last executing test programs: 11m1.431184411s ago: executing program 2 (id=1194): syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) close(0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 10m57.179509531s ago: executing program 2 (id=1201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040194) r2 = epoll_create1(0x80000) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x213008, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x80') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0) 10m56.679611136s ago: executing program 4 (id=1203): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079000c000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r6, 0x7, 0x20}, 0xc) r7 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x101080, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) 10m56.031189337s ago: executing program 0 (id=1205): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50]}, 0x34) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x1c0, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000082f5d008a5043530c21e000000010902ae01010000000009040000"], 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = open(&(0x7f0000000100)='./file0/file0\x00', 0x4000, 0x192) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000200)={0x1003, 0x6, 0x224, 0x6, 0x4}) mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x0, 0x4002011, r4, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0x7, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0xe7a9, 0x9, 0xfff7ffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) setns(0xc9, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) r7 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffffefff}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 10m55.307523139s ago: executing program 3 (id=1206): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x1000, 0x17) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x1bd, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0xa) r2 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r2, 0xf, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x448002, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="502bb01ef3c9f9a263d280bbc71522b0", 0x10) write$ppp(r6, &(0x7f0000000440)="9c41235d79899ba837cb26427dd77e2badd6f479f6346f1347dd1ef39223c7a62958316e30f84a9e07b40ac8ca8d7c26d8fed5f638a3564fa85eaae49008de02c3986078b14c802fe5c226444b1ad2ddf56b4d126f320bdf6d034f77470bb607736658634195486531b8f89d88046fcd29d25ae1aff98352b5bb0803e6d3bdb29dde2a80c5faf3b97b6d28c114c9b1fcf7acc6d15eebd6de56b882f4b23c3861b8925f3155bb7a5c44bd3d833f09642b83a50974c1628ba7223d7999538f3eebd6127203d6", 0xc5) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, 0x0) 10m55.285963466s ago: executing program 2 (id=1207): r0 = epoll_create1(0x80000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2001}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}], 0x1) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000580)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f00000003c0)=""/223, 0xdf}], 0x3, &(0x7f0000000500)=""/125, 0x7d}, 0x2}], 0x1, 0x20000001, &(0x7f0000000600)={r3, r4+60000000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x6, &(0x7f0000000ac0)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @void, @void}}}, 0x14}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x11}, @generic={0x4f, 0x0, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) 10m54.987182303s ago: executing program 3 (id=1208): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r7}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) 10m54.986041327s ago: executing program 4 (id=1209): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="4c000000120097f87059ae08060c040002ff0f020000000000000187ac1414aa", 0x20}], 0x1}, 0x4000000) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x20, 0x30, 0x2, 0xfffff025}]}, 0x10) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x6) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) sendmmsg(r3, &(0x7f0000001d40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xad2, @mcast2, 0x4}, 0x80, 0x0}}], 0x1, 0x24040000) 10m49.383728011s ago: executing program 2 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x82081) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a224d3c25f529369906a43278a889c57"], 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac1400f8000000000000000000000000fffeecdf000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf250200000008000100030000002d4548a705eeaa"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sysfs$1(0x1, &(0x7f0000000000)='$-\\\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sysfs$1(0x1, &(0x7f00000000c0)='(*@\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x109, 0x0, 0x338, {0x4000, 0xd000, {}, 0x1, 0x20000009a1}, {"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", "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"}}) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r5) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000000c705e85e106812911100004ff5b76d8c4fffd2f56784dbd81e5a9f4d4b30a4236dce13d3c01dcf0e0f9a9ede6900bb", @ANYRES16=r9, @ANYBLOB="010028bd7000fad3df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 10m49.092299693s ago: executing program 0 (id=1212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 10m48.867487445s ago: executing program 4 (id=1213): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f00000005c0)={0xcc, 0x0, 0x3}) 10m46.366973171s ago: executing program 4 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="8d522bd88978d6d9fa684ba45f4b69040000000800000032fee1eafd787035349f20c099125068891e3cb5c6dbf58767c20921593372580b46e81765cf77883ded322a64d10ca039fdf03b9de5adc76a7e04552d20e19d61d6cda48c529cc380d30e18e0c96289d7", 0x68}], 0x3}}], 0x1, 0x20040040) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x6, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r7 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) mkdirat$cgroup(r7, 0x0, 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {0x0}, 0x0, 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)=""/64, &(0x7f0000000080)=0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m46.340765253s ago: executing program 0 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\n', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = eventfd2(0xaa, 0x80000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x5, 0x1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5, 0x2, 0x0, r8}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e"], 0x36) 10m46.307695538s ago: executing program 3 (id=1216): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x2001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0xfffffffffffffe77) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000006800000226bd7000ffdbdf25000000000300000044000c80080003c5af17000008000300050000000800020004000000060001000500000008000300f4ffffff080003000000000043000b00060007000500000004000b00"], 0x6c}, 0x1, 0x0, 0x0, 0xc084}, 0x200088c2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, &(0x7f0000000340)) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_clone(0x18200000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write(r0, 0x0, 0x0) 10m45.143675522s ago: executing program 3 (id=1217): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r7}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) 10m43.94199867s ago: executing program 4 (id=1218): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) capset(&(0x7f0000000340)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x5f22, 0x0, 0x0, 0x3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0xfffffffffffffde7, 0x0}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="c4e2bddeedde8501001850660f20c06635040000000f22c00f20e06635000200000f22e00f20d86635200000000fc7a8b000e9e554643eda1e660f380802c89f8ec8", 0x42}], 0x1, 0x74, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="9974253d7000fbdbdf2515000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x238, r10, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0e8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @remote, 0x59}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e73210b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) fsetxattr$security_capability(r5, &(0x7f0000000000), &(0x7f0000000340)=@v3={0x3000000, [{0x4, 0xfffffbff}, {0xb7, 0xfffffffd}], r7}, 0x18, 0x1) bind(r8, &(0x7f0000000680)=@xdp={0x2c, 0xbbbcf81c06ec04a, r6, 0x3e}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x4, '\x00', r2, r0, 0x5, 0x2}, 0x50) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m42.991607527s ago: executing program 2 (id=1220): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r7}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) 10m42.82917214s ago: executing program 3 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff2, 0x9}, {0x2, 0xc}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12d6}]}}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) r8 = socket$igmp(0x2, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x404, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) sendto$packet(r9, &(0x7f00000002c0)="05031c00d1fd14f401004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m42.695002879s ago: executing program 4 (id=1222): syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) close(0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 10m39.897214417s ago: executing program 0 (id=1223): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x2, 0x10, 0x9, 0x5, 0x0, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) 10m39.510004897s ago: executing program 2 (id=1224): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff00000007058102400000070502024000000705830340"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4c008) socket$pppoe(0x18, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5c", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) mkdir(&(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m39.300277454s ago: executing program 3 (id=1226): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4002) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x1, 0x92, 0x7fff, 0xfffffe00, 0x2a5, 0x7fffffff, 0x8, 0x6, 0x8}}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00!\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/18, 0x12}, {&(0x7f0000000880)=""/14, 0xe}, {&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/58, 0x3a}], 0x8, &(0x7f0000000a80)=""/41, 0x29}, 0xa8}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/101, 0x65}], 0x4, &(0x7f0000001d40)=""/173, 0xad}, 0x400}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/25, 0x19}, {&(0x7f0000001e40)=""/73, 0x49}], 0x2, &(0x7f0000001f00)=""/244, 0xf4}, 0x3}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYBLOB="340000001800000004000000d51bc2c5d0b156baad321b6ddf6c8b1933fa8ae5eaeb6b0d9a3bc4f3ab649497f613433f35993a4d60fa4a71e1b48da70437eec689ce50387380e723b59d416d2773784bff2653b2730609545879d711b00efb7b31995f35ca1347211ff8acdfd7b393b03cfa09ee8bc20f56baf51dcd623f8dc5cb120cbc65bee4695edd76ac00"/155, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x100000000, 0x100000000}) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) ioctl$TCXONC(r8, 0x540a, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@deltclass={0x64, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0x3, 0x3}, {0xfff9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7c}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xb, 0x7a}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) 10m38.97509254s ago: executing program 0 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x203, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x20, 0x20, 0x49, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, 0x0, 0x7f03) 10m6.470504873s ago: executing program 0 (id=1230): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020200000bfa100000000000007010000f8f5ae143d8b3effffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r2, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r2}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[], 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 8m54.267412058s ago: executing program 32 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x1c}}, 0x4004080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)='=M', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 6m26.60325567s ago: executing program 33 (id=1224): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff00000007058102400000070502024000000705830340"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4c008) socket$pppoe(0x18, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5c", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) mkdir(&(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m22.902807861s ago: executing program 34 (id=1226): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4002) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x1, 0x92, 0x7fff, 0xfffffe00, 0x2a5, 0x7fffffff, 0x8, 0x6, 0x8}}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00!\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/18, 0x12}, {&(0x7f0000000880)=""/14, 0xe}, {&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/58, 0x3a}], 0x8, &(0x7f0000000a80)=""/41, 0x29}, 0xa8}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/101, 0x65}], 0x4, &(0x7f0000001d40)=""/173, 0xad}, 0x400}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/25, 0x19}, {&(0x7f0000001e40)=""/73, 0x49}], 0x2, &(0x7f0000001f00)=""/244, 0xf4}, 0x3}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYBLOB="340000001800000004000000d51bc2c5d0b156baad321b6ddf6c8b1933fa8ae5eaeb6b0d9a3bc4f3ab649497f613433f35993a4d60fa4a71e1b48da70437eec689ce50387380e723b59d416d2773784bff2653b2730609545879d711b00efb7b31995f35ca1347211ff8acdfd7b393b03cfa09ee8bc20f56baf51dcd623f8dc5cb120cbc65bee4695edd76ac00"/155, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x100000000, 0x100000000}) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) ioctl$TCXONC(r8, 0x540a, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@deltclass={0x64, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0x3, 0x3}, {0xfff9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7c}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xb, 0x7a}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) 6m22.789802868s ago: executing program 35 (id=1222): syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) close(0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 6m22.669228375s ago: executing program 36 (id=1230): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020200000bfa100000000000007010000f8f5ae143d8b3effffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r2, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r2}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[], 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2m27.890320372s ago: executing program 9 (id=1760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket(0x10, 0x803, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34) sendmmsg$inet(r2, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x3, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r1, 0x0, 0x0, 0x6}]) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x1000, 0x2fb}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x134}}, 0x0) 2m26.745367739s ago: executing program 9 (id=1764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000001200000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xcbdbce88cafb7278, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m26.643233545s ago: executing program 9 (id=1767): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000440)={r3, 0xfffffc00, 0x1, r3}) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="0ab7137a640778e55681799640258900340002020202020200000a004f005050505050500000"], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) madvise(&(0x7f00001f3000/0x2000)=nil, 0x2000, 0xc) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 2m25.286677022s ago: executing program 9 (id=1770): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0x65a}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 2m24.089995464s ago: executing program 9 (id=1773): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_ublk_setup_io_uring(0x6fe9, &(0x7f00000005c0)={0x0, 0x4e39, 0x800, 0x0, 0x12f}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000001680)={0x0, 0x1069, 0x1, 0x0, 0x204}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xc4ddfbc9bba2bd78}}}, &(0x7f0000000300)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000006feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000240)={r8, 0x0, 0x10000, 0x100000000}) open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d) 2m22.595254944s ago: executing program 9 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000050601040000000000000000030000080500010007"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) 2m6.278072696s ago: executing program 37 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000050601040000000000000000030000080500010007"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) 7.684493162s ago: executing program 1 (id=2137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xf0ff, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}], {0x14}}, 0x6c}}, 0x0) 7.567464719s ago: executing program 1 (id=2138): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000"], 0x0, 0x2f}, 0x28) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_open_dev$vim2m(0x0, 0x2000142, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 6.30882201s ago: executing program 5 (id=2139): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="820d", 0x2}], 0x1) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x8001af85, &(0x7f0000000400)={0x1, 0xfffff6ea}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x7808cfedbd598593}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000c00) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c90000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x4008000) 6.222244073s ago: executing program 1 (id=2142): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0xff3a) close(0x3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) 6.030395716s ago: executing program 6 (id=2143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000019800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x2d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x70}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6065}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x575}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4130}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x50000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1a89}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x334}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.556798983s ago: executing program 6 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008e80000b704000000000000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r8 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r9, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 