last executing test programs: 7m42.775625576s ago: executing program 2 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) (fail_nth: 3) 7m42.26497124s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xb4, 0x6d, &(0x7f00000005c0)="95c0418957b162dc8c11e401a9213163bc0457822f2307870f41bd5b17cf285d274df7df720923d04172a26724e15f4029ac8919e3df60f9124f13ae6b63cdd27a6e701291a138035baa27c521c6afc988f03aaa17b2a8c3360b1ebca487db20a30387eb35a52a8b51195226ea9fc9b275ae778b20a1a2fd0206162ea561ef9b2077f00f6e2ca50890f3e512378073f2844531e0835e652c871b12219822a35fff60a7291104a65fdbe4a016deb6b3bce31f8436", &(0x7f0000000500)=""/109, 0x1, 0x0, 0x70, 0x65, &(0x7f0000000680)="122732e584b60e65b60058473f714044e957e251d0b5dc79d20daf6f7aae14cb7b8ff8a8fc105f561e3e08c317ccc57723c0571bcd70fb2a1d1b2932174974c67e0122a5c2621f488b3727d79406e0bfbd1b9501c13ac79ca549e9befd7b4527e68f6e32089483b9f36fa8844ade7dc7", &(0x7f0000000700)="13e4fdf669c7f40e17659c4d3d894113804441f96c73b921d822eb538bf370713818abddaac3665bc019713f6e55f9f9d729dd5a208a6f0ca9d68dc82b2c6b76f38f57fe96d0ba4ec1efd8e5913ae90baec6c0a0cec6a39f226690c1d4822f2b5e004da620", 0x2, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000003bfa200000000000007020000f803ffffb703000008000000b704000000000000120c00000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9968000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e04, 0xfffff704, @loopback, 0x7}, 0x1c) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x811) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f00000002c0), &(0x7f0000000cc0)=r1}, 0x20) 7m40.844234657s ago: executing program 2 (id=65): r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "db4700"}]}}, 0x0}, 0x0) 7m39.592077361s ago: executing program 2 (id=73): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "dc855a92"}]}}, 0x0}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7m34.824227139s ago: executing program 2 (id=93): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x161902, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000300)={0xa10000, 0x200, 0x8, r1, 0x0, &(0x7f00000002c0)={0x990a5f, 0x6, '\x00', @value64=0xda}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000000)={0xd, 0xc, 0x8, 0x1}, 0x10) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7m34.00457326s ago: executing program 2 (id=95): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000053c0)=0x10001, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x10103) epoll_pwait2(r1, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0)={[0x4]}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000680)={'filter\x00', 0x2, [{}, {}]}, 0x48) 7m33.194089944s ago: executing program 32 (id=95): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000053c0)=0x10001, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x10103) epoll_pwait2(r1, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0)={[0x4]}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000680)={'filter\x00', 0x2, [{}, {}]}, 0x48) 3m3.116788329s ago: executing program 4 (id=1078): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r2, 0x0, 0x0) keyctl$read(0xb, r2, &(0x7f0000000080)=""/91, 0x5b) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3m1.887977204s ago: executing program 4 (id=1082): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x3, 0x6, 0x7, 0xfffffffe}, {0x9, 0x6, 0xc9, 0x8}, {0x33, 0x4, 0x8, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000085000000500000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000062004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mq_timedreceive(r5, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000038000180060001000a00000008000500000000000c00070000000000000000000800090000000000080006006f766600080008"], 0xa4}, 0x1, 0x0, 0x0, 0x60004804}, 0x814) 3m1.001010542s ago: executing program 4 (id=1088): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f00000002c0)={0x1ff, 0x31, 0x8, 0x6, 0x5, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x9, 0x800, 0x1) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003f000000080003008472ce0f5470e18d82896dc5318c71acde41d8117fdbbb48b3f8dade7528abe15329db9c4c3608b78244df10ed43338a4695d6c9f2", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) 3m0.556337755s ago: executing program 4 (id=1089): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000001780)={&(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x1, 0x8}) getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000000}], 0x2, 0xa0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 2m59.531184224s ago: executing program 4 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x16c2}}}, &(0x7f0000000180)=0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setreuid(0x0, r9) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0, 0xffffffffffffff1e}], 0x1, 0x56, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000001c0)={r5, 0xfff}, 0x8) 2m56.284943791s ago: executing program 4 (id=1099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$rtc(&(0x7f0000001400), 0x0, 0x20080) (async) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) (async) ftruncate(r0, 0xc17a) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000100)={@rand_addr, @initdev}, &(0x7f0000000140)=0xc) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000898000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m47.639934268s ago: executing program 1 (id=1141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) fstat(r1, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000340)=""/210, 0x9}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000040190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m46.528973285s ago: executing program 1 (id=1146): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$rtc(&(0x7f0000001400), 0x0, 0x20080) r0 = io_uring_setup(0x324, &(0x7f0000000100)={0x0, 0xfffffff9, 0x800, 0x200000, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000080)=0xa4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000440)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x48811) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x7, 0xfffffffd, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) 2m43.427427744s ago: executing program 1 (id=1158): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffc, 0x0, 0x1, 0x11, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="050000004000000000000000", @ANYRES32, @ANYBLOB='\n\x00'], 0x50) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m43.309266085s ago: executing program 1 (id=1159): sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x4064810) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000010000fe80000000000000000000000000000e800086dd"], 0xfdef) 2m41.569548647s ago: executing program 1 (id=1163): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x33, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2m41.174729061s ago: executing program 33 (id=1099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$rtc(&(0x7f0000001400), 0x0, 0x20080) (async) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) (async) ftruncate(r0, 0xc17a) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000100)={@rand_addr, @initdev}, &(0x7f0000000140)=0xc) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000898000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m40.725418057s ago: executing program 1 (id=1169): mkdir(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eb7d6306f8c63108fe3377ac28444c7490bd4434991ad965ac7df185b2d7df3f5f7af8e5084cc155dfb9aeec9ce8bf62343cddc05e794e69f5697117d8f04d4fc5e", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2501000000ebffffff0b"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008000) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5736e404020051694bdc000000109022d00010000000009040000035883b2000905e2"], 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = getpgrp(0x0) capset(&(0x7f00000000c0)={0x20071026, r4}, 0x0) tkill(r4, 0x3f) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "fbc5d609a2e3f614", "916a9e0dfd5a73523cc18c2e5153e77c26408b4b282cafb261ba08c7cf5e2c1a", "3d001864", "31687d6f223c93c2"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x40038) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80011) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m25.529391204s ago: executing program 34 (id=1169): mkdir(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eb7d6306f8c63108fe3377ac28444c7490bd4434991ad965ac7df185b2d7df3f5f7af8e5084cc155dfb9aeec9ce8bf62343cddc05e794e69f5697117d8f04d4fc5e", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2501000000ebffffff0b"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008000) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5736e404020051694bdc000000109022d00010000000009040000035883b2000905e2"], 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = getpgrp(0x0) capset(&(0x7f00000000c0)={0x20071026, r4}, 0x0) tkill(r4, 0x3f) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "fbc5d609a2e3f614", "916a9e0dfd5a73523cc18c2e5153e77c26408b4b282cafb261ba08c7cf5e2c1a", "3d001864", "31687d6f223c93c2"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x40038) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80011) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 12.272756205s ago: executing program 3 (id=1679): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xf000, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0x273}], 0x1) 10.201271284s ago: executing program 3 (id=1685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_LOCK(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000409ff8000000010000000800010003000000080002000100000004000480040008802c000c800c000b8008000a009ff800001c"], 0x58}}, 0x0) 9.321513637s ago: executing program 3 (id=1687): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec01020301"], 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 8.961155723s ago: executing program 6 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x23c, 0x0, 0x0, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000002bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0xa00, 0x0) 8.358120823s ago: executing program 6 (id=1692): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x18, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}, "f439992d"}}}}}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x0, 0x223, 0x0, 0x4, {0x3}}, 0x14}}, 0x440d6) 8.240073805s ago: executing program 6 (id=1694): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000080)={r5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce287166762700125e8455d6727224c3554251c3274b7700639fcc6a8f0586d29ea9dbd37ec5b66ca2cedcd8603d43609995574409af5bb8fff835bea33652cad205c41f6775e9440c5ca78af3390154d3ffeac7095e960193bc9ea20c272abef4b1b09b453686df3d690d73cae2e427ea28b8d2863eef0a9e9aa544db834a4a9067a8"], 0xe0}], 0x1}, 0x400c0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)=0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/user\x00') ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) 7.586610555s ago: executing program 6 (id=1701): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r0, 0x1, 0x6, @multicast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) rt_sigaction(0x2b, &(0x7f0000000240)={0x0, 0x8000002, 0x0, {[0x1]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x24000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @timestamp, @timestamp], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x7003, [0x0, 0x0, 0xffffffff, 0x744, 0x68e8]}, &(0x7f0000000100)=0x54) 7.452996087s ago: executing program 5 (id=1702): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r0, 0x1, 0x6, @multicast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) rt_sigaction(0x2b, &(0x7f0000000240)={0x0, 0x8000002, 0x0, {[0x1]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x24000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @timestamp, @timestamp], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x7003, [0x0, 0x0, 0xffffffff, 0x744, 0x68e8]}, &(0x7f0000000100)=0x54) 5.290868896s ago: executing program 3 (id=1704): creat(&(0x7f00000001c0)='./bus\x00', 0x77) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0xfff) socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x26, &(0x7f0000000240)=""/38, 0x41000, 0x60, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x5, 0xd, 0x2}], 0x10, 0x10000, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.189361943s ago: executing program 7 (id=1705): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004900010029bd7000ffdbdf250a000000", @ANYRES32, @ANYBLOB="010000000800020002000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x24048804}, 0x810) 4.916633574s ago: executing program 6 (id=1706): syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000640)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @from_mac, @device_b, @from_mac, {0x8, 0x9}}, @random="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"}, 0x232) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000000000f5000040"]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) read$msr(r3, &(0x7f0000019680)=""/102376, 0x18fe8) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x80000, 0x700, 0x1, 0x1d9}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_setup(0x4111, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, 0x0, &(0x7f0000001240)) 3.541047384s ago: executing program 0 (id=1707): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x4a810da0, 0x4) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x19}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}, {&(0x7f0000000280)="6dc52338b0676bb6fb54f0557dad7c4f72c831aebf22f71fd0d492f5fe70839b81292135038c2de38801da28b6b3824409782041e5053e9c79f77a88e7dfa8bc4d34dda5031b29089739e0a2806f381d29880e9e0ae55e47f3316ca7708285d078713c35b616288ae15ddfc3002b7e2579dc6b8256bf4e431fa12bcaa949faa82c00c70bb9a8acc7e66f36a008388945eaa2f32274853378d5bbdd290ef71d82070000003683fb09b6dedcb3badc5dc3470591bbb428a4b689489fa11fa4ca", 0xbf}], 0x2) 3.485111982s ago: executing program 7 (id=1708): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$TCFLSH(r0, 0x5608, 0xfffffffffffffffe) 3.3727978s ago: executing program 3 (id=1709): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in6={0xa, 0x4e21, 0x9, @private2, 0x7}, @in6={0xa, 0x4e20, 0xfffffc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000500)={r4, 0x8}, &(0x7f0000000540)=0x8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f00000000001fff0058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.329100848s ago: executing program 5 (id=1710): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x0) (async) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x2) (async) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x3) (async) socket(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x42e6, &(0x7f0000000080)={0x0, 0x10005eda, 0x10000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) (async) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x5908}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x71}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002140)=@newtfilter={0x1948, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff1}, {0xfff3, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1918, 0x2, [@TCA_CGROUP_ACT={0x1914, 0x1, [@m_tunnel_key={0x108, 0x16, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}}]}, {0xae, 0x6, "a79564eb6d3369bca01162d468dd11f8d1ff20ce6c7bf4fac931b56e759e35acdd8bee0de817cf74b29b04266c680a14c33de3e63a5df93b52945cd2d38ac9dbda888872b3c04882e843e4cf95400545ac86dffac79bd5aac81a23c39bea85b28cf55cc96a8f1db2db5da2b9554a8f7b71a5047d84a672e66672f5a602a70d43bc70f21da26e0c18a189fd1661651e61989cb41df743507b53be1bedd43d9ed0d02831fd98cff859438e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x70, 0x12, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x3c, 0x6, "38a0b5d53ab8884885ab873b7d030c36344778fb3d111f096e7c7f2134f94e977b06e79051cfe907d9a1e5866916c4ba1148d1b8de69112e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x164, 0x8, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x200, 0x1}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xfff, 0x3, 0x1, 0x8001}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xe5, 0x6, "12159bca3d3e4dbf3df6f56da69986ddf207152c1c567dda32a110c01684d3998cb3dbd394a798659ac6f2a8eadbc340ca4af1894c067069f5be04ae405fd94d5cfec340f55241611dcf32cad198088da8d9e6e0f25d7ad279b3290034ad9b4cf079dc2586088e950fd717b95370c3b12d1be3492b5cc5b5e50a04c43c728fcca07882ea4b6b56655b86cc3677e983f80ab30535daa03338003f6f6cf3b6c02de30b43c66e983137a939bc11d74822003d554570e723d5161ec626f4899f3d34bbef537f25cc3fb31ae12bb87863dc8ef40fb6d219b2370bc0f6e2b8958503bf67"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x10c, 0x10, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xea}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}]}, {0x9b, 0x6, "3332e7ec5f9664a7fa670b1f69cda1f8760179f6069071a6007d0aa36f68a16830bfa672b6d84ca00807e5daa4df1bc830a8ef9f565b7daf5f295b78de7960acbef94aa35e33d51d2251192e6f9cfb3e060b03822927605870fb2cda53121fcedda880afa5e17b4c5cef37fd43a42b5775031dc4cc0ff444b872263cc9480c909bfc7a666579569f553752bf748c04a625c40cbe3d87ff"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x20c, 0x1e, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x20000000, 0x9, 0x20000000}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x7, 0x8, 0x4, 0x4}, 0x4fe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffff2, 0x10000000, 0x4, 0x8}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0xffffffffffffffff, 0x80000000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x71ecd502, 0x0, 0x7ff, 0xfffffffb}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x1, 0x9, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x3, 0x7, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x9, 0xb}, 0xcfe}}]}, {0xfb, 0x6, "f733efa66e431a5a426c207452d0ba5540926497615a7e47c02a689f40f96908c73be94a46dc87b385b8b6f7ee09e639bb118e19fe46ce3e8e3895f4ee1d93c10a6f2ed1565d845393b4c946745aded8918d69f05517cb2b58494c9d5cabbd431668d4e41c4d4714e588526ba32e6cb917a97a1c5d3e31a4bea073f7841f2b525e1b0508ad0afd3e8beeb5b991516fd25ef54a6a540c9fa61effbe9610c7ec4b14fbd5d3e922694080e29d604d544b6c1d2a4439efa36455abeabd174db97020368e359ec884fdb3af086858f0e6c9b707593ef868de615d9f8facb3f82621dd4920701f6a014d60f6855acc8fa6d42b3811f2e9cfb591"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x150, 0xb, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x7, 0x8, 0x0, 0x2}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="1247f2589276"}]}, {0xe6, 