] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 574.515329][T13905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.777747][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.789573][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.800095][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.810729][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.821697][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.832886][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.842987][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 574.850120][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.860954][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.870784][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.881947][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.894676][T13905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.906078][ T5873] usb 10-1: Using ep0 maxpacket: 8 [ 574.916841][T13905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.925647][T13905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.925937][ T5873] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.934797][T13905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.953699][T13905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.959280][ T5873] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.974617][ T5873] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.987425][ T5873] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.001327][ T5873] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.013054][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.088165][T11304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.101691][T11304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.124497][T11018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.134728][T11018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.260590][ T5873] usb 10-1: GET_CAPABILITIES returned 0 [ 575.278511][ T5873] usbtmc 10-1:16.0: can't read capabilities [ 575.487636][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.528494][ T966] usb 10-1: USB disconnect, device number 9 [ 576.329569][ T6145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.438056][ T6145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.525200][ T6145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.630152][ T6145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.791211][ T6145] bridge_slave_1: left allmulticast mode [ 576.806012][ T6145] bridge_slave_1: left promiscuous mode [ 576.812088][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.826488][ T6145] bridge_slave_0: left allmulticast mode [ 576.842997][ T6145] bridge_slave_0: left promiscuous mode [ 576.849259][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.237141][ T5874] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 577.494827][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.512882][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.525237][ T6145] bond0 (unregistering): Released all slaves [ 577.871983][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 577.883631][ T9] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 577.892374][ T9] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 577.903131][ T971] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 577.917290][ T6145] hsr_slave_0: left promiscuous mode [ 577.937307][ T6145] hsr_slave_1: left promiscuous mode [ 577.943172][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.956841][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.977444][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.985105][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.003845][ T6145] veth1_macvtap: left promiscuous mode [ 578.010050][ T6145] veth0_macvtap: left promiscuous mode [ 578.015598][ T6145] veth1_vlan: left promiscuous mode [ 578.021432][ T6145] veth0_vlan: left promiscuous mode [ 578.569647][ T6145] team0 (unregistering): Port device team_slave_1 removed [ 578.635927][ T6145] team0 (unregistering): Port device team_slave_0 removed [ 582.990465][ T6145] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 583.629751][ T6200] IPVS: ovf: UDP 127.0.0.1:0 - no destination available