5.331136537s ago: executing program 5 (id=2145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x3d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001280), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)={0x3, 0x1000000}) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4080, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000000801040000000000000000070000000900010073797a300000000011000000"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000000208010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000280)=0x2) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) write$FUSE_INIT(r8, &(0x7f0000002380)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x2, 0x1800084, 0x34, 0x3, 0x4, 0x4, 0x0, 0x0, 0x10, 0x7}}, 0x50) 4.940078133s ago: executing program 8 (id=2147): socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x0, 0x2, 0x10001, 0x2, 0x1002, 0xffffff73}) r0 = getpgid(0x0) capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x1, 0x6, 0x8, 0x0, 0x3564, 0x83}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) gettid() r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdmj,port=0x0000000000004e23,rq=0x0000000000000009,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095e313a16a96c7055b618e6882b52f56f9c02ba1c9c9300aa0e932bea6716531e43cf99e024c6c9ceb771993874f0ae0c9dbd1593ea2c68e152c5fa96454b4727348ec"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) rt_sigtimedwait(&(0x7f0000000000)={[0xde7f]}, 0x0, 0x0, 0x8) syz_open_dev$usbfs(0x0, 0xf, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102384, 0x18ff0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.856034376s ago: executing program 1 (id=2148): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (fail_nth: 12) 4.450973248s ago: executing program 1 (id=2149): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000240)={@phonet={0x23, 0x6, 0x55, 0x9}, {&(0x7f0000000080)=""/16, 0x10}, &(0x7f0000000140), 0x42}, 0xa0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32], 0x20000600}, 0x1, 0x0, 0x0, 0x40080}, 0x8441) 4.36565946s ago: executing program 5 (id=2150): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) 4.25095329s ago: executing program 6 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292e254c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xf0, 0x2, {{0x9, [0x0, 0x7, 0x4, 0xc, 0x1, 0xd, 0xf, 0x0, 0xa, 0x1, 0xe, 0x8, 0xc, 0xc, 0x8, 0x5], 0x0, [0x7fff, 0xf, 0x2, 0x4, 0x2, 0x4, 0x671e, 0x9, 0x2, 0x2, 0x15a9, 0xffff, 0xb2, 0x5, 0x7, 0x9], [0x6, 0x0, 0x2, 0x2, 0x8, 0x1, 0xa3, 0x5, 0xfffd, 0x400, 0x0, 0x2, 0x3, 0x100, 0xff, 0x5]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x401}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x3ff}, {0xc}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x28, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x100000000}, {0xc, 0x3, 0x8000}, {0xc, 0x3, 0x3}]}]}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000200), 0x400, 0x402000) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4008550d, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x12, 0x40400d0, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.187437635s ago: executing program 5 (id=2152): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newnexthop={0x2c, 0x68, 0x1, 0x106, 0x5dfdbfd, {0x0, 0x0, 0x3}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24004000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3d, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbb0749c3bf39ee8100150086dd63d5b1dc00038404fc010000000000000000000000000001fc00000000000000000000000000000082adb393cba8258abe60c9e48f8c0e0cff68103d84d3435c3bd73ab5b4610b24c53357f45cbc7c094a71f96cf70e2a7fd3c6c732ebc211c8860f21af4fa8311e4e812859553fddb420c2fbdad4fdd8dfcf4d0e4c1795e1467d177d"], 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3d}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "fff7fcff7fffe569"}]}]}, 0x50}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x5, 0x998, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x9, 0x0, 0x5}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r9, r11, 0x25, 0x2, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x7fffffff, 0x3, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x66, 0x0, 0xdb, 0x4, 0x0, @remote, @empty, {[@timestamp={0x44, 0x18, 0x47, 0x0, 0x7, [0xe, 0x4, 0x1, 0x7, 0x5]}, @lsrr={0x83, 0x1f, 0x7e, [@dev={0xac, 0x14, 0x14, 0x26}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback]}, @timestamp={0x44, 0xc, 0x9f, 0x0, 0x8, [0x6, 0x2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x6, 0xa, "d71f92eeba449df2"}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x4, 0x8, "22d964faff8c"}, {0x1, 0xb, "6c24b869a48fb464a4"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'pim6reg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000002940)={&(0x7f0000001280)={0x16a0, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "94109b2293fee72d922a081b600f9e064c56e6e22885fbf111ca92769306d54aab7b864cdf2225419ce0babd5f03195492b6"}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "c4229ec9c45dfd44583b3c245cca065d349e958bec9be13f2b0e70f9c915a63639e2be53f7efc8bf6effbdee8107249de1605f2d3e4585a3a53649eba7efa03572139964790ceab573d1ef8df1a71715e41f9bafa44046a5d142ef6df1626faa91dd"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_WANTED={0x2e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "a019bfe68b481b2129028fb14a58aac29824acb67cd932cd8b59e2ac93fa782c75fd3a16927234aebbedb0bbfa81e341fb348d9cad970bebb189a030a2ac0fc67247e79853bc199603fe0ffce8d628fff58035b1a13ea80e3fc03194cc7c5ae946194215d1a067836ddd6841d7bf858c7a421cacff8a9f0d5a23a492a630fb30695e8238e4556e2a4d7a3505a3ac9c5ec4206c3ddaf14703744fecfa8c02b31d993269d5b93e107323f62dfa134acdcb1949642693b331177311e78b166809d7530f3b38890d5e8c"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(\xd0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',-&\',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#}(-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5f}]}]}, @ETHTOOL_A_BITSET_BITS={0xfffffffffffffc3f, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':!-$\x0f{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/proc/bus/input/devices\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'hashlimit\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@^-\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fbf}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+.\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "1978a45a6408410c295b4168e498969163db9e74a8bdb654492459640021a1c06ba0be721db882495fc238b1e3bef6ecf44a331500e56b4c9bece31fa1123bd5e7590490a3c097cefd89f20b6c55ae7e4d9594076c62230cb700713cadc21c01786bb4d0c554be78fa3821fd2d72c58e6a1ca57b6e0f3e04fcfb35f9b319ce86258e3f465a206d3632d8764d45b0cf78336bb30d101a4661cd7f05ce7672c1a31396d6f3c2395f19613b19b20830777c8211c5cf866b1f3dc4cf3035016ad6"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "88ebfa527e8477fb61a551f389fe3b9fd03caa9dd66c36b0acc040d53bf5f5506af20cdcfca466"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x122c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0x65, 0x5, "94c413fd7f4961b82c7a81b3a668dbe5b1fbf0243100adba7b3ea77b3e6c7fbaf7ce21da5142ae10645867e7245c24990dc145a0eb445bd381260b8771763f5d873d45047140ac6412fe706b1bb879405eeabc1f972f4097f7192f893a715d6279"}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "c75da0c60dfa637f516f0e9a437f821f0169b300898067940a72bfdbe8765c79e9ff53b8424f5ea8fb9ce2a7549590bd190a41d24a225160d98ea06dd4802deb6412c0f3c4142ecb5fcb10f1d437e7b6d29f1c8466cba1e7d311a0e05c8571668748d47e500d424ab34338c7a63a089b6936fef73f482c9f2e3e9b8a20eda212301ad31d360e11ca5b8a6f2a89"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "bf8cbc0f7a32b8e0ebbc46c38805cfbbf8cd540aa9a5a221111318450a43795a5ab9a6797a24061f7c5f493baa0c3e2d1487a324b105e6c248175dd318a657"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{]/!$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-/\\/]}]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}]}, 0x16a0}, 0x1, 0x0, 0x0, 0x4008000}, 0x10801) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @address_request}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f80"], 0x64}}, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a"], 0x0) r14 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000080)) 3.751986336s ago: executing program 7 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x850, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 3.607219588s ago: executing program 8 (id=2158): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xa, 0x94, 0xb1e}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') read(r2, &(0x7f0000000440)=""/24, 0x18) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {r3, r4/1000+10000}}, 0xb6bb816278e275dc) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x3a, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e22, 0x4, 'lblcr\x00', 0xc, 0xd6e, 0x6b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 0x4c, 0xfffffffa, 0x6}}, 0x44) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x300fff2) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0xfffffffa) syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 3.508806117s ago: executing program 7 (id=2159): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x111000a, 0x1}, {0x5f32, 0xc}]}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = socket(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYBLOB='&'], 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.519797299s ago: executing program 7 (id=2160): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(r4, 0x0, r1, 0x0, &(0x7f0000000140)={0x2e, 0x21, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x4, 0xcb0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1a0}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r4, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x209}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9043, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2888, 0x80000001, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0xa0000, 0x3, 0x26d}}], 0x1, 0x0, 0x0) (fail_nth: 1) 2.232457812s ago: executing program 1 (id=2161): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100004400128009000100766c616e0000000034000280280003800c00010009000000000000000c000100f9ffffff0b000000080001"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setns(0xc9, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2.171875795s ago: executing program 8 (id=2162): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000001280)) 2.092818418s ago: executing program 8 (id=2163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r2}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x100000000000000, 0x0, 0x3e, 0x1000000, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7"}) 2.0014034s ago: executing program 6 (id=2164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8002, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x8000b, 0x7f, 0x20000003, 0x4d, 0x6, 0x2000005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x8, 0x3, 0x5e00, 0x5, 0x24, 0x1, 0xe6, 0x3c5b, 0x1, 0x1e, 0x6, 0x3, 0x5, 0xdde8, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c76, 0x80000000, 0x3ffff, 0x4, 0x0, 0x0, 0x80008071, 0x9cf, 0x800014, 0x0, 0x407, 0x5, 0x3a, 0x800008f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x7e, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000003, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf5, 0x0, 0x1000, 0x6c7, 0x9, 0xfffffffc, 0x10, 0x0, 0x0, 0x1, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x7, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8, 0x6, 0x0, 0xff, 0x4000001, 0x1000005, 0x5f31, 0x6, 0x4e2, 0x2, 0x4, 0xb, 0x8, 0x20009, 0x9, 0x9, 0x9, 0x47, 0x8000, 0x4001, 0x1, 0xffff, 0xfffffffb, 0x7, 0x9, 0x5, 0x3, 0x6, 0x9a, 0x3, 0x7, 0xbc47, 0x48c93690, 0x42, 0x3], [0x3, 0x9, 0x8004, 0x0, 0xfffffffe, 0x100, 0x8d2, 0x2, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x5, 0x9, 0x5, 0x4, 0x4a61e2b3, 0x5, 0x8, 0x0, 0x3, 0x5, 0x2, 0xb, 0x5, 0x8, 0x2, 0xf, 0x20000008, 0x4, 0x6d01, 0x6, 0xfffffffe, 0x800003, 0x1fd, 0x7b, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xf3f8, 0x5, 0x5, 0xac8, 0x1, 0x2, 0x3, 0x7ff, 0x12f, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1c, 0x6, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb73, 0x1cfe06fb, 0x8000b, 0x8, 0x6, 0x6, 0x206, 0x0, 0x99, 0x8, 0xa, 0x401, 0xcd, 0x451, 0x3, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x8, 0x4, 0x5, 0x1, 0x2, 0x5, 0xe9, 0x4, 0x16, 0xfffffffe, 0x80000003, 0x7, 0x4, 0x8, 0x9, 0xffffefff, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x9, 0x5, 0x7, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x8d67, 0x5, 0xf3e, 0x9, 0x4, 0xffd, 0xfffffffd, 0x4, 0x5, 0xb1e, 0x4, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd0c, 0x25dfdbfd, {0x2, 0x0, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0x6) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000032c0)={0xe0, 0x0, &(0x7f0000003140)=[@dead_binder_done, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0xa, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000880)=""/243, 0xf3, 0x0, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/37, 0x25, 0x1, 0x1f}}, &(0x7f0000000a40)={0x0, 0x20, 0x48}}, 0x1000}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003080)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000001080)=""/4096, 0x1000, 0x0, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000002080)=""/4096, 0x1000, 0x1, 0x1d}}, &(0x7f0000003100)={0x0, 0x18, 0x40}}, 0x1000}], 0x75, 0x0, &(0x7f0000003240)="e0d82b1455d37cb887e74ffec6f83d5930b535ac48b043dca6485eb9b68bd022b615faca1c5f903216e926b40eb2dd450cbd72b3d1abcd8a9df5f962d876dac1066cc3fb566cbe5a4d015ee78c343e2740405c755eba76888cd0efa592bce2c8df09d7be6d79a0d8b1af03c69a61a4830a4eaf7dcc"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000240)='G'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.6514835s ago: executing program 7 (id=2165): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32], 0xfdef) 1.505263327s ago: executing program 6 (id=2166): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) 1.457378265s ago: executing program 5 (id=2167): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000005c0)={{0xa, 0x4e21, 0x257, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1, {[0x9, 0x2, 0x6, 0x0, 0x0, 0x7ff, 0x4, 0x9]}}, 0x5c) setfsuid(0xee01) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 467.584946ms ago: executing program 6 (id=2168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x400, 0xff}, {0x4, 0x8}]}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e21, @multicast1}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x400, 0xff}, {0x4, 0x8}]}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e21, @multicast1}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) (async) 453.121356ms ago: executing program 8 (id=2169): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x850, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 409.047184ms ago: executing program 5 (id=2170): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x695a, 0x80}) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x800000, 0xff, 0x0, 0x100000000000, 0x6, 0x8000, 0x1}, 0x0, &(0x7f0000000100)={0x8, 0x1, 0x6d, 0x3, 0x3, 0x2, 0x100000000, 0x40000000000}, 0x0, 0x0) 347.644518ms ago: executing program 7 (id=2171): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0xed1a9500, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) socket$netlink(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x2000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r0, 0x6, 0x0, @void}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x8}) fcntl$lock(r3, 0x6, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0xea}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x801, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) sched_setparam(r1, &(0x7f0000000280)=0xffffff35) setpgid(0x0, r2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$usbmon(0x0, 0x9, 0x82002) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x56d500, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 58.274121ms ago: executing program 8 (id=2172): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="9ceed58bbb102832a81881a32ee1017be1a252059c92fc11e82c75b7688da03c74c18822cf7ebe7c5a129dfed97eb26e819e25459f", 0x35}, {&(0x7f00000011c0)="e71337e09b41f74f3dce64fed2e03ba7974e7151c0aca66bb035abcfb0a5e49ee90041f7126c202cec631c0ec5b4043ad0d2245961b4e10051419a06d8372d3f42793eea2c476dc1a36efcc083983a7b555bcb8358abb01070356394ebe37d746a50aade4b1469c00672de7502b737679977c38a3e9b87d671d483acfaff8dbe1eab363aa900dfdb403f0b6bc280480a12b463d9e9ebf2d979b6374e3a9df3e82d9460208ecf5758bcace9f1320d741411d7f122d361d73e3984f5c90184f8", 0xbf}, {&(0x7f0000001280)="31a2b8a6a58c89901de9ff0742545b4c061bf7ae979de56f50c356ab4d274364911159ebe609cce0351b6d5ad635f658745fe57202883342c35ae788a2847bf72e02db05057ec52faaea0bb6750ed45b3deaefb15922b0736b1f4da914b757c4141b30437c7fb44d7fa79db67ba5b330d6e05eff9264b8082b0bcbb5b4c48a05ac60bee913f2f0f823edcaf1dc4b3a7716141b64747b1636fe525080843a2b22f261cb118c0a", 0xa6}], 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 7 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x36, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) kernel console output (not intermixed with test programs): has no altsetting 0 [ 890.753221][ T9] usb 8-1: config 220 interface 1 has no altsetting 0 [ 890.862786][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.895081][ T9] usb 8-1: Product: syz [ 890.906698][ T9] usb 8-1: Manufacturer: syz [ 890.917643][ T9] usb 8-1: SerialNumber: syz [ 891.099524][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1812'. [ 891.294456][ T9] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 891.310228][ T9] uvcvideo 8-1:220.0: No valid video chain found. [ 891.316739][ T9] usb 8-1: selecting invalid altsetting 0 [ 891.340685][ T9] usb 8-1: selecting invalid altsetting 0 [ 891.346550][ T9] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 891.357633][ T9] usb 8-1: USB disconnect, device number 23 [ 891.422874][T12891] block2mtd: error: cannot open device /dev/loop0 [ 891.588292][T10310] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 891.773774][T10310] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 891.810500][T10310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 891.872314][T10310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.921002][T10310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.976158][T10310] usb 7-1: config 0 descriptor?? [ 892.491885][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.528585][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.555559][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.602420][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.640803][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.674180][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.695686][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: unknown main item tag 0x0 [ 892.724559][T10310] aquacomputer_d5next 0003:0C70:F0B6.