0x6, "8b057929094d4abc2c828acfc44ca3e6f1f30cea1fc13fcf2c76c026d591f8aaa576e0701af21893d178e9592f1ab21a0660b3f92da750ccaf8340efb9518f16760e6e51dce7ca010e54a4f9c13391abce23ceb36b2295905dd2a1db49a39ca7f141b267fe7b2941c226ab8c99ed892d778c8eed3146e73c1d8cb999b3f5451d7aa04de30bed10847f8ade9a6d1d009ab63b57fafc0a0b1910e79136f05aa70994f88fc4fec9c84b3f94c5590878c9fb992abf8428f2d2aca409fee3946d1e9a2f55899e54c242bf7ebc9d1984b643973e6c219d55759f5d9fb5b52e6f2adfefed1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ife={0x10c, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xf3ac}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xbe, 0x6, "35aee1496106f6536c6faa026e3d8fea5911836cfc740563bbc7ec469db03b4e104171fd0e42158dd72180608210f36ef86f2c4e7e9a32a83ab6fed2a299aa73268b0afa58a781a4b619143835a1fe4d6643c053ecf1d5d01841d02e5838096633873b77f6f0ea2888b43679737a165b8fb01951b799a7d7dc1af1cd6423afcedb2e856e61faddbdd5dfe77b9419ee6459d8f29db0c7d00f11144e976c3978419a1d194c6cb32205c5ea7f0d30555df3936e0f2048530b93556c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x10c0, 0x1, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x3, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0xf, 0x2, 0x8, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc8, 0xfff, 0x10000000, 0x3, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x57, 0x0, 0xfff, 0xfffffffc}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd, 0x0, 0x3, 0x5}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1948}}, 0x0) 3.112767123s ago: executing program 0 (id=1711): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x43d8, &(0x7f0000000000)={0x0, 0x7c87, 0x40, 0x0, 0x39, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0xf000) 2.894997716s ago: executing program 7 (id=1712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e25, 0xffffffff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2a, 0x0, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x2, &(0x7f00000001c0)={[0x4]}, 0x8) r10 = accept4(r8, 0x0, 0x0, 0x800) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$inet6(r11, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x700f0ff}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="11000000051403030000000000000000080001c0df0969734254a0edaf2b749a39fa29000000004377e33e0000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80) 2.834765442s ago: executing program 5 (id=1713): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000580)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 2.197996342s ago: executing program 0 (id=1714): socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x34324152, 0x7, 0xa, [{0x0, 0xf}, {0x20010}, {}, {}, {0x6}, {0x2fe}, {0x0, 0x800}], 0xf}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a0001"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x82002, 0x0) r3 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001380), 0x2, 0x1}}, 0xfffffffffffffdae) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000240)='./file0\x00', 0x7a000, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 2.065840429s ago: executing program 0 (id=1715): socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x5e240f5e1666abeb, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0xbbc1, 0x0, 0x5, 0x100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r9 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r9, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0xae111906d475333b, 0x10, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=@can, 0x80, &(0x7f0000001580)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/247, 0xf7}, {&(0x7f0000001600)=""/181, 0xb5}], 0x4}, 0x0, 0x2020, 0x0, {0x3}}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0xae111906d475333b, 0x10, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=@can, 0x80, &(0x7f0000001580)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/247, 0xf7}, {&(0x7f0000001600)=""/181, 0xb5}], 0x4}, 0x0, 0x2020, 0x0, {0x3}}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'batadv_slave_0\x00', 0x5}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xff1) unshare(0x40600) mkdir(0x0, 0x0) 1.91003632s ago: executing program 7 (id=1716): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000300)={0x0, 0x3a}) syz_io_uring_setup(0x19f3, &(0x7f0000001300)={0x0, 0x0, 0x10100, 0x0, 0x30a}, &(0x7f0000000140), &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r7, 0x331, 0x70bd2d, 0xa6ff, {0xb}}, 0x14}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x118) 1.784590511s ago: executing program 5 (id=1717): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x41, 0x10d101) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040081}, 0x40000) (async) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040081}, 0x40000) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x4041000) r4 = openat(r0, &(0x7f00000003c0)='./file0\x00', 0x4002, 0xe4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, &(0x7f0000000480)) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, &(0x7f0000000480)) sendmsg$NFT_BATCH(r4, &(0x7f0000002980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x62, 0x6, "b8eb8f4da2bff84dcd0c507af41831ea0e08b36afade1a7114c2b7959b52e4af24b3c9de7cb7c495321431c27f4f0f0442961fd0134e8995f26293b7bfae07605ea169995640a0278fb8584c8c7ddf7313512b8b4688445dcfd8e1c4fce1"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x229c, 0xe, 0xa, 0xdf06b83f625412d9, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1bc8, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x37}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x49, 0x6, 0x1, 0x0, "0dfc4c469625bb324d9ea08625128e648847c4512bd2a8f9e6f303c3207d29fe53a30653a4a73b24d383a3fc723a024994bd993e2c75101251ca940b57d14e333ca089e3c8"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x14c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1204, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "a56dc03ef4b2f741423630a22fe3ebd828ad94e7ab0f1228ed17b79224736b6dddd20c5af1a8eeb0f8c456a82e365f47cc07e948e2f80b25606cd4ad105041cbf24fd9e8cce29a93304f29923421404cf7d55bb11f36bbce5f0fa7c5e9b138b6cea7272ac8a2fc5b4648655572b981c8491df254f0aaf6de4f70f239f27e6db164c13dd12622168ce532cb34471a0d8c2664d6f48006346969c27565ebb158b2eb3e10a1db06473f121f372323edfe24eed1293094f931be7868665fd1bf"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "e23c7d55e58fc4198aed904318cb36751cdbe831ac50246c4a388e0ca16c8d2fdbe6ff53f3dd6f2c3879525a46792893fcba123f4bdef8070e019c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x51, 0x1, "01c2872182df07d72e8e92f1725caba77b2a5f34ae6e08acc209507200241527f1c6e8060486b7359a88fdaa45beccffdde14ebf3504ec8aad63005cd47bc70c44935c2c47af00b22f768d9dba"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "549bd6d23cc72ff97e0e4797d2e14bb9198b2285f3f37ab5bf6e3d13bd9d0755e32ef0a17b1312927a5c9cb621da042b0f6db43c116da89a66cae11d844796e605bec9faf096352de9ce7fda76e12ee72d9de7559eebf320277d1511f202e008df24ef6dbe867ff6411aee88bbeff6be013e2622eac67f5a8f01dd6758849266689c28cdcf888ca0388d5abc3510ace2a793e790ed9d6b1554c81ff81a3fa4867398e672da6b9011dcdd6e24d2458763803f008e8200383ba7e9249f6903c51924ec92adde7028819026d5a3791092c6"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "3b7dabd125d34d829000c5b25a8a6b59308185c6e8d5c25bfbb6599db6e03849ba77e3e010fb7ad37ff63cc0152e6b842bee15645daaa34f4890bafed9362561f12447f92bc3c03b70619add3cce51ced845413564317998d34e537bb846dd1eb07a2fbd32436c41983e9cc32338eac0fd64870240fa5901a02114f7f081252b0e97c62942ea8b8caa2809d21636f29164c0f742d729c3fba4ec135020b745fc6b4baf574783"}, @NFTA_DATA_VALUE={0x28, 0x1, "e63144a569edc942bd8f558c1e117f558c04c7f6f592264248e68a0eb796678736fca75d"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}]}]}, {0x5cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "d6b3c7d23b29c35707cf7db90153763856ae9ee95b7beaef548a7f946acea320bbdb408fa9f4588de322f99249c8119a2737f804617abbecd41cf51f1704e8a31c9bb1601dc237edc7a4a41ed7d2a91a7931480a304761e4c702ce7c5939dcc9fd1b90eb29f128bcb2bbefc8fbb42bb930a8bab002232a1c7cf967ac9f4efb90323d787fb927a1c6bd28001e016323f87a32c5e0eaf8664038ee5b301acb9a3af43624b632756ed45f9d5e03145df368fff025b1a18616551470c83793b0d3d3afd5f0e6d7eb06ad0acb8e0ba2c1f78e04ef2091b31d60947aeb8ed2dd"}, @NFTA_DATA_VALUE={0x7b, 0x1, "ed07c0a337f272a05498bdd927556919525641e757e3f702edb1af15c3abd5b223e0845364f3f055183a8b74bdb5cd2bc7b14a417fc74e973c06d0cb2a288ce85a10ff99d3f3f8f4dda640fb8c9f75d0e6cb27a029b2b76f7c23498dc4f5b2a25135e20082d4a9df511ace5e8659fcd4fa1b94a617fdc3"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x6, 0x1, "1c75"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY_END={0x2d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb716a16eded08182}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "c0006327e07661c852b165442df7bc30355e307ab772baaaee46626697b1f2bbebbcbe98a59712884889bc7ad25c708d0b4e0b448d02c6c12d0249a5ddf7aa4d93752cb18515862b581914f3610265e8815a655db3fc7eb783f0973e2ef20128a1f8e2f302aa459ead51e7f6aa2587ca8e12875e8ed5b35d2c0f800fee29e33e383d04c709e35cc8e75962efe9bbe7f6f5cdff7f1fe12216bd3a24c98b21b531f46b2a0575b9116d768b8b87a711eeae3dd47a0f6e63cf304c82eee2eb9667c26f2d3fa100a8c6936ac0b34e5a6f7c0216086a53e25a1b37627b003557306bc0f56d3fc86253d90b0b96"}, @NFTA_DATA_VALUE={0x86, 0x1, "fdd71de7858facc88b4e74c4165934391a147b1ac1ecd2ee29d6a6e25f1071ed3ce39bc11c6eaffdf395b381b9632c822ad545d3ccc2b3d59bdd990c74198b609e85a3a4187f94c19477ad1dd7256de6394ae939a7a4c4f9abc5fdcab6e1dfbfab0e4ad78342c576990e421c8f0084a6b86696ec898c0cf1c4690b36b9fdd5fd4303"}, @NFTA_DATA_VALUE={0x15, 0x1, "8100ceda4de5da94ed7bbc912261510692"}, @NFTA_DATA_VALUE={0xdf, 0x1, "d31785ce28f91c01ea681e0697290a8af71ad3b9ad669b5e42e2d2408ae25ab3ae7a147adc5537c0225ae0963b3d8ad4d99572af9853506c9523977a6623d899c1c6b562791e77755297d35172615649b45b7e298856807a874dc1d67a4dbbeeb88d35a18633b2037ba2b89ba3ca101dc3c4eb5d0b3a8ba2d06765440b32504019135b93756d54d7a50000e79d44cbf6460130cdf448111aeafd42d031cff47b4b418ab664657afd0ebc2606e0eda7519842eef4e928f65ca6ce930ed06e59291fe4fbde98d9d2f11adb6a31a621b7cca0bf0f362b4ee40b1827fe"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x674, 0x3, 0x0, 0x1, [{0x620, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x49, 0x6, 0x1, 0x0, "688f0617d2ffca7c6b5d7a405dabfac23a2d484c3f825bfd496a799637c2718b629c03ede224b83a164045207a062e3f42b5b9be5a973ffacc6f0abcee53564830a19913b0"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff0000}, @NFTA_SET_ELEM_EXPRESSIONS={0x510, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x1d0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c0, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1bc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "49bcae0f121ad1d8d13345bc740c57475da6b5cf33395219475b52c6a3a5ac30cc3267ee58e2ce4406a66a01796f117d931bba9603f6e1684699a1671e35ab72e76dbaf9b6d7184c3eb0ca6c52e1c65851636db2e1ac576f421b24263a5842dea7aef39ebe0e40a7e646ad816bda2f57cef376875f65a87bb191eb45b83f67123b0864e4c8bb780a02fc6ebc4fb267"}, @NFTA_DATA_VALUE={0x5, 0x1, 'g'}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xef, 0x1, "963e3c78c4e350f342a6590786cbbbba28c140270e6cbaefee3acc6b11061ca5264e394e8a766bbca69fc7d584f45c51c11bd720915caed9a63a514f1864b3e8df407f0c50004e8b0fe645ae22280c20d7f8deb221ec0e0c4e463b47ceab2cda07e62818c9acefc389a80e650b3adf72be3876adc722ce192f21b3be6a9ea11c1de0bbb5adec98d73a945335ccfe2fb10f3f1de1997625139ac8f5a102e571834695eae352e399203c3a9df142dcc13d171c5c06e05de8da22738e2231f7cfb969248d192b7b38c390e843a9b24937abeef21a7179513fa558c4ff1a1b2b2470dbbb30ddc94022eb7d719d"}, @NFTA_DATA_VALUE={0x4}]}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2b8, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x2a4, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "ccec36c1570082dcc82b15872e3499da1cc20bf87c966af023891b03f99b5af3b7dc9eb7756a192d522abc2912bd019d7cae304dddb8a76e8bb5bf4490395f6662ae15c55a3c3a4f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "b7fbfb62418507655ac7d79d8af106576880a0cbf860c889eebaf36684500145df180189e072629e0d837c5bf86eaa71361ec49d8df13ca9f5884650096d05df9abf90811ec3c60859ccfa58b68f48b835edb022afbd2e804ab1e3367855fda268204ff72da3e5decc3205fdaa276dcdfcd77cdf1dd75503049964ca251f902303620a1d2ccbdab8b74c50652898599c88faf36ce30bc3370b384da8338deea6270f3f0ab004385b6479392ab58f71be4a3366905ec07d50655a7fe1ce0682b5b6bca291c63902732c7f6481adc6b666873d5cb46d9b1ab285c85448a20798316668446e89557c8bbe7e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x65, 0x1, "176413346e11efd90a6a0b5060e14a04b0c9d87acadaac33732a5200effa6893944eac1ad1c2973f3d559d1025aac6a6bbe899b812ee5f6e783fbf0c7dc8f7cc8be9d773fb1b0b74f9e75a510b90de656b1b1922ec778aad21fbd2192f8e140f3c"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x17, 0x1, "d21fc433cde1f54a7fe8420cf97389eb4fca2c"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_NFPROTO={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x73, 0x6, "ed1f6aa3de9b0e0ade295015e909b0da98510ea06db9f0b19f38f9d1a7206563441b1fc1005f177cd8b2c8dc6708a16fc6d3a0e736a33bb6450103cf0ba396c55a63b142d20679f35b7196aee452bfef43d8d2d2d54d86adb608aa3db96476291378ffb6f69a4c235d5148ad437841"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2408}, 0x1, 0x0, 0x0, 0x4000881}, 0x800) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a00), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x30, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000002b40), r0) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x2c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}}, 0x40000) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x2c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}}, 0x40000) io_setup(0x5, &(0x7f0000002d40)=0x0) io_destroy(r9) (async) io_destroy(r9) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002dc0), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x15) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x15) clock_gettime(0x4, &(0x7f0000002ec0)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x11, 0x6, &(0x7f0000002f00)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1ff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}], &(0x7f0000002f40)='GPL\x00', 0x8001, 0xfb, &(0x7f0000002f80)=""/251, 0x41000, 0x15, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003080)={0x4, 0x0, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000030c0)=[r0, r0, 0x1, r0], &(0x7f0000003100)=[{0x2, 0x2, 0xe, 0xc}, {0x0, 0x3, 0xd}, {0x5, 0x1, 0x3, 0xa}, {0x1, 0x4, 0x5, 0xc}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x1, 0x5}, {0x3, 0x5, 0x5}], 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003240)={0xffffffffffffffff, r11, 0x0, r0}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003280), r2) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000032c0), &(0x7f0000003300), 0x2, 0x1) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8054) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000003440)={0xf9}, 0x1) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000003440)={0xf9}, 0x1) 1.761832526s ago: executing program 0 (id=1718): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x810, r3, 0xf4034000) sendmsg$key(r3, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a001010"], 0x70}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r6}) close(r7) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000280)=0x8000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000240)) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000180)=0xfff) r9 = dup(r0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0x350b, 0x80600}) 1.67180689s ago: executing program 6 (id=1719): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0xfffff000, 0x5d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400003}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x204) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_open_dev$loop(0x0, 0x7, 0x2480) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c58d810240006e31f0000000000000000001a000400ae16d2"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20000815) recvmmsg(r4, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000440)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.512471143s ago: executing program 0 (id=1720): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000bc0)={0x73966b9ee67bd448, 0x3, 0x4, "5a9a3568"}, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x4000000000000c1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x18, 0x4, 0x6, 0x10, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x2b, 0x20, 0x0, @in={0x2, 0x4e24, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x400, {0x30, 0x3c, 0x8, 0x4, 0x0, 0x557, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x80}}, 0x4040010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[0x4]}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) socket$inet6_sctp(0xa, 0x1, 0x84) 1.12192887s ago: executing program 5 (id=1721): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x30, r0, 0x101, 0x0, 0x0, {{0x2b, 0x0, 0xd00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x800) 1.013499345s ago: executing program 7 (id=1722): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[], 0xc0ff7f0000}) 789.219131ms ago: executing program 3 (id=1723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x67) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000340)=""/68) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001480)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000300)={r8, 0x0, 0x9, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd, 0x80000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r10, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 632.641728ms ago: executing program 5 (id=1724): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_rr_get_interval(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x4188a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="18a10000feffff3f00000000000041a385100000060000008510000004000000660800000000000018000000000000000000000000000000950000000000000095000000000007c1839c0cc076e533e4f0e6df06207c15f5a5630400000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 7 (id=1725): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x4411}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0xdddd1000, 0x36, &(0x7f00000001c0)=""/54}]}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f00000000c0)={0xb, 0x7d, {0x53, 0xdd, 0x400, {0xd5, 0x800}, {0x9, 0xfff8}, @cond=[{0x6, 0xfe19, 0x2, 0x2bc, 0x4, 0x5}, {0x8, 0xa2f9, 0xe7, 0x80, 0xd0, 0x9}]}, {0x51, 0x2, 0x10, {0x5, 0x79}, {0xfffb, 0x1}, @period={0x7, 0x2, 0x40, 0x8, 0x60f4, {0x2, 0x1, 0x81, 0x1}, 0x0, 0x0}}}) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000011c0)='fd/3\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x101800, 0x0) r8 = dup3(r7, r6, 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0x5]}, &(0x7f0000000300), &(0x7f0000000380), 0x8) open(&(0x7f00000003c0)='./cgroup\x00', 0x400000, 0x1e6) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8008ae9d, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020500000032000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) kernel