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 892.849560][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1820'. [ 892.920846][ T9931] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 892.995832][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1821'. [ 893.016335][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1821'. [ 893.115637][ T9931] usb 9-1: Using ep0 maxpacket: 32 [ 893.419807][ T9931] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 893.463589][ T9931] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 893.471743][ T9931] usb 9-1: config 0 has no interface number 0 [ 893.540407][ T9931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.554099][ T9931] usb 9-1: Product: syz [ 893.558878][ T9931] usb 9-1: Manufacturer: syz [ 893.563533][ T9931] usb 9-1: SerialNumber: syz [ 893.567368][T12914] device-mapper: table: 248:0: too large device [ 893.580090][T12914] device-mapper: ioctl: error adding target to table [ 893.588568][ T9931] usb 9-1: config 0 descriptor?? [ 893.874203][T10310] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 894.172710][ T9931] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 894.213882][ T9931] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 894.232106][ T5597] usb 7-1: reset low-speed USB device number 25 using dummy_hcd [ 894.447237][T10310] usb 6-1: not running at top speed; connect to a high speed hub [ 894.463175][T10310] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 894.474917][T10310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.486468][T10310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.508956][T10310] usb 6-1: language id specifier not provided by device, defaulting to English [ 894.532325][T10310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.541138][T10310] usb 6-1: Product: syz [ 894.546098][T10310] usb 6-1: Manufacturer: syz [ 894.550786][T10310] usb 6-1: SerialNumber: syz [ 894.677602][T12934] device-mapper: table: 248:0: too large device [ 894.684026][T12934] device-mapper: ioctl: error adding target to table [ 894.712908][ T9931] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 894.767757][ T9931] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 894.877163][ T9931] usb 9-1: USB disconnect, device number 20 [ 895.633659][ T9] usb 7-1: USB disconnect, device number 25 [ 895.939221][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.946601][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.354262][ T5691] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 896.540105][ T5691] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 896.615018][ T5691] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 896.625927][ T5691] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 896.680831][ T5691] usb 9-1: config 220 has no interface number 2 [ 896.752317][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.756894][ T5691] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 896.818225][ T5691] usb 9-1: config 220 interface 0 has no altsetting 0 [ 896.858356][ T5691] usb 9-1: config 220 interface 76 has no altsetting 0 [ 896.883753][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.893616][ T5691] usb 9-1: config 220 interface 1 has no altsetting 0 [ 896.920811][ T5691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.943271][ T5691] usb 9-1: Product: syz [ 896.961366][ T5691] usb 9-1: Manufacturer: syz [ 896.972677][ T5691] usb 9-1: SerialNumber: syz [ 897.166711][T11817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 897.186661][T11817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 897.195349][T11817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 897.207035][T11817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 897.215161][T11817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 897.253175][ T5691] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 897.261100][ T5691] uvcvideo 9-1:220.0: No valid video chain found. [ 897.267868][ T5691] usb 9-1: selecting invalid altsetting 0 [ 897.280925][ T5691] usb 9-1: selecting invalid altsetting 0 [ 897.286973][ T5691] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 897.304930][ T5691] usb 9-1: USB disconnect, device number 21 [ 898.018034][T12959] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 898.024579][T12959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 898.049022][T12959] vhci_hcd vhci_hcd.0: Device attached [ 898.093568][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1832'. [ 898.135322][T12956] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 898.337005][ T9931] usb 49-1: new low-speed USB device number 5 using vhci_hcd [ 898.346336][T12914] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.353809][T12914] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.573258][T12960] vhci_hcd: connection reset by peer [ 898.588322][ T8587] vhci_hcd vhci_hcd.8: stop threads [ 898.604608][ T8587] vhci_hcd vhci_hcd.8: release socket [ 898.611143][ T8587] vhci_hcd vhci_hcd.8: disconnect device [ 898.804584][T12914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.841284][T12914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.425983][ T4917] Bluetooth: hci0: command tx timeout [ 899.524868][T12971] netlink: 'syz.8.1835': attribute type 10 has an invalid length. [ 899.606389][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1835'. [ 899.798949][ T9937] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.171340][T10310] usb 6-1: 0:1 : does not exist [ 900.298526][ T3340] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.349796][T12966] vlan1: entered allmulticast mode [ 900.355340][T10310] usb 6-1: USB disconnect, device number 15 [ 900.361281][T12966] veth0_vlan: entered allmulticast mode [ 900.405998][T12971] team0: Port device dummy0 added [ 900.419488][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.535817][ T3306] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.582606][ T3306] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.631686][T12980] block2mtd: error: cannot open device /dev/loop0 [ 900.840287][ T60] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.035099][ T30] audit: type=1800 audit(1786423965.685:1101): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1839" name="active" dev="configfs" ino=44655 res=0 errno=0 [ 901.303328][T10310] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 901.329782][ T8591] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.339482][ T30] audit: type=1800 audit(1786423965.694:1102): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1839" name="file0" dev="overlay" ino=721 res=0 errno=0 [ 901.363268][ T3340] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.387884][ T3340] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.554281][T10310] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 901.667486][T10310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 901.673222][ T4917] Bluetooth: hci0: command tx timeout [ 901.711236][T10310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.288143][T10310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.347988][T10310] usb 6-1: config 0 descriptor?? [ 902.596837][T12990] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1838'. [ 902.819505][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.874635][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.888750][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.897452][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.905648][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.913855][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.923199][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 902.934812][T10310] aquacomputer_d5next 0003:0C70:F0B6.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 903.916141][ T9931] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 903.926044][ T4917] Bluetooth: hci0: command tx timeout [ 904.565549][T13013] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 904.572065][T13013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 904.619115][ T8587] bridge_slave_1: left allmulticast mode [ 904.631754][T13013] vhci_hcd vhci_hcd.0: Device attached [ 904.649144][ T8587] bridge_slave_1: left promiscuous mode [ 904.674598][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.688100][T13013] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 904.738983][ T8587] bridge_slave_0: left allmulticast mode [ 904.764075][ T8587] bridge_slave_0: left promiscuous mode [ 904.792525][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.915272][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1845'. [ 904.936814][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1845'. [ 905.011152][T10311] usb 6-1: USB disconnect, device number 16 [ 905.052344][ T9931] usb 49-1: device descriptor read/64, error -110 [ 905.441350][T13015] vhci_hcd: connection closed [ 905.441588][ T8591] vhci_hcd vhci_hcd.8: stop threads [ 905.490533][ T8591] vhci_hcd vhci_hcd.8: release socket [ 905.516453][ T8591] vhci_hcd vhci_hcd.8: disconnect device [ 905.607964][ T9931] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 905.647607][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'. [ 905.709594][ T8587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.721737][ T8587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.739227][ T8587] bond0 (unregistering): Released all slaves [ 905.789094][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1847'. [ 905.934161][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.964259][T12948] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.983356][T12948] bridge_slave_0: entered allmulticast mode [ 906.002115][T12948] bridge_slave_0: entered promiscuous mode [ 906.030580][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.040412][T13046] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1848'. [ 906.066223][T12948] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.074252][T12948] bridge_slave_1: entered allmulticast mode [ 906.080319][ T30] audit: type=1400 audit(1786423970.375:1103): avc: denied { listen } for pid=13044 comm="syz.7.1848" path="/121/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 906.105053][T12948] bridge_slave_1: entered promiscuous mode [ 906.144937][ T30] audit: type=1400 audit(1786423970.439:1104): avc: denied { write } for pid=13035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.179062][ T4917] Bluetooth: hci0: command tx timeout [ 906.194286][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.263419][T12948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.340240][T12948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.375115][T13023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 906.390656][ T30] audit: type=1400 audit(1786423970.670:1105): avc: denied { write } for pid=13051 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.472995][ T8587] hsr_slave_0: left promiscuous mode [ 906.489568][ T8587] hsr_slave_1: left promiscuous mode [ 906.508500][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.538493][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.581604][T10311] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 906.620411][ T30] audit: type=1400 audit(1786423970.873:1106): avc: denied { mounton } for pid=13055 comm="syz.8.1851" path="/134/dev" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 906.702687][T13059] device-mapper: table: 248:0: too large device [ 906.709066][T13059] device-mapper: ioctl: error adding target to table [ 906.813714][T10311] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.870826][T10311] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 906.943429][T10311] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 907.018371][T10311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.026761][T12938] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 907.068537][T10311] usb 8-1: Product: syz [ 907.093786][T10311] usb 8-1: Manufacturer: syz [ 907.124455][T10311] usb 8-1: SerialNumber: syz [ 907.210719][T12938] usb 9-1: not running at top speed; connect to a high speed hub [ 907.230232][T12938] usb 9-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 907.245599][T12938] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.283137][T12938] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.354329][T12938] usb 9-1: language id specifier not provided by device, defaulting to English [ 907.466745][T12938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.533937][T12938] usb 9-1: Product: syz [ 907.559492][T12938] usb 9-1: Manufacturer: syz [ 907.591129][T12938] usb 9-1: SerialNumber: syz [ 908.155179][T13050] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 908.434868][ T4917] Bluetooth: hci0: command 0x0c1a tx timeout [ 908.830330][ T8587] team0 (unregistering): Port device team_slave_1 removed [ 908.843435][ T5788] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 908.851750][ T8587] team0 (unregistering): Port device team_slave_0 removed [ 908.890128][T13050] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 908.928029][ T8587] team0 (unregistering): Port device dummy0 removed [ 908.974268][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17 [ 908.997290][T12948] team0: Port device team_slave_0 added [ 909.010953][ T5788] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 909.027095][T12948] team0: Port device team_slave_1 added [ 909.038095][ T30] audit: type=1400 audit(1786423973.117:1107): avc: denied { setopt } for pid=13066 comm="syz.6.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 909.063175][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 909.085153][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.104279][ T5788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.122525][T12948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.131398][T10311] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 909.140257][ T5788] usb 6-1: config 0 descriptor?? [ 909.149395][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.177782][T10311] cdc_ncm 8-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 909.190244][T10311] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 909.196441][T12948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.215177][T12948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.222448][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.250537][T12948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.350488][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.387261][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.401746][T12948] hsr_slave_0: entered promiscuous mode [ 909.429207][T12948] hsr_slave_1: entered promiscuous mode [ 909.478049][T10311] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 909.553970][T10311] usb 8-1: USB disconnect, device number 24 [ 909.601349][T10311] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 909.639283][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.684467][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.707779][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.722099][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.747018][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.768427][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.777944][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 909.831195][ T5788] aquacomputer_d5next 0003:0C70:F0B6.0019: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 909.913490][T12938] usb 9-1: 0:1 : does not exist [ 910.058330][ T4917] Bluetooth: hci7: unexpected event for opcode 0x4ad0 [ 910.094897][T12938] usb 9-1: USB disconnect, device number 22 [ 910.102557][ T30] audit: type=1400 audit(1786423974.086:1108): avc: denied { write } for pid=13072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.200069][ T30] audit: type=1400 audit(1786423974.178:1109): avc: denied { write } for pid=13088 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.300672][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1857'. [ 910.432194][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18 [ 910.459005][T13094] netlink: 'syz.6.1858': attribute type 1 has an invalid length. [ 910.472686][T13094] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1858'. [ 910.746992][T13110] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 910.753527][T13110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 910.786448][T13110] vhci_hcd vhci_hcd.0: Device attached [ 910.915274][ T30] audit: type=1400 audit(1786423974.834:1110): avc: denied { write } for pid=13097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.922355][T13108] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 911.042442][T12938] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 911.261971][T13124] device-mapper: table: 248:0: too large device [ 911.268669][T13124] device-mapper: ioctl: error adding target to table [ 911.324228][T10311] usb 6-1: reset low-speed USB device number 17 using dummy_hcd [ 911.529804][T10310] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 911.628437][T13112] vhci_hcd: connection reset by peer [ 912.119645][ T30] audit: type=1400 audit(1786423975.923:1111): avc: denied { write } for pid=13120 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 912.153447][ T3306] vhci_hcd vhci_hcd.6: stop threads [ 912.174552][ T3306] vhci_hcd vhci_hcd.6: release socket [ 912.205827][ T3306] vhci_hcd vhci_hcd.6: disconnect device [ 912.464369][T10310] usb 9-1: not running at top speed; connect to a high speed hub [ 912.480708][T10310] usb 9-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 912.504065][T10310] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.532910][T10310] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.617358][T13133] xt_hashlimit: size too large, truncated to 1048576 [ 912.660217][T13134] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 912.667233][T13134] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 912.675715][T13134] udc dummy_udc.0: failed to start g1: -22 [ 912.681648][T13134] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 912.695118][T13134] UDC core: g1: couldn't find an available UDC or it's busy [ 912.819391][T10310] usb 9-1: language id specifier not provided by device, defaulting to English [ 912.844896][T10310] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.846299][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 912.873630][T10310] usb 9-1: Product: syz [ 912.877948][T10310] usb 9-1: Manufacturer: syz [ 912.882606][T10310] usb 9-1: SerialNumber: syz [ 913.052708][ T5788] usb 6-1: USB disconnect, device number 17 [ 913.646006][T13146] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1864'. [ 913.668009][T13146] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1864'. [ 913.904462][T12948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 914.316034][T12948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.355546][T12948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 914.448082][T12948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.481222][T12948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 914.782224][T12948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 