console output (not intermixed with test programs): ices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 365.585344][ T30] audit: type=1400 audit(1745063797.631:1026): avc: denied { write } for pid=12790 comm="syz.4.1073" path="socket:[26675]" dev="sockfs" ino=26675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.113568][ T30] audit: type=1400 audit(1745063798.381:1027): avc: denied { create } for pid=12801 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 366.888234][T12823] 9pnet_fd: Insufficient options for proto=fd [ 366.914718][T12826] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 366.954454][ T30] audit: type=1400 audit(1745063799.221:1028): avc: denied { setopt } for pid=12827 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 366.981753][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.027851][T12832] __nla_validate_parse: 4 callbacks suppressed [ 367.027874][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 367.035368][ T30] audit: type=1400 audit(1745063799.241:1029): avc: denied { read } for pid=12822 comm="syz.3.1079" path="socket:[26210]" dev="sockfs" ino=26210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 367.075324][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.090833][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.409364][T12828] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 367.467265][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.491161][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.515162][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.535776][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.546154][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 367.763089][T12845] fuse: Unknown parameter 'user_i00000000000000000000' [ 367.777930][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 367.796958][T12848] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1083'. [ 367.973979][ T5905] usb 4-1: USB disconnect, device number 21 [ 368.027546][T12858] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1086'. [ 368.036974][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1086'. [ 368.049312][T12858] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1086'. [ 368.059014][T12858] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1086'. [ 368.409330][ T5905] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 368.611001][T12876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1089'. [ 368.620171][T12876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1089'. [ 368.630680][T12876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1089'. [ 368.873724][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.968522][ T5905] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 369.087541][ T5905] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 369.166598][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.225204][ T5905] usb 4-1: config 0 descriptor?? [ 369.257002][ T5905] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 369.284390][ T5905] dvb-usb: bulk message failed: -22 (3/0) [ 369.325388][ T5905] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 369.345499][ T5905] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 369.365294][ T5905] usb 4-1: media controller created [ 369.392252][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.443385][ T5905] dvb-usb: bulk message failed: -22 (6/0) [ 369.458545][ T5905] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 369.466366][T12896] ======================================================= [ 369.466366][T12896] WARNING: The mand mount option has been deprecated and [ 369.466366][T12896] and is ignored by this kernel. Remove the mand [ 369.466366][T12896] option from the mount to silence this warning. [ 369.466366][T12896] ======================================================= [ 369.506538][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 369.526046][ T5905] dvb-usb: schedule remote query interval to 150 msecs. [ 369.535680][ T5905] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 370.500375][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 370.506657][ T5912] dvb-usb: error while querying for an remote control event. [ 371.155860][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 371.261842][ T5905] dvb-usb: error while querying for an remote control event. [ 371.283113][T12896] ISOFS: Unable to identify CD-ROM format. [ 371.469347][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 371.901960][T12922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.970306][T12925] fuse: Unknown parameter 'user_i00000000000000000000' [ 372.357950][ T5905] dvb-usb: error while querying for an remote control event. [ 372.559562][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 372.578793][ T5905] dvb-usb: error while querying for an remote control event. [ 372.771159][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 372.776982][ T5912] dvb-usb: error while querying for an remote control event. [ 372.912288][ T5873] usb 4-1: USB disconnect, device number 22 [ 373.141849][ T5873] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 373.514130][T12984] __nla_validate_parse: 1 callbacks suppressed [ 373.514143][T12984] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.1103'. [ 373.533093][T12984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 373.540477][T12984] overlayfs: failed to set xattr on upper [ 373.546232][T12984] overlayfs: ...falling back to redirect_dir=nofollow. [ 373.553146][T12984] overlayfs: ...falling back to index=off. [ 373.558949][T12984] overlayfs: ...falling back to uuid=null. [ 373.564825][T12984] overlayfs: maximum fs stacking depth exceeded [ 373.847570][T12988] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1104'. [ 373.874045][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 373.884110][T12988] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1104'. [ 373.924476][T12988] xt_TCPMSS: Only works on TCP SYN packets [ 373.939467][ T30] audit: type=1400 audit(1745063806.201:1030): avc: denied { mounton } for pid=12990 comm="syz.3.1105" path="/203/file0" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.986803][T12992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.048090][ T30] audit: type=1400 audit(1745063806.281:1031): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 374.132732][T12998] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 374.155570][T12867] syz.0.1087: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.173149][T12998] bond1: entered promiscuous mode [ 374.181038][T12998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.209364][T13032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.217833][T12867] CPU: 1 UID: 0 PID: 12867 Comm: syz.0.1087 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 374.217862][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 374.217872][T12867] Call Trace: [ 374.217879][T12867] [ 374.217888][T12867] dump_stack_lvl+0x16c/0x1f0 [ 374.217924][T12867] warn_alloc+0x248/0x3a0 [ 374.217947][T12867] ? __pfx_warn_alloc+0x10/0x10 [ 374.217973][T12867] ? __get_vm_area_node+0x1b9/0x300 [ 374.217990][T12867] ? __get_vm_area_node+0x1e5/0x300 [ 374.218008][T12867] __vmalloc_node_range_noprof+0x1110/0x1540 [ 374.218032][T12867] ? xt_alloc_entry_offsets+0x3a/0x60 [ 374.218051][T12867] ? __sys_setsockopt+0x1a0/0x230 [ 374.218066][T12867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.218090][T12867] __kvmalloc_node_noprof+0x2ff/0x600 [ 374.218102][T12867] ? xt_alloc_entry_offsets+0x3a/0x60 [ 374.218119][T12867] ? xt_alloc_entry_offsets+0x3a/0x60 [ 374.218137][T12867] ? xt_alloc_entry_offsets+0x3a/0x60 [ 374.218152][T12867] xt_alloc_entry_offsets+0x3a/0x60 [ 374.218168][T12867] translate_table+0x22d/0x1720 [ 374.218190][T12867] ? _copy_from_user+0x59/0xd0 [ 374.218208][T12867] ? __pfx_translate_table+0x10/0x10 [ 374.218224][T12867] ? xt_alloc_table_info+0x3e/0xa0 [ 374.218244][T12867] do_ipt_set_ctl+0x570/0xae0 [ 374.218262][T12867] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 374.218281][T12867] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 374.218298][T12867] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.218314][T12867] ? sockopt_release_sock+0x52/0x60 [ 374.218329][T12867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 374.218345][T12867] ? sockopt_release_sock+0x52/0x60 [ 374.218367][T12867] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 374.218384][T12867] nf_setsockopt+0x8a/0xf0 [ 374.218406][T12867] ip_setsockopt+0xcb/0xf0 [ 374.218419][T12867] raw_setsockopt+0xb7/0x2a0 [ 374.218431][T12867] ? __pfx_raw_setsockopt+0x10/0x10 [ 374.218443][T12867] ? selinux_socket_setsockopt+0x6a/0x80 [ 374.218457][T12867] ? sock_common_setsockopt+0x2e/0xf0 [ 374.218475][T12867] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 374.218491][T12867] do_sock_setsockopt+0x221/0x470 [ 374.218509][T12867] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 374.218535][T12867] __sys_setsockopt+0x1a0/0x230 [ 374.218551][T12867] __x64_sys_setsockopt+0xbd/0x160 [ 374.218563][T12867] ? do_syscall_64+0x91/0x260 [ 374.218578][T12867] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.218593][T12867] do_syscall_64+0xcd/0x260 [ 374.218610][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.218623][T12867] RIP: 0033:0x7fcf82b8e169 [ 374.218633][T12867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.218646][T12867] RSP: 002b:00007fcf83924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.218658][T12867] RAX: ffffffffffffffda RBX: 00007fcf82db5fa0 RCX: 00007fcf82b8e169 [ 374.218666][T12867] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 374.218672][T12867] RBP: 00007fcf82c10a68 R08: 0000000000000398 R09: 0000000000000000 [ 374.218679][T12867] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.218686][T12867] R13: 0000000000000000 R14: 00007fcf82db5fa0 R15: 00007ffe22fc0fb8 [ 374.218701][T12867] [ 374.218709][T12867] Mem-Info: [ 374.273046][T13032] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 374.273077][T13032] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 374.565557][T12867] active_anon:7652 inactive_anon:0 isolated_anon:0 [ 374.565557][T12867] active_file:20475 inactive_file:3388 isolated_file:0 [ 374.565557][T12867] unevictable:770 dirty:363 writeback:0 [ 374.565557][T12867] slab_reclaimable:6685 slab_unreclaimable:99546 [ 374.565557][T12867] mapped:31185 shmem:1453 pagetables:1184 [ 374.565557][T12867] sec_pagetables:0 bounce:0 [ 374.565557][T12867] kernel_misc_reclaimable:0 [ 374.565557][T12867] free:1327913 free_pcp:1635 free_cma:0 [ 374.641956][T12867] Node 0 active_anon:30708kB inactive_anon:0kB active_file:81900kB inactive_file:13544kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:124740kB dirty:1448kB writeback:0kB shmem:4276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11960kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.690111][T13032] bond1: (slave ip6gre1): making interface the new active one [ 374.697777][T12867] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.697825][T13032] ip6gre1: entered promiscuous mode [ 374.757699][ T30] audit: type=1400 audit(1745063807.001:1032): avc: denied { bind } for pid=13035 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 374.768554][T12867] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.786339][ T30] audit: type=1400 audit(1745063807.011:1033): avc: denied { listen } for pid=13035 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 374.825103][T12867] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 374.825155][T12867] Node 0 DMA32 free:1390364kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:31112kB inactive_anon:0kB active_file:81624kB inactive_file:12320kB unevictable:1544kB writepending:1448kB present:3129332kB managed:2541512kB mlocked:0kB bounce:0kB free_pcp:668kB local_pcp:636kB free_cma:0kB [ 374.825210][T12867] lowmem_reserve[]: 0 0 1 1 1 [ 374.825247][T12867] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:96kB inactive_anon:0kB active_file:276kB inactive_file:1224kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 374.825297][T12867] lowmem_reserve[]: 0 0 0 0 0 [ 374.825337][T12867] Node 1 Normal free:3901460kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4788kB local_pcp:3160kB free_cma:0kB [ 374.825395][T12867] lowmem_reserve[]: 0 0 0 0 0 [ 374.825434][T12867] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB [ 374.837730][T13032] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 374.864518][T12867] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.966935][T12867] Node 0 DMA32: 80*4kB (UME) 1131*8kB (UME) 958*16kB (UME) 731*32kB (UME) 332*64kB (UME) 66*128kB (UME) 18*256kB (ME) 30*512kB (UME) 35*1024kB (UME) 11*2048kB (UME) 301*4096kB (UM) = 1389016kB [ 374.986667][T12867] Node 0 Normal: 2*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 375.003278][T12867] Node 1 Normal: 159*4kB (UME) 47*8kB (UME) 44*16kB (UME) 241*32kB (UME) 101*64kB (UME) 32*128kB (UME) 14*256kB (UME) 12*512kB (UME) 3*1024kB (UME) 5*2048kB (UME) 942*4096kB (M) = 3901460kB [ 375.027247][ T30] audit: type=1400 audit(1745063807.291:1034): avc: denied { read } for pid=13035 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 375.027513][T12867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.058538][T12867] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 375.068122][T12867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.078314][T12867] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 375.087709][T12867] 25322 total pagecache pages [ 375.092549][T12867] 0 pages in swap cache [ 375.096827][T12867] Free swap = 124996kB [ 375.101717][T12867] Total swap = 124996kB [ 375.105983][T12867] 2097051 pages RAM [ 375.110112][T12867] 0 pages HighMem/MovableOnly [ 375.114944][T12867] 429631 pages reserved [ 375.119161][T12867] 0 pages cma reserved [ 375.437160][ T30] audit: type=1400 audit(1745063807.701:1035): avc: denied { write } for pid=13044 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 375.808604][ T30] audit: type=1400 audit(1745063808.051:1036): avc: denied { mount } for pid=13048 comm="syz.0.1110" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 376.308309][ T5912] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 376.494414][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 376.507775][ T5912] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 376.529374][ T5912] usb 2-1: config 0 has no interface number 0 [ 376.535818][ T5912] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 376.606985][T13075] xt_nat: multiple ranges no longer supported [ 377.003331][ T5912] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 377.012720][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 377.021116][ T5912] usb 2-1: Product: syz [ 377.025365][ T5912] usb 2-1: SerialNumber: syz [ 377.031817][ T5912] usb 2-1: config 0 descriptor?? [ 377.039895][ T5912] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 377.132058][ T58] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 377.291366][ T30] audit: type=1400 audit(1745063809.551:1037): avc: denied { write } for pid=13049 comm="syz.1.1111" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.329551][ T58] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 377.347409][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.365266][ T58] usb 6-1: Product: syz [ 377.374934][ T58] usb 6-1: Manufacturer: syz [ 377.385067][ T58] usb 6-1: SerialNumber: syz [ 377.401022][ T58] usb 6-1: config 0 descriptor?? [ 377.412721][ T58] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 022 [ 377.539784][T13094] fuse: Unknown parameter 'user_id00000000000000000000' [ 378.308486][ T58] (null): failure reading functionality [ 378.317392][ T58] i2c i2c-1: failure reading functionality [ 378.330877][ T58] i2c i2c-1: connected i2c-tiny-usb device [ 378.345732][ T58] usb 6-1: USB disconnect, device number 22 [ 378.376571][T13107] tipc: Enabled bearer , priority 27 [ 378.425939][T13107] mkiss: ax0: crc mode is auto. [ 378.565737][T13125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=13125 comm=syz.5.1121 [ 378.723003][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.724757][ T58] usb 2-1: USB disconnect, device number 28 [ 378.729475][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.885827][ T30] audit: type=1400 audit(1745063811.141:1038): avc: denied { setopt } for pid=13140 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.234257][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 379.387223][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 379.480118][T13161] fuse: Unknown parameter 'user_id00000000000000000000' [ 379.876419][T13177] mkiss: ax0: crc mode is auto. [ 379.948620][ T30] audit: type=1400 audit(1745063812.201:1039): avc: denied { write } for pid=13169 comm="syz.3.1131" path="socket:[27152]" dev="sockfs" ino=27152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 380.929798][T13174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.717849][T13219] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 381.775873][T13225] fuse: Unknown parameter 'user_id00000000000000000000' [ 381.886084][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 382.188978][T13236] trusted_key: encrypted_key: insufficient parameters specified [ 382.421962][ T30] audit: type=1326 audit(1745063814.691:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.0.1147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf82b8e169 code=0x0 [ 382.575160][ T30] audit: type=1400 audit(1745063814.841:1041): avc: denied { create } for pid=13248 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 382.638906][ T30] audit: type=1400 audit(1745063814.841:1042): avc: denied { setopt } for pid=13248 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 382.642525][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 382.685766][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.749611][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.781745][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.802455][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.812977][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.820858][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.829000][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.840298][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 382.849461][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 383.137102][T13263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1150'. [ 383.147930][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1150'. [ 383.157129][T13263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1150'. [ 383.166921][T13263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1150'. [ 