914.801375][T12948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 914.826972][T12948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.837830][ T30] audit: type=1400 audit(1786423978.471:1112): avc: denied { write } for pid=13140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.981021][T12948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.004442][T12948] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.024584][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.031778][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.059228][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.066430][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.088405][ T30] audit: type=1400 audit(1786423978.702:1113): avc: denied { write } for pid=13171 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.192811][ T5699] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 915.282520][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 915.330138][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 915.377334][ T5699] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 915.389727][ T5699] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 915.405459][ T5699] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 915.449122][T10310] usb 9-1: 0:1 : does not exist [ 915.450740][ T5699] usb 8-1: config 220 has no interface number 2 [ 915.505083][ T5699] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 915.562383][T10310] usb 9-1: USB disconnect, device number 23 [ 915.583043][ T5699] usb 8-1: config 220 interface 0 has no altsetting 0 [ 915.620372][ T5699] usb 8-1: config 220 interface 76 has no altsetting 0 [ 915.627816][ T5699] usb 8-1: config 220 interface 1 has no altsetting 0 [ 915.640581][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.649652][ T5699] usb 8-1: Product: syz [ 915.659232][ T5699] usb 8-1: Manufacturer: syz [ 915.669517][ T5699] usb 8-1: SerialNumber: syz [ 915.943164][T13196] block2mtd: error: cannot open device /dev/loop0 [ 915.956484][ T5699] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 915.983759][ T5699] uvcvideo 8-1:220.0: No valid video chain found. [ 916.014038][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.026168][ T5699] usb 8-1: selecting invalid altsetting 0 [ 916.065936][ T5714] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 916.066780][ T5699] usb 8-1: selecting invalid altsetting 0 [ 916.182948][ T5699] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 916.211340][ T5699] usb 8-1: USB disconnect, device number 25 [ 916.782584][T12948] veth0_vlan: entered promiscuous mode [ 916.838451][T12938] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 916.842366][T12948] veth1_vlan: entered promiscuous mode [ 916.848809][ T5714] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 916.861273][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 916.888320][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.898545][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.899254][ T30] audit: type=1400 audit(1786423980.373:1114): avc: denied { write } for pid=13182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.955164][T12948] veth0_macvtap: entered promiscuous mode [ 917.055717][T12948] veth1_macvtap: entered promiscuous mode [ 917.058495][ T5714] usb 6-1: config 0 descriptor?? [ 917.256389][T12948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.325456][T13216] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 917.331991][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 917.349445][T12948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.363846][ T30] audit: type=1400 audit(1786423980.798:1115): avc: denied { write } for pid=13211 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.393407][T13216] vhci_hcd vhci_hcd.0: Device attached [ 917.414982][T13217] tipc: Started in network mode [ 917.431012][T13217] tipc: Node identity e0000002, cluster identity 4711 [ 917.468626][T13217] tipc: Enabling of bearer rejected, failed to enable media [ 917.511132][T13216] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 917.544778][T13215] macsec1: entered promiscuous mode [ 917.556133][T13215] virt_wifi0: entered promiscuous mode [ 917.614017][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.643066][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.670182][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.694602][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.695780][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.725650][T12938] usb 45-1: device descriptor read/64, error -110 [ 917.763533][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.788221][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.822282][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.855963][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.891191][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0x0 [ 917.974538][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 917.994228][T13225] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 918.009127][ T8590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.024962][T13225] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 918.034147][ T8590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.050629][T12938] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 918.064042][ T3340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.129660][T13218] vhci_hcd: connection reset by peer [ 918.175011][ T3306] vhci_hcd vhci_hcd.6: stop threads [ 918.212188][ T8590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.225231][ T3306] vhci_hcd vhci_hcd.6: release socket [ 918.230789][ T8590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.273267][ T3306] vhci_hcd vhci_hcd.6: disconnect device [ 918.826558][ T30] audit: type=1400 audit(1786423982.146:1116): avc: denied { write } for pid=13222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.064808][T10310] usb 6-1: USB disconnect, device number 18 [ 919.701239][ T30] audit: type=1400 audit(1786423982.958:1117): avc: denied { write } for pid=13253 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.065927][T10310] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 920.220442][T10310] usb 6-1: device descriptor read/64, error -71 [ 920.365515][T13269] netlink: 'syz.1.1883': attribute type 28 has an invalid length. [ 920.381667][T13269] netlink: 'syz.1.1883': attribute type 29 has an invalid length. [ 920.402952][T13269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1883'. [ 920.498548][T10310] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 921.211569][T10310] usb 6-1: device descriptor read/64, error -71 [ 921.466729][T10310] usb usb6-port1: attempt power cycle [ 921.702133][ T30] audit: type=1400 audit(1786423984.777:1118): avc: denied { write } for pid=13258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.447119][ T30] audit: type=1400 audit(1786423985.488:1119): avc: denied { write } for pid=13288 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.719713][T10310] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 922.885787][T10310] usb 6-1: device descriptor read/8, error -71 [ 923.155333][T13307] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1889'. [ 923.344523][ T30] audit: type=1400 audit(1786423986.318:1120): avc: denied { write } for pid=13291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.574799][T10310] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 923.595349][ T30] audit: type=1400 audit(1786423986.549:1121): avc: denied { write } for pid=13319 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.608439][T10310] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 923.644126][T10310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 923.916494][T12938] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 924.215646][T10310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.231429][T10310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.245699][T10310] usb 6-1: config 0 descriptor?? [ 924.326663][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1893'. [ 924.427554][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1893'. [ 924.776549][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 924.792903][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 924.810475][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 924.819024][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 924.855055][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 924.931487][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 924.999678][T13337] FAULT_INJECTION: forcing a failure. [ 924.999678][T13337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.013400][T13337] CPU: 1 UID: 0 PID: 13337 Comm: syz.1.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.013420][T13337] Tainted: [L]=SOFTLOCKUP [ 925.013423][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 925.013430][T13337] Call Trace: [ 925.013434][T13337] [ 925.013438][T13337] dump_stack_lvl+0x100/0x190 [ 925.013458][T13337] should_fail_ex.cold+0x5/0xa [ 925.013470][T13337] ? prepare_alloc_pages+0x16d/0x5f0 [ 925.013489][T13337] should_fail_alloc_page+0xeb/0x140 [ 925.013506][T13337] prepare_alloc_pages+0x1f0/0x5f0 [ 925.013522][T13337] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 925.013535][T13337] ? rcu_is_watching+0x12/0xc0 [ 925.013556][T13337] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 925.013571][T13337] ? kernel_text_address+0x8d/0x100 [ 925.013585][T13337] ? __kernel_text_address+0xd/0x30 [ 925.013598][T13337] ? unwind_get_return_address+0x59/0xa0 [ 925.013611][T13337] ? arch_stack_walk+0xa6/0xf0 [ 925.013625][T13337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 925.013640][T13337] ? stack_trace_save+0x8e/0xc0 [ 925.013651][T13337] ? __pfx_stack_trace_save+0x10/0x10 [ 925.013666][T13337] ? check_noncircular+0x97/0x160 [ 925.013683][T13337] ? check_prev_add+0x354/0xe60 [ 925.013696][T13337] ? __css_rstat_updated+0x1ce/0x5a0 [ 925.013711][T13337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.013726][T13337] ? policy_nodemask+0xed/0x4f0 [ 925.013743][T13337] alloc_pages_mpol+0x1fb/0x540 [ 925.013759][T13337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 925.013775][T13337] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 925.013794][T13337] ? do_raw_spin_lock+0x128/0x260 [ 925.013812][T13337] alloc_pages_noprof+0x1a/0x160 [ 925.013830][T13337] pte_alloc_one+0x1c/0x3d0 [ 925.013844][T13337] do_fault+0x86c/0x1750 [ 925.013860][T13337] ? __pmd_alloc+0x3fb/0x950 [ 925.013877][T13337] __handle_mm_fault+0x187d/0x2a00 [ 925.013890][T13337] ? mt_find+0x45e/0x8e0 [ 925.013908][T13337] ? __pfx___handle_mm_fault+0x10/0x10 [ 925.013918][T13337] ? __pfx_mt_find+0x10/0x10 [ 925.013942][T13337] ? find_vma+0xbf/0x140 [ 925.013956][T13337] ? __pfx_find_vma+0x10/0x10 [ 925.013971][T13337] handle_mm_fault+0x37b/0xa30 [ 925.013984][T13337] do_user_addr_fault+0x74c/0x12f0 [ 925.014006][T13337] exc_page_fault+0x6f/0xd0 [ 925.014021][T13337] asm_exc_page_fault+0x26/0x30 [ 925.014033][T13337] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 925.014045][T13337] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d a0 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 925.014056][T13337] RSP: 0018:ffffc90003fb7cb8 EFLAGS: 00050246 [ 925.014066][T13337] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 925.014072][T13337] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003fb7d68 [ 925.014079][T13337] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520007f6fad [ 925.014085][T13337] R10: ffffc90003fb7d6f R11: 0000000000000000 R12: 0000000000000000 [ 925.014091][T13337] R13: ffffc90003fb7d68 R14: ffffc90003fb7d68 R15: ffff88807b4b8000 [ 925.014105][T13337] _copy_from_user+0x98/0xd0 [ 925.014122][T13337] vhost_dev_ioctl+0x719/0xe70 [ 925.014136][T13337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.014151][T13337] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 925.014166][T13337] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 925.014194][T13337] vhost_vsock_dev_ioctl+0x320/0xb60 [ 925.014207][T13337] ? __fget_files+0x215/0x3d0 [ 925.014219][T13337] ? hook_file_ioctl_common+0x140/0x440 [ 925.014232][T13337] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 925.014248][T13337] ? selinux_file_ioctl+0xb6/0x290 [ 925.014266][T13337] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 925.014281][T13337] __x64_sys_ioctl+0x18e/0x210 [ 925.014299][T13337] do_syscall_64+0x115/0x870 [ 925.014314][T13337] ? clear_bhb_loop+0x70/0xc0 [ 925.014327][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.014345][T13337] RIP: 0033:0x7f4d9b39e0d9 [ 925.014359][T13337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.014374][T13337] RSP: 002b:00007f4d9c1d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.014384][T13337] RAX: ffffffffffffffda RBX: 00007f4d9b625fa0 RCX: 00007f4d9b39e0d9 [ 925.014390][T13337] RDX: 0000000000000000 RSI: 000000004008af03 RDI: 0000000000000004 [ 925.014397][T13337] RBP: 00007f4d9c1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 925.014403][T13337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.014409][T13337] R13: 00007f4d9b626038 R14: 00007f4d9b625fa0 R15: 00007ffd43f6af88 [ 925.014429][T13337] [ 925.538040][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x0 [ 925.630821][T13335] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 926.252520][ T2161] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 926.753545][T10310] aquacomputer_d5next 0003:0C70:F0B6.001B: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 927.173336][T10310] usb 6-1: USB disconnect, device number 22 [ 927.189102][ T2161] usb 2-1: not running at top speed; connect to a high speed hub [ 927.271280][ T2161] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 927.375200][T13349] fido_id[13349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 927.397419][ T2161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.444705][ T2161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.557619][ T2161] usb 2-1: language id specifier not provided by device, defaulting to English [ 927.663545][T13367] device-mapper: table: 248:0: too large device [ 927.670137][T13367] device-mapper: ioctl: error adding target to table [ 927.762627][ T2161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.822629][ T2161] usb 2-1: Product: syz [ 927.859957][ T2161] usb 2-1: Manufacturer: syz [ 928.168468][ T2161] usb 2-1: SerialNumber: syz [ 928.839087][T10310] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 929.166078][T10310] usb 6-1: not running at top speed; connect to a high speed hub [ 929.199666][ T30] audit: type=1400 audit(1786423991.728:1122): avc: denied { map } for pid=13375 comm="syz.1.1903" path="socket:[47599]" dev="sockfs" ino=47599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 929.248086][T10310] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 929.303586][T10310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.336301][T13376] xt_hashlimit: size too large, truncated to 1048576 [ 929.671468][T10310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 929.779938][T10310] usb 6-1: language id specifier not provided by device, defaulting to English [ 929.854000][ T30] audit: type=1400 audit(1786423992.310:1123): avc: denied { write } for pid=13334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.929270][ T2161] usb 2-1: 0:1 : does not exist [ 929.974531][T10310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.032789][T10310] usb 6-1: Product: syz [ 930.062020][T10310] usb 6-1: Manufacturer: syz [ 930.117355][T10310] usb 6-1: SerialNumber: syz [ 930.187872][T10310] usb 6-1: can't set config #1, error -71 [ 930.241901][T10310] usb 6-1: USB disconnect, device number 23 [ 930.269119][T12938] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 930.320353][ T30] audit: type=1400 audit(1786423992.753:1124): avc: denied { write } for pid=13389 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.330340][ T2161] usb 2-1: USB disconnect, device number 48 [ 931.060272][T12938] usb 7-1: New USB device found, idVendor=055f, idProduct=c005, bcdDevice=dc.6d [ 931.122472][T12938] usb 7-1: config 8 has an invalid interface number: 241 but max is 1 [ 931.179903][T12938] usb 7-1: config 8 has an invalid interface number: 45 but max is 1 [ 931.295552][T12938] usb 7-1: config 8 has no interface number 0 [ 931.340039][T12938] usb 7-1: config 8 has no interface number 1 [ 931.359043][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.448657][T12938] usb 7-1: config 8 interface 241 has no altsetting 0 [ 931.590392][T12938] usb 7-1: config 8 interface 45 has no altsetting 0 [ 931.637849][T12938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.669352][T12938] usb 7-1: Product: syz [ 931.700607][T12938] usb 7-1: Manufacturer: syz [ 931.720173][T12938] usb 7-1: SerialNumber: syz [ 931.830301][ T5714] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 932.284487][ T5714] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 932.296994][ T30] audit: type=1400 audit(1786423994.286:1125): avc: denied { setattr } for pid=13382 comm="syz.6.1905" name="NETLINK" dev="sockfs" ino=47618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 932.350566][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 932.396866][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.411397][T12938] usb 7-1: USB disconnect, device number 26 [ 932.457197][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.945196][ T5714] usb 6-1: config 0 descriptor?? [ 934.082191][ T4917] Bluetooth: hci3: command 0x0406 tx timeout [ 934.204107][T13433] netlink: 'syz.6.1915': attribute type 10 has an invalid length. [ 934.236640][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1915'. [ 934.595708][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 935.432199][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 935.468573][ T30] audit: type=1400 audit(1786423997.508:1126): avc: denied { write } for pid=13398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.553942][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 935.905169][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 936.011205][ T5699] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 936.267328][ T5699] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 936.381767][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.443273][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 936.624472][ T30] audit: type=1400 audit(1786423998.440:1127): avc: denied { write } for pid=13444 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.844906][ T30] audit: type=1800 audit(1786423998.680:1128): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1920" name="active" dev="configfs" ino=47753 res=0 errno=0 [ 936.882415][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.892330][ T5699] usb 2-1: Product: syz [ 936.896680][ T5699] usb 2-1: Manufacturer: syz [ 937.063358][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 937.104047][ T5699] usb 2-1: SerialNumber: syz [ 937.111065][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 937.125555][ T30] audit: type=1800 audit(1786423998.680:1129): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1920" name="file0" dev="overlay" ino=813 res=0 errno=0 [ 937.172447][ T5699] usbtmc 2-1:1.0: bulk endpoints not found [ 937.215442][ T5699] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 937.299915][T12938] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 937.369364][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 937.471998][ T5699] usb 2-1: USB disconnect, device number 49 [ 937.488671][ C1] usbtouchscreen 2-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 937.530084][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 937.636931][T12938] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 938.323516][ T30] audit: type=1800 audit(1786423999.843:1130): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1922" name="file0" dev="overlay" ino=819 res=0 errno=0 [ 938.491166][T12938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.521217][ T5714] usb 6-1: USB disconnect, device number 24 [ 938.592016][T12938] usb 8-1: Product: syz [ 938.685368][T12938] usb 8-1: Manufacturer: syz [ 938.770480][T12938] usb 8-1: SerialNumber: syz [ 938.873014][T13466] fido_id[13466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 939.036709][T12938] usb 8-1: config 0 descriptor?? [ 939.540372][T12938] usb 8-1: USB disconnect, device number 26 [ 939.717510][ T30] audit: type=1400 audit(1786424001.440:1131): avc: denied { bind } for pid=13486 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 939.782223][ T30] audit: type=1400 audit(1786424001.440:1132): avc: denied { listen } for pid=13486 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 939.897477][ T30] audit: type=1400 audit(1786424001.597:1133): avc: denied { write } for pid=13457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.945043][ T9729] udevd[9729]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.288519][T12938] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 940.532694][ T30] audit: type=1400 audit(1786424002.151:1134): avc: denied { create } for pid=13496 comm="syz.6.