384.114462][T13280] 9pnet_fd: Insufficient options for proto=fd [ 384.329732][ T971] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 385.003563][ T971] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 385.393125][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.419841][ T971] usb 4-1: Product: syz [ 385.432724][ T971] usb 4-1: Manufacturer: syz [ 385.445659][ T971] usb 4-1: SerialNumber: syz [ 385.458612][ T971] usb 4-1: config 0 descriptor?? [ 387.564226][ T971] usb 4-1: f81604_write: reg: 105 data: c4 failed: -EPROTO [ 387.605380][T13328] syz_tun: entered allmulticast mode [ 387.635725][ T971] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 387.690100][ T971] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 387.774139][ T971] usb 4-1: USB disconnect, device number 23 [ 387.787727][T13327] syz_tun: left allmulticast mode [ 388.232575][T13348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.342619][ T30] audit: type=1400 audit(1745063820.671:1043): avc: denied { read } for pid=13343 comm="syz.5.1167" name="file0" dev="tmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 389.486235][ T54] Bluetooth: hci2: unexpected event for opcode 0x6f6f [ 389.604145][ T30] audit: type=1400 audit(1745063821.871:1044): avc: denied { ioctl } for pid=13365 comm="syz-executor" path="socket:[27979]" dev="sockfs" ino=27979 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.619244][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.630149][ T5912] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 389.651903][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.661609][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.669246][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.679191][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.713317][T13365] lo speed is unknown, defaulting to 1000 [ 389.723240][T13365] syzkaller0 speed is unknown, defaulting to 1000 [ 389.740378][ T30] audit: type=1400 audit(1745063821.961:1045): avc: denied { mounton } for pid=13365 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 389.797785][ T5912] usb 2-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config [ 389.824466][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 389.893144][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 225, changing to 4 [ 389.935106][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 41107, setting to 1023 [ 390.006384][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 390.053794][T13365] chnl_net:caif_netlink_parms(): no params data found [ 390.225936][ T5912] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=bd.94 [ 390.229770][T13512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.248691][ T5912] usb 2-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 390.259587][ T5912] usb 2-1: Manufacturer: syz [ 390.301918][ T5912] usb 2-1: config 0 descriptor?? [ 390.523548][ T5912] em28xx 2-1:0.0: New device syz @ 12 Mbps (2040:1605, interface 0, class 0) [ 390.729633][ T30] audit: type=1400 audit(1745063822.971:1046): avc: denied { map } for pid=13390 comm="syz.3.1173" path="socket:[28026]" dev="sockfs" ino=28026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 391.224643][ T5912] em28xx 2-1:0.0: Device initialization failed. [ 391.462881][ T5912] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 391.689320][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.742255][ T5825] Bluetooth: hci5: command tx timeout [ 391.793983][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.899844][T13365] bridge_slave_0: entered allmulticast mode [ 392.026222][T13365] bridge_slave_0: entered promiscuous mode [ 392.152022][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.252852][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.353324][T13365] bridge_slave_1: entered allmulticast mode [ 392.567556][T13365] bridge_slave_1: entered promiscuous mode [ 392.644378][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.666952][T13527] serio: Serial port ttyS3 [ 392.685067][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.762798][T13365] team0: Port device team_slave_0 added [ 392.775132][T13365] team0: Port device team_slave_1 added [ 392.973726][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.986727][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.163214][T13634] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 393.460222][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.524166][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.532255][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.562672][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.666850][T13365] hsr_slave_0: entered promiscuous mode [ 393.674794][T13365] hsr_slave_1: entered promiscuous mode [ 393.683500][T13365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.693707][T13365] Cannot create hsr debugfs directory [ 393.820617][ T54] Bluetooth: hci5: command tx timeout [ 394.016435][T13365] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 394.036788][T13365] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 394.063110][T13365] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 394.079316][T13365] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 394.246018][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.278101][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.304321][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.311494][T12533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.337044][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.344192][T12533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.377870][T13365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.395978][T13365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.627690][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.837468][T13744] SET target dimension over the limit! [ 394.846387][ T30] audit: type=1400 audit(1745063827.111:1047): avc: denied { write } for pid=13743 comm="syz.3.1179" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.898798][ T30] audit: type=1400 audit(1745063827.141:1048): avc: denied { ioctl } for pid=13743 comm="syz.3.1179" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 395.319377][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 395.428466][T13744] libceph: resolve 'cr' (ret=-3): failed [ 395.628828][ T30] audit: type=1400 audit(1745063827.891:1049): avc: denied { connect } for pid=13756 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.648397][T13365] veth0_vlan: entered promiscuous mode [ 395.657531][T13365] veth1_vlan: entered promiscuous mode [ 395.806926][T13763] fuse: Unknown parameter '0x0000000000000003' [ 395.823883][T13365] veth0_macvtap: entered promiscuous mode [ 395.845669][T13365] veth1_macvtap: entered promiscuous mode [ 395.865869][ T54] Bluetooth: hci2: unexpected event for opcode 0x6f6f [ 395.874144][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.899903][ T54] Bluetooth: hci5: command tx timeout [ 395.905944][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.949331][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.960238][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.975379][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.988797][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.999766][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.012184][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.023330][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.078488][T13771] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1185'. [ 396.087581][T13771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1185'. [ 396.096702][T13771] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1185'. [ 396.108872][T13771] xt_TCPMSS: Only works on TCP SYN packets [ 396.128199][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.139413][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.149950][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.168412][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.180060][T13365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.191764][T13365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.203940][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.227055][T13365] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.238695][T13365] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.248044][T13365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.257315][T13365] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.003011][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.120388][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.181646][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.206233][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.233529][ T30] audit: type=1400 audit(1745063829.501:1050): avc: denied { mounton } for pid=13365 comm="syz-executor" path="/root/syzkaller.2wxeov/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 397.263453][T13795] netlink: 'syz.0.1190': attribute type 12 has an invalid length. [ 397.289039][ T30] audit: type=1400 audit(1745063829.531:1051): avc: denied { mount } for pid=13365 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 397.314986][ T30] audit: type=1400 audit(1745063829.551:1052): avc: denied { mounton } for pid=13365 comm="syz-executor" path="/root/syzkaller.2wxeov/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 397.389942][ T30] audit: type=1400 audit(1745063829.551:1053): avc: denied { mounton } for pid=13365 comm="syz-executor" path="/root/syzkaller.2wxeov/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 397.467926][ T30] audit: type=1400 audit(1745063829.581:1054): avc: denied { mounton } for pid=13365 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 397.652711][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1191'. [ 397.662657][T13801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1191'. [ 397.673800][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1191'. [ 397.684664][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1191'. [ 397.889712][T13805] 9pnet_fd: Insufficient options for proto=fd [ 397.897349][ T30] audit: type=1400 audit(1745063829.581:1055): avc: denied { mount } for pid=13365 comm="syz-executor" name="/" dev="gadgetfs" ino=6768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 397.972116][ T30] audit: type=1400 audit(1745063829.711:1056): avc: denied { mounton } for pid=13365 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 398.001571][ T54] Bluetooth: hci5: command tx timeout [ 398.163613][T13815] fuse: Unknown parameter '0x0000000000000003' [ 398.571855][T13824] lo speed is unknown, defaulting to 1000 [ 398.579876][T13824] syzkaller0 speed is unknown, defaulting to 1000 [ 399.465358][T13864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.986567][ T30] audit: type=1400 audit(1745063832.251:1057): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 400.061538][T13883] 9pnet_fd: p9_fd_create_unix (13883): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 400.141614][ T971] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 400.193161][T13885] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1204'. [ 400.399219][ T971] usb 6-1: Using ep0 maxpacket: 8 [ 400.407120][ T971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 400.423224][ T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 400.433878][ T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.448559][ T971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.476326][ T971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.498552][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.546985][T13889] netlink: 'syz.0.1205': attribute type 11 has an invalid length. [ 400.555083][T13889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1205'. [ 400.758136][ T971] usb 6-1: GET_CAPABILITIES returned 0 [ 400.768066][ T971] usbtmc 6-1:16.0: can't read capabilities [ 400.796241][T13898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.836954][ T5905] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 400.846626][ T5905] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 400.862452][ T7179] wlan1: authenticated [ 400.862634][T13902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.871435][ T7179] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 400.946305][T13902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.972825][ T6109] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 400.982137][ T6109] wlan1: associated [ 402.019588][ T5905] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 402.216798][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1214'. [ 402.227457][T13928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1214'. [ 402.237614][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1214'. [ 402.249766][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1214'. [ 402.253432][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 402.278013][ T5905] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 402.286541][ T5905] usb 4-1: config 0 has no interface number 0 [ 402.292837][ T5905] usb 4-1: too many endpoints for config 0 interface 2 altsetting 76: 213, using maximum allowed: 30 [ 402.307286][ T5905] usb 4-1: config 0 interface 2 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 213 [ 402.357113][ T5905] usb 4-1: config 0 interface 2 has no altsetting 0 [ 402.371728][ T5905] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 402.387784][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.400997][ T5905] usb 4-1: Product: syz [ 402.412455][ T5905] usb 4-1: Manufacturer: syz [ 402.417253][ T5905] usb 4-1: SerialNumber: syz [ 402.431372][ T5905] usb 4-1: config 0 descriptor?? [ 402.754659][T13915] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1213'. [ 402.775341][T13915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1213'. [ 402.828257][ T5873] usb 6-1: USB disconnect, device number 23 [ 402.851258][ T5905] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 402.931995][T13946] netlink: 'syz.0.1217': attribute type 3 has an invalid length. [ 403.062038][T13946] netlink: 'syz.0.1217': attribute type 3 has an invalid length. [ 403.281235][ T30] audit: type=1400 audit(1745063835.541:1058): avc: denied { map } for pid=13944 comm="syz.0.1217" path="socket:[29738]" dev="sockfs" ino=29738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 403.285752][ T54] Bluetooth: hci1: unexpected event for opcode 0x6f02 [ 403.318149][ T30] audit: type=1400 audit(1745063835.541:1059): avc: denied { accept } for pid=13944 comm="syz.0.1217" path="socket:[29738]" dev="sockfs" ino=29738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 403.539600][ T5905] gspca_ov534_9: reg_w failed -71 [ 403.687398][ T30] audit: type=1400 audit(1745063835.951:1060): avc: denied { mount } for pid=13973 comm="syz.6.1222" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 403.759992][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.770130][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.782128][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.791680][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.799608][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.840592][T13980] lo speed is unknown, defaulting to 1000 [ 403.858877][T13980] syzkaller0 speed is unknown, defaulting to 1000 [ 404.019183][ T5905] gspca_ov534_9: Unknown sensor 0000 [ 404.019277][ T5905] ov534_9 4-1:0.2: probe with driver ov534_9 failed with error -22 [ 404.064467][ T5905] usb 4-1: USB disconnect, device number 24 [ 404.106791][T14030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.618251][T13980] chnl_net:caif_netlink_parms(): no params data found [ 405.629439][T13980] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.638260][T13980] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.647979][T13980] bridge_slave_0: entered allmulticast mode [ 405.656205][T14166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1233'. [ 405.665332][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 405.674294][T14166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1233'. [ 405.683247][T14166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1233'. [ 405.726298][T13980] bridge_slave_0: entered promiscuous mode [ 405.750550][T13980] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.768041][T13980] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.788411][T13980] bridge_slave_1: entered allmulticast mode [ 405.796503][T13980] bridge_slave_1: entered promiscuous mode [ 405.899221][ T54] Bluetooth: hci4: command tx timeout [ 405.918512][T14209] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 405.927903][T13980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.142782][T13980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.225828][T13980] team0: Port device team_slave_0 added [ 406.246858][T13980] team0: Port device team_slave_1 added [ 406.433228][T13980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.487317][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.553865][T13980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.655720][T13980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.684461][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.869469][T13980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.145177][T13980] hsr_slave_0: entered promiscuous mode [ 407.248658][T13980] hsr_slave_1: entered promiscuous mode [ 407.262918][T13980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.275303][T13980] Cannot create hsr debugfs directory [ 407.980584][ T54] Bluetooth: hci4: command tx timeout [ 408.295488][T14344] overlayfs: missing 'lowerdir' [ 408.863707][T14373] net_ratelimit: 22 callbacks suppressed [ 408.863726][T14373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.377013][T13980] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 409.392687][T13980] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.415821][T13980] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.444769][T13980] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 409.459410][ T8014] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 409.582566][T14404] __nla_validate_parse: 2 callbacks suppressed [ 409.582581][T14404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1244'. [ 409.597863][T14404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1244'. [ 409.606867][T14404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1244'. [ 409.615870][T14404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1244'. [ 409.639207][ T8014] usb 4-1: Using ep0 maxpacket: 32 [ 409.645798][T13980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.650462][ T8014] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 409.679401][ T8014] usb 4-1: config 0 has no interface number 0 [ 409.695704][ T8014] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.715420][T13980] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.716929][ T8014] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 409.751464][ T8014] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 409.826685][ T8014] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 409.835100][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.846375][ T7179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.882245][ T8014] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 409.893825][ T30] audit: type=1326 audit(1745063842.151:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 409.935371][ T8014] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 409.977696][ T30] audit: type=1326 audit(1745063842.151:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.041899][ T8014] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 410.060713][ T54] Bluetooth: hci4: command tx timeout [ 410.078244][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.079152][ T8014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.085458][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.124027][ T30] audit: type=1326 audit(1745063842.151:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.175668][ T30] audit: type=1326 audit(1745063842.151:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.232137][T13980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.288924][ T30] audit: type=1326 audit(1745063842.151:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.293243][ T5912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 410.323455][ T8014] usb 4-1: Product: syz [ 410.327642][ T8014] usb 4-1: Manufacturer: syz [ 410.335760][ T8014] usb 4-1: SerialNumber: syz [ 410.361194][ T8014] usb 4-1: config 0 descriptor?? [ 410.368049][T14390] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 410.372369][ T30] audit: type=1326 audit(1745063842.151:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.381123][T14390] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 410.415056][ T30] audit: type=1326 audit(1745063842.151:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.465443][ T30] audit: type=1326 audit(1745063842.161:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.495194][ T30] audit: type=1326 audit(1745063842.161:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.549664][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 410.556610][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.557848][ T30] audit: type=1326 audit(1745063842.161:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14410 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 410.566847][ T5912] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 410.672929][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.681119][T13980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.694923][ T8014] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 411.051310][ T5912] usb 7-1: config 0 descriptor?? [ 411.275031][ T8014] etas_es58x 4-1:0.219: could not parse product info: '424242424242' [ 411.297044][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 411.312098][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 411.369169][ T5912] usb 7-1: USB disconnect, device number 2 [ 412.394953][ T54] Bluetooth: hci4: command tx timeout [ 412.720865][T13980] veth0_vlan: entered promiscuous mode [ 412.867325][T13980] veth1_vlan: entered promiscuous mode [ 412.920691][ T2149] usb 4-1: USB disconnect, device number 25 [ 412.928108][ T2149] etas_es58x 4-1:0.219: Disconnecting syz syz [ 413.004658][T14489] lo speed is unknown, defaulting to 1000 [ 413.049853][T13980] veth0_macvtap: entered promiscuous mode [ 413.078151][T13980] veth1_macvtap: entered promiscuous mode [ 413.118544][T14489] syzkaller0 speed is unknown, defaulting to 1000 [ 413.234647][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.262036][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.537971][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.548606][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.560615][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.575128][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.662642][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.715398][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.731900][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.752054][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.781233][T13980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.887040][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.943336][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.968953][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.979991][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.996764][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.008269][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.023642][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.035421][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.056880][T13980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.091266][T13980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.119118][T13980] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.138564][T13980] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.156080][T13980] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.179443][ T5873] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 414.354655][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 414.380671][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 414.407600][ T5873] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 414.427619][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.462324][ T5873] usb 6-1: Product: syz [ 414.477023][ T5873] usb 6-1: Manufacturer: syz [ 414.493452][ T5873] usb 6-1: SerialNumber: syz [ 414.500702][T14581] fuse: Unknown parameter 'fd0x0000000000000003' [ 414.508378][T12533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.551331][ T5873] usb 6-1: config 0 descriptor?? [ 414.561136][T12533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.585743][ T5873] hub 6-1:0.0: bad descriptor, ignoring hub [ 414.621206][ T5873] hub 6-1:0.0: probe with driver hub failed with error -5 [ 414.675063][ T5873] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 414.719918][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.750671][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.925226][T14542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.932558][T14542] IPv6: NLM_F_CREATE should be set when creating new route [ 415.272648][T14616] vlan2: entered allmulticast mode [ 415.867643][T12533] Bluetooth: hci6: Frame reassembly failed (-84) [ 416.030473][T14634] FAULT_INJECTION: forcing a failure. [ 416.030473][T14634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.043938][T14634] CPU: 0 UID: 0 PID: 14634 Comm: syz.3.1267 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 416.043961][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 416.043970][T14634] Call Trace: [ 416.043975][T14634] [ 416.043981][T14634] dump_stack_lvl+0x16c/0x1f0 [ 416.044007][T14634] should_fail_ex+0x512/0x640 [ 416.044028][T14634] _copy_from_user+0x2e/0xd0 [ 416.044049][T14634] copy_msghdr_from_user+0x98/0x160 [ 416.044070][T14634] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 416.044101][T14634] ___sys_sendmsg+0xfe/0x1d0 [ 416.044121][T14634] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.044169][T14634] __sys_sendmsg+0x16d/0x220 [ 416.044188][T14634] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.044215][T14634] ? rcu_is_watching+0x12/0xc0 [ 416.044243][T14634] do_syscall_64+0xcd/0x260 [ 416.044266][T14634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.044283][T14634] RIP: 0033:0x7f906db8e169 [ 416.044298][T14634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.044314][T14634] RSP: 002b:00007f906ea9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.044331][T14634] RAX: ffffffffffffffda RBX: 00007f906ddb6080 RCX: 00007f906db8e169 [ 416.044347][T14634] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 416.044356][T14634] RBP: 00007f906ea9c090 R08: 0000000000000000 R09: 0000000000000000 [ 416.044365][T14634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.044374][T14634] R13: 0000000000000000 R14: 00007f906ddb6080 R15: 00007ffcc3065cc8 [ 416.044396][T14634] [ 416.464923][ T5905] usb 6-1: USB disconnect, device number 24 [ 416.683235][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 416.683252][ T30] audit: type=1400 audit(1745063848.881:1100): avc: denied { ioctl } for pid=14635 comm="syz.5.1269" path="socket:[30526]" dev="sockfs" ino=30526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 416.770162][T14641] Cannot find del_set index 4 as target [ 416.951223][T14640] bridge0: port 3(netdevsim2) entered blocking state [ 416.957977][T14640] bridge0: port 3(netdevsim2) entered disabled state [ 416.964893][T14640] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 416.973083][T14640] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 416.980720][T14640] bridge0: port 3(netdevsim2) entered blocking state [ 416.987413][T14640] bridge0: port 3(netdevsim2) entered forwarding state [ 417.381540][T14659] fuse: Unknown parameter 'fd0x0000000000000003' [ 417.528161][ T30] audit: type=1400 audit(1745063849.791:1101): avc: denied { getopt } for pid=14663 comm="syz.5.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 417.589717][ T54] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 417.614721][T14667] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 417.887169][ T30] audit: type=1400 audit(1745063850.151:1102): avc: denied { setopt } for pid=14683 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 418.959618][ T5873] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 419.097766][ T30] audit: type=1400 audit(1745063851.361:1103): avc: denied { read } for pid=14707 comm="syz.5.1285" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 419.163480][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 419.182529][T14712] fuse: Unknown parameter 'fd0x0000000000000003' [ 419.277053][ T30] audit: type=1400 audit(1745063851.361:1104): avc: denied { open } for pid=14707 comm="syz.5.1285" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 419.309146][ T30] audit: type=1400 audit(1745063851.531:1105): avc: denied { mounton } for pid=14707 comm="syz.5.1285" path="/proc/744/cgroup" dev="proc" ino=30790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 419.333114][ T5873] usb 7-1: config 0 interface 0 has no altsetting 0 [ 419.353472][ T5873] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 419.373519][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.393232][ T5873] usb 7-1: Product: syz [ 419.397529][ T5873] usb 7-1: Manufacturer: syz [ 419.403511][ T5873] usb 7-1: SerialNumber: syz [ 419.412352][ T5873] usb 7-1: config 0 descriptor?? [ 420.364688][ T5873] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 420.400061][T14739] kAFS: unparsable volume name [ 420.447239][T14739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.661001][ T5873] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 421.662185][ T30] audit: type=1400 audit(1745063853.921:1106): avc: denied { getopt } for pid=14749 comm="syz.7.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 421.671159][ T5873] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 422.480452][ T5873] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 422.551289][ T2149] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 422.620706][ T5873] usb 7-1: USB disconnect, device number 3 [ 422.730337][ T2149] usb 6-1: Using ep0 maxpacket: 16 [ 422.746362][ T2149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 422.763134][ T2149] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 422.774366][ T2149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.783346][ T2149] usb 6-1: Product: syz [ 422.787531][ T2149] usb 6-1: Manufacturer: syz [ 422.797081][ T2149] usb 6-1: SerialNumber: syz [ 422.814465][ T2149] usb 6-1: config 0 descriptor?? [ 422.830812][ T2149] hub 6-1:0.0: bad descriptor, ignoring hub [ 422.836824][ T2149] hub 6-1:0.0: probe with driver hub failed with error -5 [ 423.258352][ T2149] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 423.831736][T14754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.839088][T14754] IPv6: NLM_F_CREATE should be set when creating new route [ 424.309459][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 424.459138][ T5873] usb 8-1: Using ep0 maxpacket: 16 [ 424.466893][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 424.478507][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34761, setting to 1024 [ 424.490378][ T5873] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.503501][ T5873] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 424.512841][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.524499][ T5873] usb 8-1: config 0 descriptor?? [ 424.530612][T14836] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 424.541106][ T5873] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input29 [ 424.919169][ T5905] usb 8-1: USB disconnect, device number 2 [ 424.919435][ C1] pxrc 8-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 424.988703][ T5874] usb 6-1: USB disconnect, device number 25 [ 425.339984][ T30] audit: type=1400 audit(1745063857.581:1107): avc: denied { getopt } for pid=14869 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 425.396481][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 425.426950][T14882] netlink: 'syz.0.1314': attribute type 25 has an invalid length. [ 425.978096][T14907] QAT: Invalid ioctl 1075883590 [ 425.997159][ T30] audit: type=1400 audit(1745063858.261:1108): avc: denied { read write } for pid=14909 comm="syz.7.1321" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 426.472666][T14907] QAT: Invalid ioctl 1075883590 [ 426.484625][ T30] audit: type=1400 audit(1745063858.261:1109): avc: denied { open } for pid=14909 comm="syz.7.1321" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 426.573081][ T30] audit: type=1400 audit(1745063858.261:1110): avc: denied { ioctl } for pid=14909 comm="syz.7.1321" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 426.730239][T14907] QAT: Invalid ioctl 1075883590 [ 426.934158][ T30] audit: type=1400 audit(1745063858.261:1111): avc: denied { map } for pid=14909 comm="syz.7.1321" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 426.979348][T14907] QAT: Invalid ioctl 1075883590 [ 427.011965][T14907] QAT: Invalid ioctl 1075883590 [ 427.059396][ T30] audit: type=1400 audit(1745063859.321:1112): avc: denied { write } for pid=14904 comm="syz.6.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 427.110264][T14907] QAT: Invalid ioctl 1075883590 [ 427.134308][ T30] audit: type=1326 audit(1745063859.371:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.5.1322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x0 [ 427.166919][T14907] QAT: Invalid ioctl 1075883590 [ 427.194431][T14907] QAT: Invalid ioctl 1075883590 [ 427.359726][ T5874] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 427.508792][ T30] audit: type=1400 audit(1745063859.771:1114): avc: denied { read } for pid=14916 comm="syz.5.1322" dev="sockfs" ino=31883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.535100][T14907] QAT: Invalid ioctl 1075883590 [ 427.854589][ T5873] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 428.220314][T14914] Set syz1 is full, maxelem 65536 reached [ 428.303664][T14907] QAT: Invalid ioctl 1075883590 [ 428.489994][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 428.499261][ T5874] usb 4-1: config 253 has an invalid interface number: 58 but max is 0 [ 428.508452][ T5874] usb 4-1: config 253 has no interface number 0 [ 428.520031][ T5873] usb 7-1: config 4 has an invalid interface number: 8 but max is 0 [ 428.552243][ T5874] usb 4-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 428.562991][ T5873] usb 7-1: config 4 has no interface number 0 [ 428.579391][ T5873] usb 7-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 428.589734][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.608613][T14942] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1327'. [ 428.631097][ T5873] usb 7-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 428.673632][ T5873] usb 7-1: config 4 interface 8 has no altsetting 0 [ 428.692839][ T5873] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 428.704007][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.721962][ T5873] usb 7-1: Product: syz [ 428.737698][ T5873] usb 7-1: Manufacturer: syz [ 428.742836][ T5873] usb 7-1: SerialNumber: syz [ 428.849974][ T5874] usb 4-1: string descriptor 0 read error: -71 [ 428.906442][ T5874] gspca_main: spca500-2.14.0 probing 041e:400a [ 429.498960][ T5874] usb 4-1: USB disconnect, device number 26 [ 429.676183][ T5873] opticon 7-1:4.8: opticon converter detected [ 429.703887][T14967] xt_TCPMSS: Only works on TCP SYN packets [ 429.726602][ T5873] usb 7-1: opticon converter now attached to ttyUSB0 [ 429.785798][ T5873] usb 7-1: USB disconnect, device number 4 [ 429.946996][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1333'. [ 429.957698][T14990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1333'. [ 429.966843][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1333'. [ 429.976114][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1333'. [ 430.161013][ T5873] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 430.181810][ T5873] opticon 7-1:4.8: device disconnected [ 430.586861][T15003] netlink: 'syz.6.1335': attribute type 4 has an invalid length. [ 431.100639][ T30] audit: type=1400 audit(1745063863.291:1115): avc: denied { listen } for pid=14993 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.134374][T14993] delete_channel: no stack [ 431.216437][ T30] audit: type=1400 audit(1745063863.361:1116): avc: denied { bind } for pid=14993 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 431.729930][T15033] netlink: 'syz.7.1341': attribute type 1 has an invalid length. [ 431.738278][T15033] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1341'. [ 432.375284][T15040] batadv_slave_0: entered allmulticast mode [ 432.923336][T15035] lo speed is unknown, defaulting to 1000 [ 432.938076][T15035] syzkaller0 speed is unknown, defaulting to 1000 [ 433.125814][T15039] batadv_slave_0: left allmulticast mode [ 433.255496][ T30] audit: type=1400 audit(1745063865.441:1117): avc: denied { getopt } for pid=15066 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 434.863100][T15079] xt_TCPMSS: Only works on TCP SYN packets [ 435.699214][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 436.090627][T15110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1351'. [ 436.099785][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1351'. [ 436.108897][T15110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1351'. [ 436.118697][T15110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1351'. [ 436.249353][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 436.411712][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.420888][ T5912] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 436.432414][ T5912] usb 4-1: config 0 has no interface number 0 [ 436.451529][ T5912] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 436.451659][ T30] audit: type=1400 audit(1745063868.721:1118): avc: denied { getopt } for pid=15111 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 436.479113][ T5912] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 436.533915][ T5912] usb 4-1: config 0 interface 88 has no altsetting 0 [ 436.545791][T15112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1353'. [ 436.571389][ T5912] usb 4-1: string descriptor 0 read error: -22 [ 436.591211][ T5912] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 436.608831][T15112] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 436.614748][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 436.806116][ T5912] usb 4-1: config 0 descriptor?? [ 436.973051][ T5912] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input30 [ 437.125206][ T5998] udevd[5998]: Error opening device "/dev/input/event4": Input/output error [ 437.135750][ T5998] udevd[5998]: Unable to EVIOCGABS device "/dev/input/event4" [ 437.145586][ T5998] udevd[5998]: Unable to EVIOCGABS device "/dev/input/event4" [ 437.347433][ T30] audit: type=1326 audit(1745063869.611:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 437.625796][ T30] audit: type=1326 audit(1745063869.611:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 437.650296][ T30] audit: type=1326 audit(1745063869.611:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 437.674887][ T30] audit: type=1326 audit(1745063869.611:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 437.727001][ T30] audit: type=1326 audit(1745063869.611:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 438.263425][ T30] audit: type=1326 audit(1745063869.611:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 438.288355][ T30] audit: type=1326 audit(1745063869.611:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 438.877712][ T30] audit: type=1326 audit(1745063869.611:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 438.907279][ T30] audit: type=1326 audit(1745063869.611:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.6.