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 941.178827][ T30] audit: type=1400 audit(1786424002.788:1135): avc: denied { write } for pid=13501 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.341253][T12938] usb 8-1: Using ep0 maxpacket: 16 [ 941.342428][T13500] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13511] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13500] [ 941.372282][ T30] audit: type=1400 audit(1786424002.890:1136): avc: denied { mounton } for pid=13499 comm="syz.1.1930" path="/proc/46/task" dev="proc" ino=47001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 941.473702][T12938] usb 8-1: unable to get BOS descriptor or descriptor too short [ 941.529236][T12938] usb 8-1: New USB device found, idVendor=10c4, idProduct=81d7, bcdDevice=41.73 [ 941.594900][T12938] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 941.726739][T12938] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 941.794472][ T30] audit: type=1800 audit(1786424003.351:1137): pid=13523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1933" name="active" dev="configfs" ino=47084 res=0 errno=0 [ 941.901742][T12938] usb 8-1: config 0 has no interface number 0 [ 941.906369][ T30] audit: type=1800 audit(1786424003.351:1138): pid=13523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1933" name="file0" dev="overlay" ino=790 res=0 errno=0 [ 942.012964][T12938] usb 8-1: config 0 interface 89 altsetting 127 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 942.073232][T12938] usb 8-1: config 0 interface 89 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 942.127295][T12938] usb 8-1: config 0 interface 89 altsetting 127 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 942.191050][T12938] usb 8-1: config 0 interface 89 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 942.313996][T12938] usb 8-1: config 0 interface 89 altsetting 127 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 942.328413][T12938] usb 8-1: config 0 interface 89 altsetting 127 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 942.371012][T12938] usb 8-1: config 0 interface 89 altsetting 127 has an endpoint descriptor with address 0x19, changing to 0x9 [ 942.434251][T12938] usb 8-1: config 0 interface 89 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 942.492393][T12938] usb 8-1: config 0 interface 89 altsetting 127 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 942.583036][T12938] usb 8-1: config 0 interface 89 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 942.583043][ T30] audit: type=1400 audit(1786424004.081:1139): avc: denied { write } for pid=13516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.657983][T12938] usb 8-1: config 0 interface 89 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 942.689179][ T30] audit: type=1400 audit(1786424004.173:1140): avc: denied { write } for pid=13541 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.740905][T12938] usb 8-1: config 0 interface 89 altsetting 127 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 942.768902][T12938] usb 8-1: config 0 interface 89 altsetting 127 endpoint 0x8E has an invalid bInterval 30, changing to 7 [ 942.809374][T12938] usb 8-1: config 0 interface 89 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 942.866385][T12938] usb 8-1: config 0 interface 89 altsetting 127 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 942.929307][T12938] usb 8-1: config 0 interface 89 has no altsetting 0 [ 942.973713][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 942.989543][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1936'. [ 943.001384][T12938] usb 8-1: string descriptor 0 read error: -71 [ 943.013685][T12938] usb 8-1: Dual-Role OTG device on HNP port [ 943.021732][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 943.031031][T12938] usb 8-1: can't set HNP mode: -71 [ 943.276793][T13560] device-mapper: table: 248:0: too large device [ 943.283400][T13560] device-mapper: ioctl: error adding target to table [ 943.310814][ T5788] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 943.723435][T12938] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 944.328684][ T5788] usb 6-1: Using ep0 maxpacket: 16 [ 944.338051][ T5788] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 944.356039][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.372234][ T5788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.381544][T12938] usb 8-1: not running at top speed; connect to a high speed hub [ 944.398525][T12938] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 944.437610][T13566] device-mapper: table: 248:0: too large device [ 944.443919][T13566] device-mapper: ioctl: error adding target to table [ 944.484943][ T5788] usb 6-1: config 0 descriptor?? [ 944.494230][T12938] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.529272][T12938] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.729884][T10310] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 944.757265][T12938] usb 8-1: language id specifier not provided by device, defaulting to English [ 944.945249][T13553] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000064 undefined [ 944.977947][T12938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.092384][T10310] usb 9-1: not running at top speed; connect to a high speed hub [ 945.128847][T12938] usb 8-1: Product: syz [ 945.223507][T12938] usb 8-1: Manufacturer: syz [ 945.279174][T10310] usb 9-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 945.312985][T12938] usb 8-1: SerialNumber: syz [ 945.465823][T10310] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.592536][T13572] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1939'. [ 945.679402][T10310] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 946.029465][T10310] usb 9-1: language id specifier not provided by device, defaulting to English [ 946.040229][T13558] vlan1: left allmulticast mode [ 946.045119][T13558] veth0_vlan: left allmulticast mode [ 946.060679][T13558] virt_wifi0: left promiscuous mode [ 946.066818][T13558] macsec1: left promiscuous mode [ 946.112364][T12938] usb 8-1: 0:1 : does not exist [ 946.140376][T10310] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.184868][T10310] usb 9-1: Product: syz [ 946.290923][T10310] usb 9-1: Manufacturer: syz [ 946.303709][T13577] input: syz0 as /devices/virtual/input/input22 [ 946.314978][T10310] usb 9-1: SerialNumber: syz [ 946.757486][T12938] usb 8-1: USB disconnect, device number 28 [ 946.838276][ T5788] usbhid 6-1:0.0: can't add hid device: -71 [ 946.860804][ T5788] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 946.904770][ T5788] usb 6-1: USB disconnect, device number 25 [ 947.141409][ T30] audit: type=1400 audit(1786424008.115:1141): avc: denied { write } for pid=13547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.196779][ T30] audit: type=1800 audit(1786424008.327:1142): pid=13591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1946" name="active" dev="configfs" ino=47878 res=0 errno=0 [ 947.219491][ T30] audit: type=1800 audit(1786424008.327:1143): pid=13591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1946" name="file0" dev="overlay" ino=854 res=0 errno=0 [ 947.244613][ T30] audit: type=1400 audit(1786424008.355:1144): avc: denied { write } for pid=13590 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.389357][T13593] kAFS: No cell specified [ 949.021816][T10310] usb 9-1: 0:1 : does not exist [ 949.064917][T10310] usb 9-1: USB disconnect, device number 24 [ 949.570708][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.758255][ T30] audit: type=1400 audit(1786424011.623:1145): avc: denied { write } for pid=13599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.945950][T13636] usb usb8: usbfs: process 13636 (syz.8.1955) did not claim interface 0 before use [ 951.040359][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 951.082757][ T30] audit: type=1400 audit(1786424011.928:1146): avc: denied { write } for pid=13637 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.698453][T13647] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 951.807906][T13650] tmpfs: Bad value for 'nr_inodes' [ 951.820732][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 952.994424][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 953.031848][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 953.034603][ T30] audit: type=1400 audit(1786424013.728:1147): avc: denied { write } for pid=13651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.089685][ T30] audit: type=1800 audit(1786424013.774:1148): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1961" name="active" dev="configfs" ino=49167 res=0 errno=0 [ 953.130895][ T30] audit: type=1800 audit(1786424013.802:1149): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1961" name="file0" dev="overlay" ino=828 res=0 errno=0 [ 953.152907][ T5699] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 953.228845][ T30] audit: type=1400 audit(1786424013.904:1150): avc: denied { write } for pid=13679 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.286817][ T24] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 953.310405][ T5699] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 953.338041][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.353224][ T5699] usb 6-1: Product: syz [ 953.361238][ T5699] usb 6-1: Manufacturer: syz [ 953.371818][ T5699] usb 6-1: SerialNumber: syz [ 953.460547][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.486493][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.500311][ T24] usb 9-1: Product: syz [ 953.508304][ T24] usb 9-1: Manufacturer: syz [ 953.513029][ T24] usb 9-1: SerialNumber: syz [ 953.710035][ T30] audit: type=1400 audit(1786424014.356:1151): avc: denied { write } for pid=13682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.145165][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 954.160213][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 954.170276][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.175890][ T30] audit: type=1400 audit(1786424014.781:1152): avc: denied { recv } for pid=4929 comm="jbd2/sda1-8" saddr=10.128.0.169 src=30006 daddr=10.128.1.24 dest=38504 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 954.188493][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.256128][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'. [ 954.265518][ T30] audit: type=1400 audit(1786424014.855:1153): avc: denied { write } for pid=13704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.292638][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'. [ 954.306999][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1966'. [ 954.370315][T13710] trusted_key: syz.1.1967 sent an empty control message without MSG_MORE. [ 954.534207][ T30] audit: type=1400 audit(1786424015.122:1154): avc: denied { write } for pid=13714 comm="syz.6.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 954.564167][ T30] audit: type=1400 audit(1786424015.122:1155): avc: denied { setopt } for pid=13714 comm="syz.6.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 954.857417][T12938] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 954.919944][ T24] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 955.019747][T12938] usb 7-1: Using ep0 maxpacket: 32 [ 955.025575][T12938] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 955.035571][T12938] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 955.043798][T12938] usb 7-1: config 0 has no interface number 0 [ 955.051660][T12938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.059886][T12938] usb 7-1: Product: syz [ 955.064115][T12938] usb 7-1: Manufacturer: syz [ 955.068719][T12938] usb 7-1: SerialNumber: syz [ 955.075453][T12938] usb 7-1: config 0 descriptor?? [ 955.083431][T12938] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 955.170413][ T24] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 955.194678][ T24] usb 9-1: USB disconnect, device number 25 [ 955.217217][ T24] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 955.359128][T13723] netlink: 'syz.7.1971': attribute type 10 has an invalid length. [ 955.399192][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1971'. [ 955.446542][T12938] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 955.489142][T12938] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 955.844261][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 956.593805][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 956.609778][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 956.628828][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 956.651347][ T5699] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 956.684375][ T5699] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 956.729838][ T5699] usb 6-1: USB disconnect, device number 26 [ 956.819867][T13734] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 956.938420][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1975'. [ 956.947699][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1975'. [ 956.978554][ T30] audit: type=1800 audit(1786424017.366:1156): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1976" name="active" dev="configfs" ino=49286 res=0 errno=0 [ 957.066358][T13746] device-mapper: table: 248:0: too large device [ 957.072844][T13746] device-mapper: ioctl: error adding target to table [ 958.018693][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1979'. [ 958.058120][T13764] bond0: entered promiscuous mode [ 958.064302][T13764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.123736][T13764] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1979'. [ 958.134741][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 958.259207][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 958.402979][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'. [ 958.563179][ T5788] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 958.569508][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 958.580590][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 958.658283][T13796] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 958.715717][ T9936] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 958.749666][ T5788] usb 9-1: Using ep0 maxpacket: 8 [ 958.984525][ T5788] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 959.005950][ T5788] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 959.014331][ T5788] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 959.024893][ T5788] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 959.040960][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 959.048860][T12938] usb 7-1: USB disconnect, device number 27 [ 959.067808][T12938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 959.086979][ T5788] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 959.123328][ T5788] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.138341][ T9936] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 959.148676][T12938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 959.163886][ T9936] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 959.172944][ T9936] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 959.184599][T12938] quatech2 7-1:0.51: device disconnected [ 959.192718][ T5788] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.207270][ T9936] usb 2-1: config 220 has no interface number 2 [ 959.360485][T13802] device-mapper: table: 248:0: too large device [ 959.366863][T13802] device-mapper: ioctl: error adding target to table [ 959.465007][ T5788] usb 9-1: usb_control_msg returned -32 [ 960.089427][ T5788] usbtmc 9-1:16.0: can't read capabilities [ 960.099258][ T9936] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 960.115519][ T9936] usb 2-1: config 220 interface 0 has no altsetting 0 [ 960.122610][ T9936] usb 2-1: config 220 interface 76 has no altsetting 0 [ 960.131577][ T5788] usb 9-1: USB disconnect, device number 26 [ 960.143565][ T9936] usb 2-1: config 220 interface 1 has no altsetting 0 [ 960.152494][ T9936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.161115][ T9936] usb 2-1: Product: syz [ 960.165490][ T9936] usb 2-1: Manufacturer: syz [ 960.170316][ T9936] usb 2-1: SerialNumber: syz [ 960.247996][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1992'. [ 960.380138][ T8591] Bluetooth: hci1: Frame reassembly failed (-84) [ 960.425000][ T9936] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 960.432426][ T9936] uvcvideo 2-1:220.0: No valid video chain found. [ 960.439427][ T9936] usb 2-1: selecting invalid altsetting 0 [ 960.456040][ T9936] usb 2-1: selecting invalid altsetting 0 [ 960.468004][ T9936] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 960.485616][ T9936] usb 2-1: USB disconnect, device number 50 [ 960.607340][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 960.607367][ T30] audit: type=1400 audit(1786424020.717:1162): avc: denied { read } for pid=13806 comm="syz.5.