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 439.031317][ T9] usb 4-1: USB disconnect, device number 27 [ 439.802255][T15193] lo speed is unknown, defaulting to 1000 [ 439.819120][T15193] syzkaller0 speed is unknown, defaulting to 1000 [ 440.325910][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.339406][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.398541][T15229] overlay: Unknown parameter 'smackfstransmute' [ 441.466858][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 441.466879][ T30] audit: type=1400 audit(1745063873.641:1154): avc: denied { read } for pid=15226 comm="syz.5.1368" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 442.332446][T15230] lo speed is unknown, defaulting to 1000 [ 442.691994][ T30] audit: type=1400 audit(1745063873.641:1155): avc: denied { open } for pid=15226 comm="syz.5.1368" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 443.198916][ T30] audit: type=1400 audit(1745063875.451:1156): avc: denied { write } for pid=15241 comm="syz.5.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 443.242322][ T30] audit: type=1400 audit(1745063875.461:1157): avc: denied { setopt } for pid=15242 comm="syz.7.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 443.273030][T15230] syzkaller0 speed is unknown, defaulting to 1000 [ 443.693693][ T30] audit: type=1400 audit(1745063875.961:1158): avc: denied { accept } for pid=15271 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 443.717552][T15274] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1375'. [ 443.834039][T15299] syzkaller1: entered promiscuous mode [ 443.840351][T15299] syzkaller1: entered allmulticast mode [ 444.256157][T15317] FAULT_INJECTION: forcing a failure. [ 444.256157][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 444.270663][T15317] CPU: 0 UID: 0 PID: 15317 Comm: syz.7.1379 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 444.270683][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.270691][T15317] Call Trace: [ 444.270695][T15317] [ 444.270701][T15317] dump_stack_lvl+0x16c/0x1f0 [ 444.270724][T15317] should_fail_ex+0x512/0x640 [ 444.270738][T15317] ? __kmalloc_noprof+0xbf/0x510 [ 444.270753][T15317] ? io_cache_alloc_new+0x45/0xf0 [ 444.270768][T15317] should_failslab+0xc2/0x120 [ 444.270782][T15317] __kmalloc_noprof+0xd2/0x510 [ 444.270799][T15317] io_cache_alloc_new+0x45/0xf0 [ 444.270815][T15317] __io_prep_rw+0x227/0xf40 [ 444.270833][T15317] ? __pfx___io_prep_rw+0x10/0x10 [ 444.270848][T15317] ? mark_held_locks+0x49/0x80 [ 444.270860][T15317] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 444.270895][T15317] io_prep_rw+0x24/0x220 [ 444.271012][T15317] io_prep_readv+0x20/0xa0 [ 444.271039][T15317] io_submit_sqes+0x825/0x25d0 [ 444.271068][T15317] __do_sys_io_uring_enter+0xd6a/0x1630 [ 444.271090][T15317] ? __fget_files+0x20e/0x3c0 [ 444.271103][T15317] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 444.271125][T15317] ? fput+0x70/0xf0 [ 444.271139][T15317] ? ksys_write+0x1b9/0x240 [ 444.271149][T15317] ? __pfx_ksys_write+0x10/0x10 [ 444.271159][T15317] ? rcu_is_watching+0x12/0xc0 [ 444.271181][T15317] do_syscall_64+0xcd/0x260 [ 444.271200][T15317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.271213][T15317] RIP: 0033:0x7f3810d8e169 [ 444.271225][T15317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.271237][T15317] RSP: 002b:00007f3811c33038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 444.271250][T15317] RAX: ffffffffffffffda RBX: 00007f3810fb6160 RCX: 00007f3810d8e169 [ 444.271258][T15317] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000008 [ 444.271266][T15317] RBP: 00007f3811c33090 R08: 0000000000000000 R09: 0000000000000000 [ 444.271273][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.271281][T15317] R13: 0000000000000000 R14: 00007f3810fb6160 R15: 00007ffe04c4fa98 [ 444.271298][T15317] [ 446.024360][ T7179] Bluetooth: hci6: Frame reassembly failed (-84) [ 446.288321][T15344] FAULT_INJECTION: forcing a failure. [ 446.288321][T15344] name failslab, interval 1, probability 0, space 0, times 0 [ 446.303406][T15344] CPU: 1 UID: 0 PID: 15344 Comm: syz.6.1384 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 446.303424][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.303429][T15344] Call Trace: [ 446.303433][T15344] [ 446.303437][T15344] dump_stack_lvl+0x16c/0x1f0 [ 446.303459][T15344] should_fail_ex+0x512/0x640 [ 446.303477][T15344] ? fs_reclaim_acquire+0xae/0x150 [ 446.303501][T15344] ? tomoyo_encode2+0x100/0x3e0 [ 446.303518][T15344] should_failslab+0xc2/0x120 [ 446.303530][T15344] __kmalloc_noprof+0xd2/0x510 [ 446.303540][T15344] ? d_absolute_path+0x136/0x1a0 [ 446.303555][T15344] tomoyo_encode2+0x100/0x3e0 [ 446.303575][T15344] tomoyo_encode+0x29/0x50 [ 446.303595][T15344] tomoyo_realpath_from_path+0x18f/0x6e0 [ 446.303619][T15344] tomoyo_check_open_permission+0x2ab/0x3c0 [ 446.303633][T15344] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 446.303658][T15344] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.303674][T15344] tomoyo_file_open+0x6b/0x90 [ 446.303683][T15344] security_file_open+0x84/0x1e0 [ 446.303699][T15344] do_dentry_open+0x596/0x1c10 [ 446.303712][T15344] vfs_open+0x82/0x3f0 [ 446.303725][T15344] path_openat+0x1e5e/0x2d40 [ 446.303739][T15344] ? __pfx_path_openat+0x10/0x10 [ 446.303750][T15344] ? __lock_acquire+0xaa4/0x1ba0 [ 446.303760][T15344] do_filp_open+0x20b/0x470 [ 446.303770][T15344] ? __pfx_do_filp_open+0x10/0x10 [ 446.303788][T15344] ? _raw_spin_unlock+0x28/0x50 [ 446.303799][T15344] ? alloc_fd+0x471/0x7d0 [ 446.303812][T15344] do_sys_openat2+0x11b/0x1d0 [ 446.303823][T15344] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.303836][T15344] ? __fget_files+0x20e/0x3c0 [ 446.303848][T15344] __x64_sys_open+0x153/0x1e0 [ 446.303860][T15344] ? __pfx___x64_sys_open+0x10/0x10 [ 446.303874][T15344] ? rcu_is_watching+0x12/0xc0 [ 446.303893][T15344] do_syscall_64+0xcd/0x260 [ 446.303908][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.303918][T15344] RIP: 0033:0x7faed4f8e169 [ 446.303926][T15344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.303936][T15344] RSP: 002b:00007faed5dfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 446.303946][T15344] RAX: ffffffffffffffda RBX: 00007faed51b6080 RCX: 00007faed4f8e169 [ 446.303952][T15344] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000001c0 [ 446.303957][T15344] RBP: 00007faed5dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 446.303963][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.303968][T15344] R13: 0000000000000000 R14: 00007faed51b6080 R15: 00007ffd57f2e638 [ 446.303981][T15344] [ 446.303994][T15344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.394064][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 446.775534][ T9] usb 8-1: device descriptor read/64, error -71 [ 447.014250][T15357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.162861][T15357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.169160][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 447.207422][ T30] audit: type=1400 audit(1745063879.471:1159): avc: denied { bind } for pid=15364 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 447.268606][T15369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.339425][ T9] usb 8-1: device descriptor read/64, error -71 [ 447.719957][ T9] usb usb8-port1: attempt power cycle [ 447.845987][T15375] kvm: kvm [15374]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008e) [ 447.899209][ T54] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 448.069410][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 448.590349][ T9] usb 8-1: device descriptor read/8, error -71 [ 449.043553][T15387] lo speed is unknown, defaulting to 1000 [ 449.068247][T15387] syzkaller0 speed is unknown, defaulting to 1000 [ 450.476306][T15428] overlayfs: missing 'lowerdir' [ 452.159660][T15451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.609466][T15459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.367022][ T30] audit: type=1400 audit(1745063886.631:1160): avc: denied { append } for pid=15485 comm="syz.3.1412" name="nbd3" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.406054][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1411'. [ 454.417375][T15489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1411'. [ 454.432354][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1411'. [ 454.454801][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1411'. [ 454.481339][T15488] lo speed is unknown, defaulting to 1000 [ 454.487744][T15488] syzkaller0 speed is unknown, defaulting to 1000 [ 454.627765][ T7179] Bluetooth: hci6: Frame reassembly failed (-84) [ 454.661278][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 454.805593][T15486] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 454.931637][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 456.619861][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 457.891885][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1420'. [ 458.033501][ T30] audit: type=1400 audit(1745063890.281:1161): avc: denied { relabelfrom } for pid=15548 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 458.069188][ T54] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 458.107529][ T30] audit: type=1400 audit(1745063890.331:1162): avc: denied { relabelto } for pid=15548 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 458.403942][T15567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.971640][ T30] audit: type=1400 audit(1745063892.241:1163): avc: denied { getopt } for pid=15544 comm="syz.7.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.088070][T15582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1427'. [ 460.097143][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1427'. [ 460.106491][T15582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1427'. [ 460.115492][T15582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1427'. [ 460.145205][T15594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1431'. [ 461.089798][T15612] lo speed is unknown, defaulting to 1000 [ 461.617217][T15612] syzkaller0 speed is unknown, defaulting to 1000 [ 461.873443][ T30] audit: type=1400 audit(1745063894.141:1164): avc: denied { setopt } for pid=15638 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.731309][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1444'. [ 462.741878][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1444'. [ 462.751045][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1444'. [ 462.761207][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1444'. [ 463.319592][ T30] audit: type=1400 audit(1745063895.581:1165): avc: denied { unmount } for pid=13365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 463.619766][T15709] lo speed is unknown, defaulting to 1000 [ 463.637712][T15709] syzkaller0 speed is unknown, defaulting to 1000 [ 465.461013][T15752] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 465.467575][T15752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 465.494648][T15752] vhci_hcd vhci_hcd.0: Device attached [ 465.769684][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 465.773825][ T30] audit: type=1400 audit(1745063898.011:1166): avc: denied { mount } for pid=15771 comm="syz.0.1459" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 465.779122][ T5874] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 465.835968][ T30] audit: type=1400 audit(1745063898.091:1167): avc: denied { getopt } for pid=15771 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.893975][T15768] lo speed is unknown, defaulting to 1000 [ 465.907242][T15768] syzkaller0 speed is unknown, defaulting to 1000 [ 465.999106][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 467.094739][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 467.107791][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.149869][ T9] usb 4-1: Product: syz [ 467.155152][ T9] usb 4-1: Manufacturer: syz [ 467.184789][ T9] usb 4-1: SerialNumber: syz [ 467.277415][ T8014] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 467.569233][ T8014] usb 8-1: Using ep0 maxpacket: 8 [ 467.582309][ T8014] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 467.610848][ T8014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.632045][ T9] usb 4-1: config 0 descriptor?? [ 467.656058][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 467.685836][ T30] audit: type=1400 audit(1745063899.951:1168): avc: denied { read write } for pid=15830 comm="syz.6.1466" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 467.711670][ T8014] usb 8-1: config 0 descriptor?? [ 467.719319][ T9] usb 4-1: Detected FT232H [ 467.765492][ T30] audit: type=1400 audit(1745063899.951:1169): avc: denied { open } for pid=15830 comm="syz.6.1466" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 467.825051][ T30] audit: type=1400 audit(1745063900.091:1170): avc: denied { append } for pid=15830 comm="syz.6.1466" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.861891][T15753] usbip_core: unknown command [ 467.871705][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 467.888609][T15753] vhci_hcd: unknown pdu 808464432 [ 467.896094][T15753] usbip_core: unknown command [ 467.901319][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 467.915029][ T7179] vhci_hcd: stop threads [ 467.920353][ T7179] vhci_hcd: release socket [ 467.924979][ T30] audit: type=1400 audit(1745063900.191:1171): avc: denied { ioctl } for pid=15830 comm="syz.6.1466" path="socket:[33317]" dev="sockfs" ino=33317 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 467.939220][ T7179] vhci_hcd: disconnect device [ 467.950771][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 467.965006][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.998871][ T9] usb 4-1: USB disconnect, device number 28 [ 468.059252][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 468.098933][ T9] ftdi_sio 4-1:0.0: device disconnected [ 468.821321][ T30] audit: type=1400 audit(1745063901.091:1172): avc: denied { map } for pid=15872 comm="syz.3.1468" path="pipe:[3775]" dev="pipefs" ino=3775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 468.847335][ T30] audit: type=1400 audit(1745063901.111:1173): avc: denied { execute } for pid=15872 comm="syz.3.1468" path="pipe:[3775]" dev="pipefs" ino=3775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 469.654121][T15878] lo speed is unknown, defaulting to 1000 [ 469.661161][T15878] syzkaller0 speed is unknown, defaulting to 1000 [ 470.179654][ T8014] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 470.191144][ T8014] asix 8-1:0.0: probe with driver asix failed with error -71 [ 470.216693][ T8014] usb 8-1: USB disconnect, device number 7 [ 470.954602][ T5874] vhci_hcd: vhci_device speed not set [ 471.691611][T15950] lo speed is unknown, defaulting to 1000 [ 471.960698][T15956] lo speed is unknown, defaulting to 1000 [ 472.006065][T15950] syzkaller0 speed is unknown, defaulting to 1000 [ 472.319332][T15956] syzkaller0 speed is unknown, defaulting to 1000 [ 472.479454][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 472.941037][T15964] erspan0: entered promiscuous mode [ 472.946673][T15964] macsec1: entered promiscuous mode [ 473.077836][ T5825] Bluetooth: hci3: Malformed Event: 0x13 [ 473.194536][T16017] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1483'. [ 473.309157][T16027] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1484'. [ 473.886068][T16031] kvm: emulating exchange as write [ 473.908548][T16040] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1487'. [ 473.935893][T16042] siw: device registration error -23 [ 475.162498][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 475.480089][T16065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.687459][T16070] lo speed is unknown, defaulting to 1000 [ 475.698887][T16070] syzkaller0 speed is unknown, defaulting to 1000 [ 476.529694][T16084] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1494'. [ 477.727956][ T30] audit: type=1326 audit(1745063909.991:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 