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 960.835234][ T30] audit: type=1400 audit(1786424020.929:1163): avc: denied { write } for pid=13827 comm="syz.7.1998" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 960.872410][T12938] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 960.998581][T13832] NILFS (nbd7): device size too small [ 961.107566][T12938] usb 6-1: Using ep0 maxpacket: 16 [ 961.120024][T12938] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 961.173364][T12938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.285652][T12938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.383244][T12938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.486063][T12938] usb 6-1: config 0 descriptor?? [ 961.529995][ T9936] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 961.741377][T12938] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 961.812338][ T9936] usb 8-1: Using ep0 maxpacket: 32 [ 961.889350][ T9936] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 961.998848][ T9936] usb 8-1: config index 0 descriptor too short (expected 2587, got 27) [ 962.136937][T13842] tmpfs: Bad value for 'nr_inodes' [ 962.591792][ T4917] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 962.599938][T11817] Bluetooth: hci1: command 0x1003 tx timeout [ 962.982216][ T9936] usb 8-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 962.997612][ T9936] usb 8-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 963.008646][T12938] usb 6-1: USB disconnect, device number 27 [ 963.008751][ C1] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 963.064031][ T9936] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 963.073562][ T9936] usb 8-1: Product: syz [ 963.077764][ T9936] usb 8-1: Manufacturer: syz [ 963.083379][ T9936] usb 8-1: SerialNumber: syz [ 963.316425][T13850] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 963.461055][ T9936] usb 8-1: USB disconnect, device number 29 [ 964.021118][ T5699] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 964.389408][ T9936] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 964.422303][ T5699] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 964.432683][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.442913][ T5699] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 964.454688][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.462802][ T5699] usb 2-1: Product: syz [ 964.467073][ T5699] usb 2-1: Manufacturer: syz [ 964.471741][ T5699] usb 2-1: SerialNumber: syz [ 964.479552][ T5699] usb 2-1: config 0 descriptor?? [ 964.574036][ T9936] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 964.607070][ T9936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.639932][ T9936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.664778][ T9936] usb 7-1: config 0 descriptor?? [ 964.691920][ T9936] pwc: Askey VC010 type 2 USB webcam detected. [ 964.713828][T13862] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000 [ 964.736539][T13862] __nla_validate_parse: 6 callbacks suppressed [ 964.736557][T13862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2006'. [ 964.968930][T12938] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 965.141194][ T5714] usb 2-1: USB disconnect, device number 51 [ 965.239578][T12938] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 965.289813][ T9936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 965.349584][T12938] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 965.443143][ T9936] pwc: recv_control_msg error -32 req 02 val 2700 [ 965.450926][T12938] usb 6-1: config 1 has no interface number 0 [ 965.523752][T12938] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 965.554505][ T9936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 965.618861][ T9936] pwc: recv_control_msg error -32 req 04 val 1000 [ 965.634876][T12938] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 965.664677][ T9936] pwc: recv_control_msg error -32 req 04 val 1300 [ 965.681424][T12938] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.699870][ T9936] pwc: recv_control_msg error -32 req 04 val 1400 [ 965.718914][ T9936] pwc: recv_control_msg error -32 req 02 val 2000 [ 965.741403][T12938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.761287][ T9936] pwc: recv_control_msg error -32 req 02 val 2100 [ 965.768906][T12938] usb 6-1: Product: syz [ 965.779653][T12938] usb 6-1: Manufacturer: syz [ 965.785032][ T9936] pwc: recv_control_msg error -32 req 04 val 1500 [ 965.805563][T12938] usb 6-1: SerialNumber: syz [ 965.843599][T13869] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 965.872909][T13880] block2mtd: error: cannot open device /dev/loop0 [ 966.002157][T13884] device-mapper: table: 248:0: too large device [ 966.008504][T13884] device-mapper: ioctl: error adding target to table [ 966.107300][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.186019][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.307946][ T5699] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 966.333838][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.348070][ T30] audit: type=1400 audit(1786424026.007:1164): avc: denied { recv } for pid=13879 comm="syz.8.2013" saddr=10.128.0.169 src=46350 daddr=10.128.1.24 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 966.416775][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.436028][ T9936] pwc: recv_control_msg error -71 req 02 val 2400 [ 966.453938][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.557467][ T5699] usb 2-1: not running at top speed; connect to a high speed hub [ 966.581096][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.605961][ T5699] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 966.642860][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.679480][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.720960][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.758850][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 966.797667][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.835429][ T5699] usb 2-1: language id specifier not provided by device, defaulting to English [ 966.880411][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.919483][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.055498][ T5699] usb 2-1: Product: syz [ 967.174221][ T5699] usb 2-1: Manufacturer: syz [ 967.228595][ T5699] usb 2-1: SerialNumber: syz [ 967.767138][ T30] audit: type=1400 audit(1786424027.327:1165): avc: denied { search } for pid=13887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.031461][T12938] usb 6-1: Error in usbnet_get_endpoints (-71) [ 968.065017][ T30] audit: type=1400 audit(1786424027.355:1166): avc: denied { search } for pid=13887 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.184847][ T9936] pwc: recv_control_msg error -71 req 02 val 2600 [ 968.198505][ T9936] pwc: recv_control_msg error -71 req 02 val 2900 [ 968.209294][T12938] usb 6-1: USB disconnect, device number 28 [ 968.219274][ T9936] pwc: recv_control_msg error -71 req 02 val 2800 [ 968.230003][ T9936] pwc: recv_control_msg error -71 req 04 val 1100 [ 968.239754][ T9936] pwc: recv_control_msg error -71 req 04 val 1200 [ 968.268341][ T9936] pwc: Registered as video103. [ 968.272476][ T30] audit: type=1400 audit(1786424027.355:1167): avc: denied { search } for pid=13887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.279471][ T9936] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 968.311982][ T9936] usb 7-1: USB disconnect, device number 28 [ 968.425986][ T30] audit: type=1400 audit(1786424027.355:1168): avc: denied { search } for pid=13887 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.508506][ T5699] usb 2-1: 0:1 : does not exist [ 968.520724][ T30] audit: type=1400 audit(1786424027.512:1169): avc: denied { read } for pid=13888 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.616295][ T30] audit: type=1400 audit(1786424027.512:1170): avc: denied { read open } for pid=13888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.644188][ T5699] usb 2-1: USB disconnect, device number 52 [ 968.678296][ T30] audit: type=1400 audit(1786424027.530:1171): avc: denied { getattr } for pid=13888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.715971][ T2161] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 968.750536][T10677] udevd[10677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.144924][ T30] audit: type=1400 audit(1786424028.610:1172): avc: denied { write } for pid=13887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.214813][ T2161] usb 9-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 969.231401][ T30] audit: type=1400 audit(1786424028.629:1173): avc: denied { add_name } for pid=13887 comm="dhcpcd-run-hook" name="resolv.conf.eth20.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.274892][ T2161] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.294984][ T2161] usb 9-1: Product: syz [ 969.305690][ T2161] usb 9-1: Manufacturer: syz [ 969.311372][ T2161] usb 9-1: SerialNumber: syz [ 969.321951][ T2161] usb 9-1: config 0 descriptor?? [ 969.465999][ T2161] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 969.915759][ T2161] sonixb 9-1:0.0: Error writing register 01: -71 [ 969.943561][ T2161] sonixb 9-1:0.0: probe with driver sonixb failed with error -71 [ 970.027852][ T2161] usb 9-1: USB disconnect, device number 27 [ 970.081086][T13930] device-mapper: table: 248:0: too large device [ 970.087527][T13930] device-mapper: ioctl: error adding target to table [ 971.140899][T13944] device-mapper: table: 248:0: too large device [ 971.147256][T13944] device-mapper: ioctl: error adding target to table [ 971.452224][ T5699] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 971.695551][ T5699] usb 6-1: not running at top speed; connect to a high speed hub [ 971.804899][ T5699] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 971.978669][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.129713][ T5699] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.281895][ T5699] usb 6-1: language id specifier not provided by device, defaulting to English [ 972.459924][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.619729][ T5699] usb 6-1: Product: syz [ 972.702434][ T5699] usb 6-1: Manufacturer: syz [ 972.731773][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.796195][ T5699] usb 6-1: SerialNumber: syz [ 972.932874][T13954] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 972.939403][T13954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 972.947005][T13954] vhci_hcd vhci_hcd.0: Device attached [ 973.082003][T13954] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 973.106280][T13956] vhci_hcd: connection closed [ 973.107859][T13916] vhci_hcd vhci_hcd.8: stop threads [ 973.157745][T13916] vhci_hcd vhci_hcd.8: release socket [ 973.182914][T13916] vhci_hcd vhci_hcd.8: disconnect device [ 973.250311][ T2161] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 973.329743][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 973.329761][ T30] audit: type=1400 audit(1786424032.460:1178): avc: denied { write } for pid=13927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.453016][T13967] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 973.501950][T13967] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 973.525897][T13967] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 973.543692][T13967] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 973.574118][T13977] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 973.646118][ T30] audit: type=1400 audit(1786424032.755:1179): avc: denied { write } for pid=13978 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.820336][T13986] device-mapper: table: 248:0: too large device [ 973.827193][T13986] device-mapper: ioctl: error adding target to table [ 974.147598][ T9936] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 974.401347][ T9936] usb 7-1: not running at top speed; connect to a high speed hub [ 974.516531][ T9936] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 974.671544][ T9936] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.832927][ T9936] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.997401][ T9936] usb 7-1: language id specifier not provided by device, defaulting to English [ 975.197130][ T9936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.343954][ T9936] usb 7-1: Product: syz [ 975.403598][ T9936] usb 7-1: Manufacturer: syz [ 975.469810][ T9936] usb 7-1: SerialNumber: syz [ 975.752726][ T5699] usb 6-1: 0:1 : does not exist [ 975.894684][ T5699] usb 6-1: USB disconnect, device number 29 [ 976.041179][T13999] device-mapper: table: 248:0: too large device [ 976.047743][T13999] device-mapper: ioctl: error adding target to table [ 976.337004][ T24] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 976.581033][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 976.635907][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 976.736408][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.836356][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.773154][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 977.958763][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.181280][ T24] usb 2-1: Product: syz [ 978.285265][ T24] usb 2-1: Manufacturer: syz [ 978.341223][ T9936] usb 7-1: 0:1 : does not exist [ 978.345988][ T24] usb 2-1: SerialNumber: syz [ 978.442664][ T9936] usb 7-1: USB disconnect, device number 29 [ 978.472719][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2041'. [ 978.508218][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2041'. [ 978.533829][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.853241][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.860708][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.880252][T14028] netlink: 'syz.6.2045': attribute type 1 has an invalid length. [ 978.935101][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.949361][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.112434][T14028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 979.138893][T14030] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 979.207705][T13916] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.246677][ T24] usb 2-1: 0:1 : does not exist [ 979.273405][ T8586] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.301972][ T8586] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.319959][ T30] audit: type=1400 audit(1786424037.990:1180): avc: denied { write } for pid=14002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.346109][ T24] usb 2-1: USB disconnect, device number 53 [ 979.362653][ T8586] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.436036][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.473239][ T30] audit: type=1400 audit(1786424038.128:1181): avc: denied { name_connect } for pid=14041 comm="syz.6.2049" dest=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 979.521917][ T30] audit: type=1400 audit(1786424038.147:1182): avc: denied { write } for pid=14044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.575778][T12938] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 980.607088][T12938] usb 9-1: Using ep0 maxpacket: 32 [ 980.774589][T14053] device-mapper: table: 248:0: too large device [ 980.781148][T14053] device-mapper: ioctl: error adding target to table [ 981.071132][ T9936] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 981.418375][ T9936] usb 7-1: not running at top speed; connect to a high speed hub [ 981.565338][ T9936] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 982.110363][ T24] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 982.916544][T12938] usb 9-1: unable to get BOS descriptor or descriptor too short [ 983.488609][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 983.558513][ T9936] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 983.682924][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 983.876094][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.046757][T12938] usb 9-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 984.050480][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 984.055947][ T9936] usb 7-1: can't read configurations, error -71 [ 984.071263][T12938] usb 9-1: too many configurations: 80, using maximum allowed: 8 [ 984.079786][T12938] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 984.087857][T12938] usb 9-1: can't read configurations, error -71 [ 984.119758][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2054'. [ 984.131963][ T24] usb 6-1: language id specifier not provided by device, defaulting to English [ 984.142726][ T30] audit: type=1400 audit(1786424042.449:1183): avc: denied { create } for pid=14073 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 984.155193][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.260040][ T24] usb 6-1: Product: syz [ 984.284267][ T24] usb 6-1: Manufacturer: syz [ 984.311375][ T24] usb 6-1: SerialNumber: syz [ 984.428634][T14083] device-mapper: table: 248:0: too large device [ 984.434945][T14083] device-mapper: ioctl: error adding target to table [ 984.466026][ T30] audit: type=1400 audit(1786424042.689:1184): avc: denied { execmod } for pid=14071 comm="syz.6.2055" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 984.581972][ T5788] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 984.777031][T10310] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 984.823146][ T5788] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 984.849882][ T5788] usb 8-1: config index 0 descriptor too short (expected 65183, got 72) [ 984.922201][ T5788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.950151][T10310] usb 2-1: not running at top speed; connect to a high speed hub [ 985.011582][ T5788] usb 8-1: Product: syz [ 985.018804][T10310] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 985.067578][ T5788] usb 8-1: Manufacturer: syz [ 985.099658][ T5788] usb 8-1: SerialNumber: syz [ 985.117204][T10310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.206621][T10310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 985.268072][T10310] usb 2-1: language id specifier not provided by device, defaulting to English [ 985.374591][T10310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.573383][T14089] device-mapper: table: 248:0: too large device [ 985.579822][T14089] device-mapper: ioctl: error adding target to table [ 986.891397][ T24] usb 6-1: can't set config #1, error -71 [ 987.050129][ T5721] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 987.083359][ T24] usb 6-1: USB disconnect, device number 30 [ 987.278433][T10310] usb 2-1: Product: syz [ 987.283806][ T5721] usb 9-1: not running at top speed; connect to a high speed hub [ 987.328971][ T5721] usb 9-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 987.653619][T10310] usb 2-1: Manufacturer: syz [ 987.674303][T10310] usb 2-1: SerialNumber: syz [ 987.686937][ T5721] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.710589][T10310] usb 2-1: can't set config #1, error -71 [ 987.719143][T10310] usb 2-1: USB disconnect, device number 54 [ 987.742013][ T9936] usb 8-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 987.746175][ T24] usb 8-1: USB disconnect, device number 30 [ 987.792773][ T5721] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.844906][ T24] usb 8-1: ath9k_htc: USB layer deinitialized [ 987.851375][ T5721] usb 9-1: language id specifier not provided by device, defaulting to English [ 987.877653][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.899414][ T5721] usb 9-1: Product: syz [ 987.903969][ T5721] usb 9-1: Manufacturer: syz [ 987.911169][ T5721] usb 9-1: SerialNumber: syz [ 988.249586][ T30] audit: type=1326 audit(1786424046.234:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.1.2067" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9b39e0d9 code=0x0 [ 988.660774][ T5721] usb 9-1: 0:1 : does not exist [ 988.666580][ T24] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 988.685358][T10310] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 988.694185][ T5721] usb 9-1: USB disconnect, device number 30 [ 988.768073][ T30] audit: type=1400 audit(1786424046.714:1186): avc: denied { setopt } for pid=14109 comm="syz.8.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 988.837677][ T24] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 988.857018][T10310] usb 7-1: device descriptor read/64, error -71 [ 988.952806][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.016241][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 989.052460][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 989.062293][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.076013][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.145791][T10310] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 990.694757][T10310] usb 7-1: device descriptor read/64, error -71 [ 990.819879][T10310] usb usb7-port1: attempt power cycle [ 991.036948][T12938] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 991.213293][T10310] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 991.216027][ T24] gud 8-1:1.0: Failed to get connectors (error=-71) [ 991.276612][ T24] gud 8-1:1.0: probe with driver gud failed with error -71 [ 991.276782][T12938] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 991.330020][T10310] usb 7-1: device descriptor read/8, error -71 [ 991.336743][ T24] usb 8-1: USB disconnect, device number 31 [ 991.358501][T12938] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 991.375566][T12938] usb 9-1: Product: syz [ 991.386501][T12938] usb 9-1: Manufacturer: syz [ 991.413764][T12938] usb 9-1: SerialNumber: syz [ 991.438583][T12938] usb 9-1: config 0 descriptor?? [ 991.610699][T14132] device-mapper: table: 248:0: too large device [ 991.617048][T14132] device-mapper: ioctl: error adding target to table [ 991.891713][T12938] peak_usb 9-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 991.978496][ T5788] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 992.113159][T12938] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 992.151245][T12938] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 992.199866][T12938] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 992.239913][ T5788] usb 2-1: not running at top speed; connect to a high speed hub [ 992.279955][ T5788] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 992.375965][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.506950][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.581448][ T5788] usb 2-1: language id specifier not provided by device, defaulting to English [ 992.638260][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.698243][ T5788] usb 2-1: Product: syz [ 992.757434][ T5788] usb 2-1: Manufacturer: syz [ 992.819113][ T5788] usb 2-1: SerialNumber: syz [ 993.606460][T12938] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22 [ 993.663877][T12938] usb 9-1: USB disconnect, device number 31 [ 994.967565][ T5788] usb 2-1: 0:1 : does not exist [ 995.074801][ T5788] usb 2-1: USB disconnect, device number 55 [ 995.084361][ T30] audit: type=1400 audit(1786424052.540:1187): avc: denied { map } for pid=14148 comm="syz.1.2080" path="socket:[50618]" dev="sockfs" ino=50618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 995.134167][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2079'. [ 995.189169][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.383234][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 995.413497][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 995.476876][T12938] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 995.620160][T12938] usb 7-1: device descriptor read/64, error -71 [ 996.397032][T12938] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 996.602724][T14175] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 996.657559][T12938] usb 7-1: device descriptor read/64, error -71 [ 996.718903][T14179] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 996.786014][T14179] netlink: 'syz.7.2087': attribute type 10 has an invalid length. [ 996.795647][T12938] usb usb7-port1: attempt power cycle [ 996.805284][T14179] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2087'. [ 996.818467][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2089'. [ 996.830538][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2089'. [ 997.025947][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 997.134267][ T5788] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 997.177528][T12938] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 997.188880][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 997.198900][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.199655][T12938] usb 7-1: device descriptor read/8, error -71 [ 997.210105][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.226218][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.236018][ T24] usb 2-1: config 0 descriptor?? [ 997.297525][ T5788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 997.307833][ T5788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.318035][ T5788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.328067][ T5788] usb 6-1: config 0 descriptor?? [ 997.470009][T12938] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 997.492203][T12938] usb 7-1: device descriptor read/8, error -71 [ 997.622548][T12938] usb usb7-port1: unable to enumerate USB device [ 997.692839][ T24] stadia 0003:18D1:9400.001D: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 997.713701][ T24] stadia 0003:18D1:9400.001D: no inputs found [ 997.721098][ T24] stadia 0003:18D1:9400.001D: force feedback init failed [ 997.777172][ T5788] ath6kl: Failed to read usb control message: -71 [ 997.785946][ T5788] ath6kl: Unable to read the bmi data from the device: -71 [ 997.793181][ T5788] ath6kl: Unable to recv target info: -71 [ 997.810432][ T5788] ath6kl: Failed to init ath6kl core: -71 [ 997.816683][ T5788] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 997.829281][ T5788] usb 6-1: USB disconnect, device number 31 [ 997.945455][T12938] usb 2-1: USB disconnect, device number 56 [ 998.184877][ T24] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 998.351125][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 998.364407][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.374961][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 998.384988][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 998.395277][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.408398][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.560689][ T30] audit: type=1400 audit(1786424055.761:1188): avc: denied { write } for pid=14202 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 998.672762][ T5721] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 999.289737][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.356249][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.615564][ T5721] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 1000.305741][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.319517][ T5721] usbtest 6-1:1.0: Linux gadget zero [ 1000.324882][ T5721] usbtest 6-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1000.391058][T14209] pimreg: entered allmulticast mode [ 1000.517486][ T24] gud 9-1:1.0: Failed to get connectors (error=-71) [ 1000.978205][ T5721] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1000.994761][ T24] gud 9-1:1.0: probe with driver gud failed with error -71 [ 1001.329353][ T5721] usb 2-1: device descriptor read/64, error -71 [ 1001.369808][ T24] usb 9-1: USB disconnect, device number 32 [ 1001.629441][ T5721] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1001.889359][ T24] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1001.897520][ T5721] usb 2-1: device descriptor read/64, error -71 [ 1002.043508][ T5721] usb usb2-port1: attempt power cycle [ 1002.087393][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 1002.106381][ T24] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 1002.124118][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.138627][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.158315][ T24] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 1002.182833][ T24] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1002.200072][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1002.394568][ T30] audit: type=1400 audit(1786424059.297:1189): avc: denied { map } for pid=14218 comm="syz.8.2101" path="socket:[50744]" dev="sockfs" ino=50744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1002.419126][ T30] audit: type=1400 audit(1786424059.297:1190): avc: denied { read } for pid=14218 comm="syz.8.2101" path="socket:[50744]" dev="sockfs" ino=50744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1002.436171][ T24] usb 6-1: USB disconnect, device number 32 [ 1002.453652][ T5721] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1002.453953][T12938] usb 9-1: USB disconnect, device number 33 [ 1002.476990][T12938] garmin_gps 9-1:1.0: device disconnected [ 1002.496986][ T5721] usb 2-1: device descriptor read/8, error -71 [ 1002.810433][ T5721] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1002.878286][ T5721] usb 2-1: device descriptor read/8, error -71 [ 1002.907593][ T30] audit: type=1800 audit(1786424059.667:1191): pid=14232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2105" name="active" dev="configfs" ino=50751 res=0 errno=0 [ 1003.017312][ T5721] usb usb2-port1: unable to enumerate USB device [ 1003.429003][T14237] Bluetooth: hci1: Frame reassembly failed (-84) [ 1003.504363][ T30] audit: type=1400 audit(1786424060.322:1192): avc: denied { ioctl } for pid=14235 comm="syz.8.2106" path="socket:[50163]" dev="sockfs" ino=50163 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1003.756823][ T60] Bluetooth: hci1: Frame reassembly failed (-84) [ 1003.780993][T14242] IPVS: set_ctl: invalid protocol: 46 172.30.1.9:20000 [ 1003.846159][ T30] audit: type=1400 audit(1786424060.322:1193): avc: denied { write } for pid=14235 comm="syz.8.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1003.940321][T14253] device-mapper: table: 248:0: too large device [ 1003.946681][T14253] device-mapper: ioctl: error adding target to table [ 1004.294137][ T5788] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1004.600487][ T5788] usb 2-1: not running at top speed; connect to a high speed hub [ 1004.761376][ T5788] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1004.985844][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.205498][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.393912][ T5788] usb 2-1: language id specifier not provided by device, defaulting to English [ 1005.652833][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.842964][ T4917] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1005.891034][ T5788] usb 2-1: Product: syz [ 1005.957818][ T5788] usb 2-1: Manufacturer: syz [ 1005.998920][ T5788] usb 2-1: SerialNumber: syz [ 1006.103069][T14270] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1006.109617][T14270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.117163][T14270] vhci_hcd vhci_hcd.0: Device attached [ 1006.207092][T14276] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 1007.218165][T10310] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 1007.444088][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 1007.465389][T14282] netlink: 'syz.8.2115': attribute type 10 has an invalid length. [ 1007.482268][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2115'. [ 1007.830680][T14272] vhci_hcd: connection reset by peer [ 1008.830528][ T116] vhci_hcd vhci_hcd.7: stop threads [ 1008.879038][ T116] vhci_hcd vhci_hcd.7: release socket [ 1008.915885][ T116] vhci_hcd vhci_hcd.7: disconnect device [ 1008.923726][ T5788] usb 2-1: 0:1 : does not exist [ 1009.023374][T14286] netlink: 'syz.6.2118': attribute type 10 has an invalid length. [ 1009.071146][ T5788] usb 2-1: USB disconnect, device number 61 [ 1009.087585][T14286] snd_dummy snd_dummy.0: control 1:5:128:syz0:2097152 is already present [ 1009.183108][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.283640][T14296] device-mapper: table: 248:0: too large device [ 1009.290177][T14296] device-mapper: ioctl: error adding target to table [ 1009.398754][ T5721] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1009.569370][T12938] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1009.830181][T12938] usb 7-1: not running at top speed; connect to a high speed hub [ 1009.945373][T12938] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1010.111556][T12938] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.238242][T12938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1010.341865][T12938] usb 7-1: language id specifier not provided by device, defaulting to English [ 1010.452390][T12938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.540283][T12938] usb 7-1: Product: syz [ 1010.587724][T12938] usb 7-1: Manufacturer: syz [ 1010.641137][T12938] usb 7-1: SerialNumber: syz [ 1011.172337][ T5788] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1011.172930][ T5721] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1011.190470][ T5721] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1011.198698][ T5721] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.209198][ T5721] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.222587][ T5721] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.240295][ T5721] usbtmc 9-1:16.0: bulk endpoints not found [ 1011.390058][ T5788] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1011.416533][ T5788] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.444279][ T5788] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1011.470225][ T5788] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1011.499630][ T5788] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.531938][T14303] netlink: 'syz.5.2123': attribute type 1 has an invalid length. [ 1011.542707][ T5788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.628299][T14303] bond1: option mode: invalid value (12) [ 1011.657405][T14303] bond1 (unregistering): Released all slaves [ 1012.031033][ T5788] gud 8-1:1.0: No supported pixel formats found [ 1012.043925][ T5788] gud 8-1:1.0: probe with driver gud failed with error -22 [ 1012.283528][ T5699] usb 8-1: USB disconnect, device number 32 [ 1012.440772][ T5788] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1012.470818][T12938] usb 7-1: 0:1 : does not exist [ 1012.561576][T12938] usb 7-1: USB disconnect, device number 40 [ 1012.614453][ T5788] usb 6-1: Using ep0 maxpacket: 8 [ 1012.633013][ T5788] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1012.652781][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2128'. [ 1012.667619][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.682790][ T5788] usb 6-1: Product: syz [ 1012.692327][ T5788] usb 6-1: Manufacturer: syz [ 1012.697002][ T5788] usb 6-1: SerialNumber: syz [ 1012.708836][ T5788] usb 6-1: config 0 descriptor?? [ 1012.719986][ T5788] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1012.840450][T10310] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1013.306623][ T5699] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1013.505709][ T5699] usb 8-1: not running at top speed; connect to a high speed hub [ 1013.528627][ T5699] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1013.576557][ T5699] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.625322][ T5699] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1013.672142][ T5699] usb 8-1: language id specifier not provided by device, defaulting to English [ 1013.729803][T12938] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1013.741140][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.126877][ T5788] gspca_sonixj: reg_w1 err -110 [ 1014.590948][ T5699] usb 8-1: Product: syz [ 1014.756801][ T5699] usb 8-1: Manufacturer: syz [ 1014.791043][ T5699] usb 8-1: SerialNumber: syz [ 1015.077291][ T5788] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1015.115686][ T5788] usb 9-1: USB disconnect, device number 34 [ 1015.207204][T14341] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1015.213756][T14341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1015.221414][T14341] vhci_hcd vhci_hcd.0: Device attached [ 1015.290930][T14344] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 1015.378885][T12938] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1015.411338][T12938] usb 7-1: config 171 has an invalid interface number: 109 but max is 0 [ 1015.430886][T12938] usb 7-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.445841][T12938] usb 7-1: config 171 has no interface number 0 [ 1015.463368][T12938] usb 7-1: config 171 interface 109 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1015.479593][T12938] usb 7-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1015.509127][T12938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.517242][T10310] usb 49-1: new low-speed USB device number 8 using vhci_hcd [ 1015.531391][T12938] usb 7-1: Product: syz [ 1015.549195][T12938] usb 7-1: Manufacturer: syz [ 1015.565302][T12938] usb 7-1: SerialNumber: syz [ 1015.570833][T14326] bond0: left promiscuous mode [ 1015.598982][T14342] vhci_hcd: connection reset by peer [ 1015.618767][ T8588] vhci_hcd vhci_hcd.8: stop threads [ 1015.633676][ T8588] vhci_hcd vhci_hcd.8: release socket [ 1015.642092][ T8588] vhci_hcd vhci_hcd.8: disconnect device [ 1015.850077][T12938] ath6kl: Failed to submit usb control message: -71 [ 1015.878525][T12938] ath6kl: unable to send the bmi data to the device: -71 [ 1015.898760][T12938] ath6kl: Unable to send get target info: -71 [ 1015.928960][T12938] ath6kl: Failed to init ath6kl core: -71 [ 1015.941975][T12938] ath6kl_usb 7-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1015.981315][T12938] usb 7-1: USB disconnect, device number 41 [ 1016.763161][ T5699] usb 8-1: 0:1 : does not exist [ 1016.766302][ T5788] usb 6-1: USB disconnect, device number 33 [ 1016.851523][ T5699] usb 8-1: USB disconnect, device number 33 [ 1016.878200][T14356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2139'. [ 1016.911072][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.928700][T14356] bond0: (slave bond_slave_0): Releasing backup interface [ 1017.379244][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2142'. [ 1017.478764][T14356] bond_slave_0: entered promiscuous mode [ 1017.492575][T14356] bond_slave_0: entered allmulticast mode [ 1017.500282][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 1017.541136][T14366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.554181][T14366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.593620][T14366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.603136][T14366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.615110][T14366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.625558][T14366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.640387][T14366] veth1_vlan: left promiscuous mode [ 1017.646609][T14366] veth0_vlan: left promiscuous mode [ 1017.656548][T14366] veth0_vlan: entered promiscuous mode [ 1017.663942][T14366] veth1_vlan: entered promiscuous mode [ 1017.673677][T14366] veth1_macvtap: left promiscuous mode [ 1017.680258][T14366] veth0_macvtap: left promiscuous mode [ 1017.686939][T14366] veth0_macvtap: entered promiscuous mode [ 1017.693843][T14366] veth1_macvtap: entered promiscuous mode [ 1017.705941][T14366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.714121][T14366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.722325][T14366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.730578][T14366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.742493][T14366] virt_wifi0: entered promiscuous mode [ 1017.752681][T14366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.967101][T14379] binder: 14375:14379 ioctl c018620c 200000000240 returned -22 [ 1018.012793][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2145'. [ 1018.052666][T13919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.059890][T13919] bridge0: port 1(bridge_slave_0) entered listening state [ 1018.180036][T13919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.187234][T13919] bridge0: port 2(bridge_slave_1) entered listening state [ 1018.559211][T14388] bond0: (slave bond_slave_1): Releasing backup interface [ 1018.651788][ T8591] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.689150][ T8591] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.740028][ T8591] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.775073][ T8591] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.000644][T14414] syzkaller0: entered promiscuous mode [ 1019.012247][T14414] syzkaller0: entered allmulticast mode [ 1019.039968][ T30] audit: type=1400 audit(1786424074.669:1194): avc: denied { write } for pid=14395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.159695][ T30] audit: type=1400 audit(1786424074.779:1195): avc: denied { write } for pid=14419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.220987][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1019.303069][ T30] audit: type=1400 audit(1786424074.909:1196): avc: denied { append } for pid=14426 comm="syz.7.2156" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1019.416803][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1019.460063][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2157'. [ 1019.474037][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.497224][ T24] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.533306][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.571185][ T24] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1019.584495][ T30] audit: type=1326 audit(1786424075.167:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.8.2158" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394299e0d9 code=0x0 [ 1020.840630][ T9936] usb 6-1: USB disconnect, device number 34 [ 1021.059719][T14453] FAULT_INJECTION: forcing a failure. [ 1021.059719][T14453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.075623][T10310] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1021.089943][T14456] binder: BINDER_SET_CONTEXT_MGR already set [ 1021.114899][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 1021.116818][T14456] binder: 14454:14456 ioctl 4018620d 200000004a80 returned -16 [ 1021.133063][T14453] CPU: 0 UID: 0 PID: 14453 Comm: syz.7.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.133094][T14453] Tainted: [L]=SOFTLOCKUP [ 1021.133101][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1021.133111][T14453] Call Trace: [ 1021.133117][T14453] [ 1021.133124][T14453] dump_stack_lvl+0x100/0x190 [ 1021.133153][T14453] should_fail_ex.cold+0x5/0xa [ 1021.133177][T14453] _copy_from_user+0x2e/0xd0 [ 1021.133202][T14453] io_uring_setup+0xc0/0x160 [ 1021.133232][T14453] ? __pfx_io_uring_setup+0x10/0x10 [ 1021.133257][T14453] ? find_held_lock+0x2b/0x80 [ 1021.133274][T14453] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1021.133295][T14453] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1021.133332][T14453] ? ksys_write+0x1ac/0x250 [ 1021.133349][T14453] ? __pfx_ksys_write+0x10/0x10 [ 1021.133370][T14453] __x64_sys_io_uring_setup+0xc2/0x170 [ 1021.133404][T14453] do_syscall_64+0x115/0x870 [ 1021.133427][T14453] ? clear_bhb_loop+0x70/0xc0 [ 1021.133448][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.133467][T14453] RIP: 0033:0x7f6229d9e0d9 [ 1021.133486][T14453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.133503][T14453] RSP: 002b:00007f622ab9aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1021.133521][T14453] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f6229d9e0d9 [ 1021.133533][T14453] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000cb0 [ 1021.133544][T14453] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1021.133554][T14453] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1021.133565][T14453] R13: 0000200000000b10 R14: 00007f622ab9afd8 R15: 0000000000000000 [ 1021.133593][T14453] [ 1021.344557][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 1021.399572][ T30] audit: type=1400 audit(1786424076.810:1198): avc: denied { write } for pid=14427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.420473][T14462] binder: 14461:14462 ioctl 4004551e 200000000140 returned -22 [ 1021.480671][ T30] audit: type=1400 audit(1786424076.912:1199): avc: denied { write } for pid=14460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.540140][T14462] binder: 14461:14462 ioctl c0306201 200000000440 returned -14 [ 1022.821216][ T30] audit: type=1400 audit(1786424078.158:1200): avc: denied { ioctl } for pid=14479 comm="syz.7.2171" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1022.872115][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2169'. [ 1023.093525][T10666] ================================================================== [ 1023.101613][T10666] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40 [ 1023.109320][T10666] Read of size 1 at addr ffff88803553a5a0 by task syz.7.1296/10666 [ 1023.117184][T10666] [ 1023.119488][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.7.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.119505][T10666] Tainted: [L]=SOFTLOCKUP [ 1023.119509][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1023.119516][T10666] Call Trace: [ 1023.119522][T10666] [ 1023.119528][T10666] dump_stack_lvl+0x100/0x190 [ 1023.119545][T10666] print_report+0x13d/0x4b0 [ 1023.119562][T10666] ? __virt_addr_valid+0x239/0x430 [ 1023.119583][T10666] ? _raw_spin_lock_bh+0x33/0x40 [ 1023.119598][T10666] kasan_report+0xdf/0x1c0 [ 1023.119614][T10666] ? _raw_spin_lock_bh+0x33/0x40 [ 1023.119627][T10666] ? _raw_spin_lock_bh+0x33/0x40 [ 1023.119640][T10666] __kasan_check_byte+0x36/0x50 [ 1023.119655][T10666] lock_acquire+0x132/0x370 [ 1023.119669][T10666] ? do_raw_spin_lock+0x128/0x260 [ 1023.119685][T10666] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1023.119703][T10666] _raw_spin_lock_bh+0x33/0x40 [ 1023.119715][T10666] ? bt_accept_unlink+0x64/0x370 [ 1023.119731][T10666] bt_accept_unlink+0x64/0x370 [ 1023.119749][T10666] ? __local_bh_enable_ip+0x9e/0x120 [ 1023.119773][T10666] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 1023.119794][T10666] l2cap_chan_del+0xa6/0x920 [ 1023.119807][T10666] l2cap_conn_del+0x34f/0x6b0 [ 1023.119825][T10666] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1023.119837][T10666] l2cap_disconn_cfm+0x9f/0x100 [ 1023.119850][T10666] hci_conn_hash_flush+0x10e/0x280 [ 1023.119868][T10666] hci_dev_close_sync+0x5cf/0x13c0 [ 1023.119886][T10666] ? find_held_lock+0x2b/0x80 [ 1023.119897][T10666] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1023.119917][T10666] hci_dev_do_close+0x2e/0xb0 [ 1023.119932][T10666] hci_unregister_dev+0x23f/0x690 [ 1023.119949][T10666] vhci_release+0x17d/0x230 [ 1023.119961][T10666] ? __pfx_vhci_release+0x10/0x10 [ 1023.119973][T10666] __fput+0x3ff/0xb50 [ 1023.119988][T10666] task_work_run+0x150/0x240 [ 1023.120001][T10666] ? __pfx_task_work_run+0x10/0x10 [ 1023.120015][T10666] do_exit+0x951/0x2ae0 [ 1023.120026][T10666] ? __pfx_do_exit+0x10/0x10 [ 1023.120036][T10666] ? cgroup_update_frozen_flag+0x125/0x240 [ 1023.120055][T10666] ? find_held_lock+0x2b/0x80 [ 1023.120065][T10666] ? get_signal+0x184f/0x21e0 [ 1023.120081][T10666] do_group_exit+0xd5/0x2a0 [ 1023.120092][T10666] get_signal+0x1ec7/0x21e0 [ 1023.120109][T10666] ? __pfx_get_signal+0x10/0x10 [ 1023.120124][T10666] ? __lock_acquire+0x49f/0x1a40 [ 1023.120139][T10666] arch_do_signal_or_restart+0x91/0x7e0 [ 1023.120154][T10666] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1023.120169][T10666] ? do_raw_spin_lock+0x128/0x260 [ 1023.120186][T10666] exit_to_user_mode_loop+0x139/0x6f0 [ 1023.120202][T10666] ? rcu_is_watching+0x12/0xc0 [ 1023.120220][T10666] ret_from_fork+0x932/0xd50 [ 1023.120237][T10666] ? __pfx_ret_from_fork+0x10/0x10 [ 1023.120253][T10666] ? __switch_to+0x800/0x10f0 [ 1023.120265][T10666] ret_from_fork_asm+0x1a/0x30 [ 1023.120286][T10666] [ 1023.120290][T10666] [ 1023.395456][T10666] Allocated by task 5699: [ 1023.399758][T10666] kasan_save_stack+0x30/0x50 [ 1023.404427][T10666] kasan_save_track+0x14/0x30 [ 1023.409082][T10666] __kasan_kmalloc+0xaa/0xb0 [ 1023.413652][T10666] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 1023.420049][T10666] kmalloc_reserve+0xe8/0x350 [ 1023.424705][T10666] __alloc_skb+0x185/0x710 [ 1023.429097][T10666] mld_newpack.isra.0+0x18e/0xa20 [ 1023.434099][T10666] add_grhead+0x299/0x340 [ 1023.438419][T10666] add_grec+0x1389/0x1930 [ 1023.442729][T10666] mld_ifc_work+0x571/0xc10 [ 1023.447215][T10666] process_one_work+0xa23/0x1940 [ 1023.452142][T10666] worker_thread+0x5ef/0xe50 [ 1023.456715][T10666] kthread+0x370/0x450 [ 1023.460758][T10666] ret_from_fork+0x72b/0xd50 [ 1023.465329][T10666] ret_from_fork_asm+0x1a/0x30 [ 1023.470070][T10666] [ 1023.472378][T10666] Freed by task 5699: [ 1023.476329][T10666] kasan_save_stack+0x30/0x50 [ 1023.480987][T10666] kasan_save_track+0x14/0x30 [ 1023.485641][T10666] kasan_save_free_info+0x3b/0x70 [ 1023.490643][T10666] __kasan_slab_free+0x5f/0x80 [ 1023.495395][T10666] kfree+0x22b/0x6c0 [ 1023.499266][T10666] skb_free_head+0xb9/0x160 [ 1023.503752][T10666] skb_release_data+0x6c5/0x8e0 [ 1023.508581][T10666] sk_skb_reason_drop+0x102/0x1b0 [ 1023.513595][T10666] ip6_mc_input+0x832/0xf50 [ 1023.518076][T10666] ipv6_rcv+0x34c/0x3d0 [ 1023.522208][T10666] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1023.528087][T10666] __netif_receive_skb+0x1f/0x120 [ 1023.533102][T10666] process_backlog+0x37a/0x1580 [ 1023.537930][T10666] __napi_poll.constprop.0+0xaf/0x450 [ 1023.543287][T10666] net_rx_action+0xa40/0xf20 [ 1023.547858][T10666] handle_softirqs+0x1ea/0x9b0 [ 1023.552598][T10666] do_softirq+0xac/0xe0 [ 1023.556742][T10666] __local_bh_enable_ip+0xf8/0x120 [ 1023.561840][T10666] __dev_queue_xmit+0xa27/0x4970 [ 1023.566749][T10666] ip6_finish_output2+0xfd4/0x1ce0 [ 1023.571844][T10666] __ip6_finish_output+0x357/0xdf0 [ 1023.576935][T10666] ip6_output+0x2aa/0xa60 [ 1023.581240][T10666] NF_HOOK.constprop.0+0x115/0x5a0 [ 1023.586335][T10666] mld_sendpack+0x8f7/0xec0 [ 1023.590818][T10666] mld_ifc_work+0x75a/0xc10 [ 1023.595308][T10666] process_one_work+0xa23/0x1940 [ 1023.600229][T10666] worker_thread+0x5ef/0xe50 [ 1023.604809][T10666] kthread+0x370/0x450 [ 1023.608860][T10666] ret_from_fork+0x72b/0xd50 [ 1023.613437][T10666] ret_from_fork_asm+0x1a/0x30 [ 1023.618188][T10666] [ 1023.620491][T10666] The buggy address belongs to the object at ffff88803553a000 [ 1023.620491][T10666] which belongs to the cache kmalloc-2k of size 2048 [ 1023.634524][T10666] The buggy address is located 1440 bytes inside of [ 1023.634524][T10666] freed 2048-byte region [ffff88803553a000, ffff88803553a800) [ 1023.648472][T10666] [ 1023.650773][T10666] The buggy address belongs to the physical page: [ 1023.657154][T10666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803553f000 pfn:0x35538 [ 1023.667203][T10666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1023.675741][T10666] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1023.684240][T10666] page_type: f5(slab) [ 1023.688226][T10666] raw: 00fff00000000240 ffff88813fe22000 ffffea0000c88010 ffffea0001cf8010 [ 1023.696785][T10666] raw: ffff88803553f000 0000000800080006 00000000f5000000 0000000000000000 [ 1023.705346][T10666] head: 00fff00000000240 ffff88813fe22000 ffffea0000c88010 ffffea0001cf8010 [ 1023.713991][T10666] head: ffff88803553f000 0000000800080006 00000000f5000000 0000000000000000 [ 1023.722644][T10666] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1023.731289][T10666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1023.739929][T10666] page dumped because: kasan: bad access detected [ 1023.746321][T10666] page_owner tracks the page as allocated [ 1023.752014][T10666] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5606, tgid 5606 (syz-executor), ts 72393172769, free_ts 54451714803 [ 1023.773359][T10666] post_alloc_hook+0xfd/0x120 [ 1023.778023][T10666] get_page_from_freelist+0xf48/0x3530 [ 1023.783469][T10666] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1023.789341][T10666] new_slab+0xa2/0x640 [ 1023.793397][T10666] refill_objects+0xe3/0x410 [ 1023.797968][T10666] __pcs_replace_empty_main+0x376/0x680 [ 1023.803498][T10666] __kmalloc_cache_noprof+0x479/0x6c0 [ 1023.808938][T10666] rtnl_newlink+0x126/0x2380 [ 1023.813508][T10666] rtnetlink_rcv_msg+0x95e/0xe90 [ 1023.818425][T10666] netlink_rcv_skb+0x159/0x420 [ 1023.823181][T10666] netlink_unicast+0x585/0x850 [ 1023.827933][T10666] netlink_sendmsg+0x8b0/0xda0 [ 1023.832678][T10666] __sys_sendto+0x48b/0x4e0 [ 1023.837160][T10666] __x64_sys_sendto+0xe0/0x1c0 [ 1023.841908][T10666] do_syscall_64+0x115/0x870 [ 1023.846566][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.852434][T10666] page last free pid 5447 tgid 5447 stack trace: [ 1023.858744][T10666] __free_frozen_pages+0x79f/0x1090 [ 1023.863941][T10666] qlist_free_all+0x47/0xf0 [ 1023.868423][T10666] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1023.873869][T10666] __kasan_slab_alloc+0x69/0x90 [ 1023.878696][T10666] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1023.884138][T10666] do_getname+0x35/0x390 [ 1023.888369][T10666] do_sys_openat2+0xc7/0x1e0 [ 1023.892943][T10666] __x64_sys_openat+0x12d/0x210 [ 1023.897942][T10666] do_syscall_64+0x115/0x870 [ 1023.902509][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.908388][T10666] [ 1023.910697][T10666] Memory state around the buggy address: [ 1023.916306][T10666] ffff88803553a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1023.924519][T10666] ffff88803553a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1023.932560][T10666] >ffff88803553a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1023.940598][T10666] ^ [ 1023.945698][T10666] ffff88803553a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1023.953758][T10666] ffff88803553a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1023.961793][T10666] ================================================================== [ 1023.969878][T10666] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1023.977061][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.7.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.987979][T10666] Tainted: [L]=SOFTLOCKUP [ 1023.992288][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1024.002322][T10666] Call Trace: [ 1024.005589][T10666] [ 1024.008505][T10666] dump_stack_lvl+0x100/0x190 [ 1024.013167][T10666] vpanic+0x552/0x970 [ 1024.017131][T10666] ? __pfx_vpanic+0x10/0x10 [ 1024.021606][T10666] ? mark_held_locks+0x40/0x70 [ 1024.026353][T10666] ? irqentry_exit+0x24d/0xa00 [ 1024.031094][T10666] ? _raw_spin_lock_bh+0x33/0x40 [ 1024.036006][T10666] panic+0xd1/0xe0 [ 1024.039701][T10666] ? __pfx_panic+0x10/0x10 [ 1024.044089][T10666] ? check_panic_on_warn+0x1f/0x90 [ 1024.049174][T10666] check_panic_on_warn.cold+0x19/0x34 [ 1024.054516][T10666] end_report.part.0+0x3a/0x90 [ 1024.059255][T10666] kasan_report.cold+0xe/0x18 [ 1024.063910][T10666] ? _raw_spin_lock_bh+0x33/0x40 [ 1024.068826][T10666] ? _raw_spin_lock_bh+0x33/0x40 [ 1024.073737][T10666] __kasan_check_byte+0x36/0x50 [ 1024.078565][T10666] lock_acquire+0x132/0x370 [ 1024.083044][T10666] ? do_raw_spin_lock+0x128/0x260 [ 1024.088047][T10666] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1024.093396][T10666] _raw_spin_lock_bh+0x33/0x40 [ 1024.098142][T10666] ? bt_accept_unlink+0x64/0x370 [ 1024.103071][T10666] bt_accept_unlink+0x64/0x370 [ 1024.107809][T10666] ? __local_bh_enable_ip+0x9e/0x120 [ 1024.113079][T10666] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 1024.118433][T10666] l2cap_chan_del+0xa6/0x920 [ 1024.122997][T10666] l2cap_conn_del+0x34f/0x6b0 [ 1024.127649][T10666] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1024.133082][T10666] l2cap_disconn_cfm+0x9f/0x100 [ 1024.137923][T10666] hci_conn_hash_flush+0x10e/0x280 [ 1024.143034][T10666] hci_dev_close_sync+0x5cf/0x13c0 [ 1024.148129][T10666] ? find_held_lock+0x2b/0x80 [ 1024.152785][T10666] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1024.158331][T10666] hci_dev_do_close+0x2e/0xb0 [ 1024.163079][T10666] hci_unregister_dev+0x23f/0x690 [ 1024.168089][T10666] vhci_release+0x17d/0x230 [ 1024.172572][T10666] ? __pfx_vhci_release+0x10/0x10 [ 1024.177576][T10666] __fput+0x3ff/0xb50 [ 1024.181540][T10666] task_work_run+0x150/0x240 [ 1024.186110][T10666] ? __pfx_task_work_run+0x10/0x10 [ 1024.191194][T10666] do_exit+0x951/0x2ae0 [ 1024.195321][T10666] ? __pfx_do_exit+0x10/0x10 [ 1024.199889][T10666] ? cgroup_update_frozen_flag+0x125/0x240 [ 1024.205683][T10666] ? find_held_lock+0x2b/0x80 [ 1024.210341][T10666] ? get_signal+0x184f/0x21e0 [ 1024.215008][T10666] do_group_exit+0xd5/0x2a0 [ 1024.219483][T10666] get_signal+0x1ec7/0x21e0 [ 1024.223964][T10666] ? __pfx_get_signal+0x10/0x10 [ 1024.228877][T10666] ? __lock_acquire+0x49f/0x1a40 [ 1024.233791][T10666] arch_do_signal_or_restart+0x91/0x7e0 [ 1024.239321][T10666] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1024.245471][T10666] ? do_raw_spin_lock+0x128/0x260 [ 1024.250485][T10666] exit_to_user_mode_loop+0x139/0x6f0 [ 1024.255837][T10666] ? rcu_is_watching+0x12/0xc0 [ 1024.260583][T10666] ret_from_fork+0x932/0xd50 [ 1024.265163][T10666] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.270252][T10666] ? __switch_to+0x800/0x10f0 [ 1024.274920][T10666] ret_from_fork_asm+0x1a/0x30 [ 1024.279671][T10666] [ 1024.282881][T10666] Kernel Offset: disabled [ 1024.287187][T10666] Rebooting in 86400 seconds..