477.742830][T16121] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.777830][T16126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1500'. [ 477.846263][T16121] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.094159][T16128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 478.134525][ T30] audit: type=1326 audit(1745063909.991:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 478.222002][T16121] bridge0: port 3(netdevsim2) entered disabled state [ 478.230951][ T30] audit: type=1326 audit(1745063910.051:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 478.382645][ T30] audit: type=1326 audit(1745063910.061:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 478.407138][ T30] audit: type=1326 audit(1745063910.061:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 478.893962][ T30] audit: type=1326 audit(1745063910.061:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 478.919656][T16128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 478.981222][ T30] audit: type=1326 audit(1745063910.061:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 479.062031][ T30] audit: type=1326 audit(1745063910.061:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 479.111866][T16145] bio_check_eod: 14 callbacks suppressed [ 479.111881][T16145] syz.6.1504: attempt to access beyond end of device [ 479.111881][T16145] loop6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 479.140350][T16145] hfs: can't find a HFS filesystem on dev loop6 [ 479.557459][ T30] audit: type=1326 audit(1745063910.061:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 479.592508][ T30] audit: type=1326 audit(1745063910.061:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 479.901754][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1510'. [ 480.088149][T16170] veth1_to_hsr: entered promiscuous mode [ 480.136315][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 480.256795][T16170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16170 comm=syz.3.1511 [ 480.395319][T16163] hsr_slave_1 (unregistering): left promiscuous mode [ 480.647068][T16189] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1517'. [ 481.523101][T16190] can0: slcan on ttyS3. [ 481.563786][T16195] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 481.673352][T16204] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1520'. [ 481.779521][T16190] can0 (unregistered): slcan off ttyS3. [ 482.716071][T16225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1522'. [ 482.725290][T16225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1522'. [ 482.737698][T16225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1522'. [ 483.476303][T16235] xt_cgroup: path and classid specified [ 483.591046][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 483.591061][ T30] audit: type=1326 audit(1745063915.851:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.728773][ T30] audit: type=1326 audit(1745063915.851:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.756420][ T30] audit: type=1326 audit(1745063915.891:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.780835][ T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 483.789635][ T30] audit: type=1326 audit(1745063915.891:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.816895][ T30] audit: type=1326 audit(1745063915.891:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.841510][ T30] audit: type=1326 audit(1745063915.891:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.866376][ T30] audit: type=1326 audit(1745063915.891:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.909360][ T30] audit: type=1326 audit(1745063915.891:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 483.976872][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.157624][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 484.193781][ T30] audit: type=1326 audit(1745063915.891:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 484.353871][T16261] __nla_validate_parse: 1 callbacks suppressed [ 484.360139][T16261] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1531'. [ 484.524669][ T30] audit: type=1326 audit(1745063915.891:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.6.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed4f8e169 code=0x7ffc0000 [ 484.553124][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.562409][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.571181][ T9] usb 6-1: Product: syz [ 484.593504][ T9] usb 6-1: Manufacturer: syz [ 484.598199][ T9] usb 6-1: SerialNumber: syz [ 484.615796][T16235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 484.627019][ T54] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 485.312686][T16294] lo speed is unknown, defaulting to 1000 [ 485.327044][T16294] syzkaller0 speed is unknown, defaulting to 1000 [ 485.478350][ T2149] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 485.832781][ T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 485.883269][ T9] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 486.170376][ T9] cdc_ncm 6-1:1.0: setting tx_max = 56 [ 486.319166][ T2149] usb 7-1: device descriptor read/64, error -71 [ 486.469793][ T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 486.486830][ T9] usb 6-1: USB disconnect, device number 26 [ 486.494616][ T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 487.083138][ T2149] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 487.139620][ T8014] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 487.285026][ T2149] usb 7-1: device descriptor read/64, error -71 [ 487.389127][ T8014] usb 8-1: device descriptor read/64, error -71 [ 487.460758][ T2149] usb usb7-port1: attempt power cycle [ 488.168458][ T8014] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 488.229233][ T2149] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 488.357160][ T8014] usb 8-1: device descriptor read/64, error -71 [ 488.509457][ T2149] usb 7-1: device not accepting address 7, error -71 [ 488.537841][ T8014] usb usb8-port1: attempt power cycle [ 488.999235][ T8014] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 489.105470][ T8014] usb 8-1: device descriptor read/8, error -71 [ 489.132841][T12543] bridge_slave_1: left promiscuous mode [ 489.160369][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.187981][T12543] bridge_slave_0: left promiscuous mode [ 489.193978][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.389263][ T8014] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 489.828129][ T8014] usb 8-1: device descriptor read/8, error -71 [ 489.905492][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 489.905507][ T30] audit: type=1400 audit(1745063922.171:1289): avc: denied { mount } for pid=16432 comm="syz.0.1552" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 489.942303][T16434] overlayfs: failed to clone upperpath [ 489.966267][ T8014] usb usb8-port1: unable to enumerate USB device [ 490.053620][T16447] trusted_key: syz.0.1552 sent an empty control message without MSG_MORE. [ 490.299589][ T8014] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 490.388480][T16456] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.1554'. [ 490.433529][T16456] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 490.441864][T16456] overlayfs: failed to set xattr on upper [ 490.447667][T16456] overlayfs: ...falling back to redirect_dir=nofollow. [ 490.455472][T16456] overlayfs: ...falling back to index=off. [ 490.462088][T16456] overlayfs: ...falling back to uuid=null. [ 490.478267][T16456] overlayfs: maximum fs stacking depth exceeded [ 491.504639][T12543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.523380][ T8014] usb 8-1: Using ep0 maxpacket: 16 [ 491.538701][ T8014] usb 8-1: config 0 has no interfaces? [ 491.553629][ T8014] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 491.608170][T16468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.661419][ T8014] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.772006][ T8014] usb 8-1: Product: syz [ 491.836095][ T8014] usb 8-1: Manufacturer: syz [ 491.913313][ T8014] usb 8-1: SerialNumber: syz [ 491.957076][T12543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.967644][T12543] bond0 (unregistering): Released all slaves [ 491.967902][ T8014] usb 8-1: config 0 descriptor?? [ 492.411892][ T9] usb 8-1: USB disconnect, device number 12 [ 493.056051][T16490] ALSA: mixer_oss: invalid OSS volume '' [ 493.796674][T16512] ALSA: mixer_oss: invalid OSS volume '' [ 494.277455][ T30] audit: type=1400 audit(1745063926.221:1290): avc: denied { read write } for pid=16517 comm="syz.7.1565" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 494.307416][T12543] hsr_slave_0: left promiscuous mode [ 494.315812][ T30] audit: type=1400 audit(1745063926.221:1291): avc: denied { open } for pid=16517 comm="syz.7.1565" path="/41/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 494.342347][T12543] hsr_slave_1: left promiscuous mode [ 494.364580][T12543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.399905][T12543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.267536][ T30] audit: type=1400 audit(1745063927.521:1292): avc: denied { ioctl } for pid=16559 comm="syz.6.1569" path="socket:[36059]" dev="sockfs" ino=36059 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 496.527768][T16582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.634375][T16583] kernel read not supported for file /rmdF (pid: 16583 comm: syz.6.1573) [ 496.678752][ T30] audit: type=1800 audit(1745063928.931:1293): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1573" name=726D64461716BCEC dev="mqueue" ino=35382 res=0 errno=0 [ 497.109283][ T5905] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 497.276439][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 497.288499][ T5905] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 497.298094][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.335248][ T5905] usb 4-1: config 0 descriptor?? [ 497.482954][T12543] team0 (unregistering): Port device team_slave_1 removed [ 497.646383][T12543] team0 (unregistering): Port device team_slave_0 removed [ 499.324406][ T5905] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 499.350059][ T5905] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 499.371842][ T5905] asix 4-1:0.0: probe with driver asix failed with error -71 [ 499.410522][ T5905] usb 4-1: USB disconnect, device number 29 [ 499.434843][T16610] lo speed is unknown, defaulting to 1000 [ 499.441466][T16610] syzkaller0 speed is unknown, defaulting to 1000 [ 499.491285][T16632] syzkaller1: entered promiscuous mode [ 499.507437][T16632] syzkaller1: entered allmulticast mode [ 499.661246][T16697] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1585'. [ 500.762249][T16716] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1590'. [ 501.609669][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.622907][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.911501][T16747] lo speed is unknown, defaulting to 1000 [ 503.922927][T16747] syzkaller0 speed is unknown, defaulting to 1000 [ 505.499431][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 505.699292][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 505.787213][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 505.957156][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.086152][ T9] usb 7-1: config 0 descriptor?? [ 506.374279][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.028368][ T30] audit: type=1326 audit(1745063939.291:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.7.1599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f3810d8e169 code=0x0 [ 507.159438][ T5873] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 508.430827][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 508.575993][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 508.654193][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 508.706201][ T9] usb 7-1: USB disconnect, device number 9 [ 509.390901][ T5874] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 509.525451][ T30] audit: type=1400 audit(1745063941.791:1295): avc: denied { sys_chroot } for pid=16908 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 509.546880][ T30] audit: type=1400 audit(1745063941.791:1296): avc: denied { setgid } for pid=16908 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 509.568666][ T30] audit: type=1400 audit(1745063941.791:1297): avc: denied { setrlimit } for pid=16908 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 510.809141][ T5874] usb 6-1: Invalid ep0 maxpacket: 32 [ 510.939566][T16930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1607'. [ 510.959449][ T5874] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 511.584160][T16944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1603'. [ 511.593471][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 511.609140][ T5874] usb 6-1: Invalid ep0 maxpacket: 32 [ 511.708441][T16936] lo speed is unknown, defaulting to 1000 [ 512.739529][ T5874] usb usb6-port1: attempt power cycle [ 512.895246][T16952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16952 comm=syz.0.1603 [ 513.944852][T16936] syzkaller0 speed is unknown, defaulting to 1000 [ 514.047962][T16990] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1613'. [ 515.480987][T16956] Bluetooth: hci5: command 0x0406 tx timeout [ 516.224437][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.232100][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.268833][T17048] bridge0: entered allmulticast mode [ 516.293427][T17057] bridge_slave_1: left allmulticast mode [ 516.342212][T17057] bridge_slave_1: left promiscuous mode [ 516.349851][T17057] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.437112][T17057] bridge_slave_0: left allmulticast mode [ 516.463892][T17057] bridge_slave_0: left promiscuous mode [ 516.489752][T17057] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.630556][T17072] syz.5.1620 (17072): drop_caches: 2 [ 518.415172][T17113] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1627'. [ 518.833364][ T30] audit: type=1326 audit(1745063951.101:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 519.332906][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1629'. [ 519.938030][ T30] audit: type=1326 audit(1745063951.461:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 520.069631][ T30] audit: type=1326 audit(1745063951.871:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59c1b8cad0 code=0x7ffc0000 [ 520.254661][T17137] lo speed is unknown, defaulting to 1000 [ 520.266384][T17137] syzkaller0 speed is unknown, defaulting to 1000 [ 520.471879][ T30] audit: type=1326 audit(1745063951.871:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f59c1b8f997 code=0x7ffc0000 [ 520.705260][ T30] audit: type=1326 audit(1745063951.871:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 520.945238][ T30] audit: type=1326 audit(1745063951.871:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f59c1b8f997 code=0x7ffc0000 [ 521.040878][ T30] audit: type=1326 audit(1745063951.871:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f59c1b8cdca code=0x7ffc0000 [ 521.369605][ T30] audit: type=1326 audit(1745063951.871:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 521.479285][T17197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.493114][ T30] audit: type=1326 audit(1745063951.871:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 521.574814][ T30] audit: type=1326 audit(1745063951.961:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17119 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59c1b8e169 code=0x7ffc0000 [ 525.319563][T17255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.541707][ T5873] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 526.550029][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 526.709332][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 526.852571][T17288] lo speed is unknown, defaulting to 1000 [ 526.865609][T17288] syzkaller0 speed is unknown, defaulting to 1000 [ 527.141886][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.160050][ T5873] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 527.169656][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.187032][ T5873] usb 7-1: config 0 descriptor?? [ 527.201292][ T5873] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 527.516774][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 527.516797][ T30] audit: type=1400 audit(1745063959.781:1329): avc: denied { write } for pid=17263 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 528.229354][ T5873] gspca_vc032x: reg_w err -110 [ 528.356487][ T5873] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 529.080624][T17331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.259110][T17023] Bluetooth: hci4: command 0x0406 tx timeout [ 530.055408][ T30] audit: type=1400 audit(1745063962.301:1330): avc: denied { mounton } for pid=17260 comm="syz.6.1643" path="/94/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 530.893717][ T9] usb 7-1: USB disconnect, device number 10 [ 531.602827][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1656'. [ 531.638453][ T30] audit: type=1400 audit(1745063963.901:1331): avc: denied { mounton } for pid=17377 comm="syz.0.1657" path="/424/file0" dev="tmpfs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 531.638889][T17381] 9pnet_fd: p9_fd_create_unix (17381): problem connecting socket: ./file0: -111 [ 531.860802][T17381] netlink: 'syz.0.1657': attribute type 58 has an invalid length. [ 531.868674][T17381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1657'. [ 531.994816][ T30] audit: type=1400 audit(1745063964.241:1332): avc: denied { mounton } for pid=17379 comm="syz.3.1659" path="/327/file0/file0" dev="afs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 532.019823][ T5873] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 532.072261][T17401] vlan0: entered promiscuous mode [ 532.192849][ T5873] usb 8-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 532.202351][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.269215][ T5873] usb 8-1: config 0 descriptor?? [ 532.354183][T17414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1663'. [ 532.664699][ T5873] snd-usb-hiface 8-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 533.061584][T17384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.080108][T17384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.104089][T17384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.273586][T17384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.661520][T17384] netlink: 'syz.7.1658': attribute type 11 has an invalid length. [ 534.077402][T17384] syz.7.1658 (17384): drop_caches: 2 [ 534.198080][T17384] syz.7.1658 (17384): drop_caches: 2 [ 534.499114][ T5912] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 534.738553][ T5873] usb 8-1: USB disconnect, device number 14 [ 534.894125][ T5912] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.071847][ T5912] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 535.116491][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.125752][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.141796][T17445] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 535.151947][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.033316][ T5912] usb 4-1: USB disconnect, device number 30 [ 536.250663][ T5873] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 536.389712][ T6585] udevd[6585]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.889130][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 536.896127][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.921309][ T5873] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 537.036018][T17553] [U] 1WT`8H$09\ [ 538.079258][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.099902][T17553] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 538.121378][ T5873] usb 6-1: config 0 descriptor?? [ 538.381211][T17553] [U] 4XZ^Y)MC. OȞPOW [ 538.387589][T17553] [U] ä%Z [ 538.478059][T17553] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 538.514948][T17553] [U] P>BЍ̖Z% [ 538.651853][ T30] audit: type=1400 audit(1745063970.921:1333): avc: denied { getopt } for pid=17577 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 538.673351][ T5873] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 539.391551][ T2149] usb 6-1: USB disconnect, device number 30 [ 539.889625][ T5873] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 540.025442][T17619] Cannot find del_set index 0 as target [ 540.067938][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 540.326244][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 540.397170][ T5873] usb 4-1: can't read configurations, error -61 [ 540.599102][ T5873] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 540.763708][T17636] siw: device registration error -23 [ 540.819389][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 540.947391][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 541.068364][ T5873] usb 4-1: can't read configurations, error -61 [ 541.148718][ T5873] usb usb4-port1: attempt power cycle [ 541.340528][ T30] audit: type=1400 audit(1745063973.611:1334): avc: denied { map } for pid=17657 comm="syz.5.1699" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 541.382474][T17661] IPv6: addrconf: prefix option has invalid lifetime [ 541.383063][ T30] audit: type=1400 audit(1745063973.641:1335): avc: denied { connect } for pid=17660 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 541.509390][ T5873] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 541.550707][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 541.563989][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 541.579568][ T5873] usb 4-1: can't read configurations, error -61 [ 541.759363][ T5873] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 541.992615][T17665] lo speed is unknown, defaulting to 1000 [ 542.004327][T17665] syzkaller0 speed is unknown, defaulting to 1000 [ 542.300172][T17672] lo speed is unknown, defaulting to 1000 [ 542.312699][T17672] syzkaller0 speed is unknown, defaulting to 1000 [ 543.555284][ T5873] usb 4-1: device descriptor read/8, error -71 [ 543.789821][ T5873] usb usb4-port1: unable to enumerate USB device [ 545.447798][ T30] audit: type=1400 audit(1745063977.711:1336): avc: denied { setopt } for pid=17736 comm="syz.0.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 545.564655][T17743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.282533][T17776] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1712'. [ 546.707792][ T30] audit: type=1400 audit(1745063978.451:1337): avc: denied { mount } for pid=17768 comm="syz.5.1713" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 546.734275][ T30] audit: type=1400 audit(1745063979.001:1338): avc: denied { remount } for pid=17768 comm="syz.5.1713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 546.837659][ T30] audit: type=1400 audit(1745063979.031:1339): avc: denied { mounton } for pid=17768 comm="syz.5.1713" path="/294/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 546.859837][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.891570][T17772] batman_adv: batadv0: Adding interface: gretap1 [ 547.001768][T17772] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 547.065638][ T30] audit: type=1400 audit(1745063979.331:1340): avc: denied { unmount } for pid=6261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 547.221384][ T30] audit: type=1400 audit(1745063979.481:1341): avc: denied { map } for pid=17797 comm="syz.0.1718" path="socket:[38957]" dev="sockfs" ino=38957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 547.244508][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.261350][ T30] audit: type=1400 audit(1745063979.481:1342): avc: denied { read } for pid=17797 comm="syz.0.1718" path="socket:[38957]" dev="sockfs" ino=38957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 547.368818][T17805] pim6reg1: entered promiscuous mode [ 547.374259][T17805] pim6reg1: entered allmulticast mode [ 548.941082][ T31] INFO: task syz.1.1169:13355 blocked for more than 143 seconds. [ 548.966669][ T31] Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 [ 549.003227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.238982][ T31] task:syz.1.1169 state:D stack:24760 pid:13355 tgid:13355 ppid:5818 task_flags:0x400040 flags:0x00000004 [ 549.418942][ T31] Call Trace: [ 549.441332][ T31] [ 549.444310][ T31] __schedule+0x116f/0x5de0 [ 549.448850][ T31] ? __pfx___schedule+0x10/0x10 [ 549.489940][ T31] ? find_held_lock+0x2b/0x80 [ 549.494683][ T31] ? schedule+0x2d7/0x3a0 [ 549.534778][ T31] schedule+0xe7/0x3a0 [ 549.538904][ T31] schedule_timeout+0x257/0x290 [ 549.583774][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 549.599129][ T31] ? mark_held_locks+0x49/0x80 [ 549.624217][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 549.639065][ T31] __wait_for_common+0x2fc/0x4e0 [ 549.649495][ T5870] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 549.669057][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 549.674515][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 549.709105][ T31] ? find_held_lock+0x2b/0x80 [ 549.713843][ T31] ? __flush_work+0x938/0xcc0 [ 549.718544][ T31] ? __flush_work+0x4d0/0xcc0 [ 549.739116][ T31] __flush_work+0x7d7/0xcc0 [ 549.743702][ T31] ? detach_if_pending+0x211/0x280 [ 549.748838][ T31] ? __pfx___flush_work+0x10/0x10 [ 549.785385][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 549.799173][ T31] ? __pfx___might_resched+0x10/0x10 [ 549.809059][ T31] __cancel_work_sync+0x10c/0x130 [ 549.814134][ T31] tls_sk_proto_close+0x4b6/0xad0 [ 549.821172][ T5870] usb 8-1: config 0 has an invalid interface number: 175 but max is 0 [ 549.828958][ T31] ? __pfx_tls_sk_proto_close+0x10/0x10 [ 549.835021][ T31] ? ip_mc_drop_socket+0x1f/0x280 [ 549.835979][ T5870] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.848046][ T31] ? down_write+0x14d/0x200 [ 549.872964][ T5870] usb 8-1: config 0 has no interface number 0 [ 549.876697][ T31] inet_release+0x13c/0x280 [ 549.887953][ T5870] usb 8-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 549.893825][ T31] inet6_release+0x4f/0x70 [ 549.923598][ T5870] usb 8-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 549.929092][ T31] __sock_release+0xb0/0x270 [ 549.948058][ T5870] usb 8-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 549.959287][ T31] ? __pfx_sock_close+0x10/0x10 [ 549.964171][ T31] sock_close+0x1c/0x30 [ 549.968332][ T31] __fput+0x3ff/0xb70 [ 549.976766][ T5870] usb 8-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 549.992684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 549.997937][ T31] task_work_run+0x14d/0x240 [ 550.017897][ T5870] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 550.023234][ T31] ? __pfx_task_work_run+0x10/0x10 [ 550.027753][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.056056][ T5870] usb 8-1: Product: syz [ 550.056168][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 550.067415][ T5870] usb 8-1: Manufacturer: syz [ 550.072097][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 550.072136][ T31] do_syscall_64+0xda/0x260 [ 550.072161][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.092192][ T5870] usb 8-1: SerialNumber: syz [ 550.109935][ T31] RIP: 0033:0x7f340d78e169 [ 550.112081][ T5870] usb 8-1: config 0 descriptor?? [ 550.119084][ T31] RSP: 002b:00007ffccf6c4bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 550.127794][ T31] RAX: 0000000000000000 RBX: 00007f340d9b7ba0 RCX: 00007f340d78e169 [ 550.135143][ T5870] symbolserial 8-1:0.175: symbol converter detected [ 550.176135][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 550.178318][ T5870] usb 8-1: symbol converter now attached to ttyUSB0 [ 550.193109][ T31] RBP: 00007f340d9b7ba0 R08: 000000000000026c R09: 0000001ecf6c4eaf [ 550.207989][ T31] R10: 00000000003ffb70 R11: 0000000000000246 R12: 0000000000060281 [ 550.227815][ T31] R13: 00007f340d9b6240 R14: ffffffffffffffff R15: 00007ffccf6c4cd0 [ 550.256943][ T31] [ 550.271989][ T31] [ 550.271989][ T31] Showing all locks held in the system: [ 550.349116][ T31] 1 lock held by khungtaskd/31: [ 550.354016][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 550.378810][T17849] qnx6: unable to read the first superblock [ 550.391479][ T31] 3 locks held by kworker/1:1/58: [ 550.411491][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.438099][ T31] #1: ffffc9000124fd18 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 550.465773][ T31] #2: ffff888033cb0cf0 (&ctx->tx_lock){+.+.}-{4:4}, at: tx_work_handler+0x134/0x230 [ 550.486680][ T31] 2 locks held by getty/5582: [ 550.496937][ T31] #0: ffff88814db290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 550.518155][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 550.547008][ T31] 3 locks held by kworker/0:4/5870: [ 550.557824][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 550.639047][ T31] #1: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 550.669760][ T31] #2: ffff8880b84256d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 550.689327][ T31] 1 lock held by syz.1.1169/13355: [ 550.694474][ T31] #0: ffff88807ecba008 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 550.719111][ T31] 2 locks held by syz.7.1725/17849: [ 550.724897][ T31] #0: ffffffff9012ab68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 550.749078][ T31] #1: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 550.759543][ T31] 2 locks held by dhcpcd-run-hook/17876: [ 550.765246][ T31] [ 550.767583][ T31] ============================================= [ 550.767583][ T31] [ 550.777819][ T31] NMI backtrace for cpu 1 [ 550.777837][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 550.777856][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.777864][ T31] Call Trace: [ 550.777869][ T31] [ 550.777875][ T31] dump_stack_lvl+0x116/0x1f0 [ 550.777901][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 550.777917][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 550.777938][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.777955][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 550.777973][ T31] watchdog+0xf70/0x12c0 [ 550.777994][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.778009][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.778029][ T31] ? __kthread_parkme+0x19e/0x250 [ 550.778054][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.778070][ T31] kthread+0x3c2/0x780 [ 550.778085][ T31] ? __pfx_kthread+0x10/0x10 [ 550.778099][ T31] ? __pfx_kthread+0x10/0x10 [ 550.778114][ T31] ? __pfx_kthread+0x10/0x10 [ 550.778128][ T31] ? __pfx_kthread+0x10/0x10 [ 550.778143][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.778163][ T31] ? __pfx_kthread+0x10/0x10 [ 550.778178][ T31] ret_from_fork+0x45/0x80 [ 550.778193][ T31] ? __pfx_kthread+0x10/0x10 [ 550.778208][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.778241][ T31] [ 550.778246][ T31] Sending NMI from CPU 1 to CPUs 0: [ 550.921542][ C0] NMI backtrace for cpu 0 [ 550.921557][ C0] CPU: 0 UID: 0 PID: 17773 Comm: syz.5.1713 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 550.921574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.921582][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x2b/0x80 [ 550.921604][ C0] Code: 0f 1e fa 55 48 89 f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 fd 22 f6 48 89 df e8 de 50 23 f6 f7 c5 00 02 00 00 75 23 9c <58> f6 c4 02 75 37 bf 01 00 00 00 e8 d5 bc 13 f6 65 8b 05 1e b4 31 [ 550.921616][ C0] RSP: 0018:ffffc90000007c40 EFLAGS: 00000046 [ 550.921628][ C0] RAX: 0000000000000001 RBX: ffff88804a428088 RCX: ffffffff81987d23 [ 550.921636][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff88804a428088 [ 550.921644][ C0] RBP: 0000000000000046 R08: 0000000000000000 R09: ffffed1009485011 [ 550.921652][ C0] R10: ffff88804a42808b R11: 0000000000000000 R12: 00000000000f4240 [ 550.921660][ C0] R13: 0000000000010000 R14: ffff88807e003c00 R15: ffff88804a428088 [ 550.921668][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 550.921680][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.921688][ C0] CR2: 000000110c434b96 CR3: 00000000120fa000 CR4: 00000000003526f0 [ 550.921696][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.921703][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.921710][ C0] Call Trace: [ 550.921715][ C0] [ 550.921720][ C0] snd_seq_timer_interrupt+0x2cf/0x390 [ 550.921738][ C0] snd_timer_process_callbacks+0x217/0x2e0 [ 550.921756][ C0] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 550.921772][ C0] snd_timer_interrupt.part.0+0x632/0xdb0 [ 550.921792][ C0] ? snd_hrtimer_callback+0x18a/0x400 [ 550.921805][ C0] snd_timer_interrupt+0x91/0xd0 [ 550.921822][ C0] snd_hrtimer_callback+0x1f8/0x400 [ 550.921835][ C0] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 550.921846][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 550.921864][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 550.921877][ C0] ? read_tsc+0x9/0x20 [ 550.921901][ C0] hrtimer_interrupt+0x397/0x8e0 [ 550.921919][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 550.921936][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 550.921951][ C0] [ 550.921955][ C0] [ 550.921960][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.921973][ C0] RIP: 0010:stack_access_ok+0x3e/0x200 [ 550.921988][ C0] Code: 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 <48> b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f [ 550.921999][ C0] RSP: 0018:ffffc900128bef90 EFLAGS: 00000246 [ 550.922009][ C0] RAX: dffffc0000000000 RBX: ffffc900128bf040 RCX: ffffffff9125d788 [ 550.922017][ C0] RDX: 1ffff92002517e09 RSI: ffffc900128bf440 RDI: ffffc900128bf040 [ 550.922025][ C0] RBP: ffffc900128bf440 R08: ffffffff9125d78c R09: 0000000000000000 [ 550.922032][ C0] R10: 0000000000000000 R11: 000000000000f717 R12: 0000000000000008 [ 550.922039][ C0] R13: ffffc900128bf050 R14: ffffc900128bf048 R15: ffffc900128b8000 [ 550.922054][ C0] unwind_next_frame+0xb7d/0x20a0 [ 550.922068][ C0] ? folios_put_refs+0x56f/0x740 [ 550.922083][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.922101][ C0] arch_stack_walk+0x94/0x100 [ 550.922118][ C0] ? folios_put_refs+0x56f/0x740 [ 550.922133][ C0] stack_trace_save+0x8e/0xc0 [ 550.922147][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 550.922163][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 550.922176][ C0] save_stack+0x160/0x1f0 [ 550.922188][ C0] ? __pfx_save_stack+0x10/0x10 [ 550.922198][ C0] ? free_unref_folios+0x999/0x1630 [ 550.922209][ C0] ? folios_put_refs+0x56f/0x740 [ 550.922225][ C0] ? page_ext_put+0x3e/0xd0 [ 550.922239][ C0] __reset_page_owner+0x84/0x1a0 [ 550.922251][ C0] free_unref_folios+0x999/0x1630 [ 550.922264][ C0] ? rcu_is_watching+0x12/0xc0 [ 550.922278][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 550.922293][ C0] folios_put_refs+0x56f/0x740 [ 550.922308][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 550.922324][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 550.922341][ C0] shmem_undo_range+0x58f/0x1150 [ 550.922358][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 550.922371][ C0] ? filemap_get_entry+0x1a7/0x3b0 [ 550.922393][ C0] ? lock_acquire+0x179/0x350 [ 550.922411][ C0] ? finish_task_switch.isra.0+0x21c/0xc10 [ 550.922431][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 550.922446][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 550.922458][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 550.922476][ C0] ? find_held_lock+0x2b/0x80 [ 550.922491][ C0] ? evict+0x3a2/0x920 [ 550.922506][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 550.922523][ C0] evict+0x3e3/0x920 [ 550.922537][ C0] ? __pfx_evict+0x10/0x10 [ 550.922552][ C0] ? iput+0x519/0x880 [ 550.922569][ C0] iput+0x521/0x880 [ 550.922585][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 550.922607][ C0] dentry_unlink_inode+0x29c/0x480 [ 550.922625][ C0] __dentry_kill+0x1d0/0x600 [ 550.922644][ C0] dput.part.0+0x4b1/0x9b0 [ 550.922662][ C0] dput+0x1f/0x30 [ 550.922678][ C0] __fput+0x51c/0xb70 [ 550.922693][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.922707][ C0] task_work_run+0x14d/0x240 [ 550.922721][ C0] ? __pfx_task_work_run+0x10/0x10 [ 550.922734][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 550.922749][ C0] do_exit+0xafb/0x2c30 [ 550.922762][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 550.922776][ C0] ? __pfx_do_exit+0x10/0x10 [ 550.922789][ C0] do_group_exit+0xd3/0x2a0 [ 550.922800][ C0] get_signal+0x2673/0x26d0 [ 550.922818][ C0] ? force_sig_fault+0xc4/0x100 [ 550.922833][ C0] ? __pfx_get_signal+0x10/0x10 [ 550.922851][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 550.922867][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 550.922882][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 550.922904][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 550.922921][ C0] asm_exc_page_fault+0x26/0x30 [ 550.922932][ C0] RIP: 0033:0x7f59c1b8e171 [ 550.922941][ C0] Code: Unable to access opcode bytes at 0x7f59c1b8e147. [ 550.922947][ C0] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 550.922956][ C0] RAX: 0000000000000000 RBX: 00007f59c1db5fa0 RCX: 00007f59c1b8e169 [ 550.922963][ C0] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 550.922971][ C0] RBP: 00007f59c1c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 550.922978][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 550.922985][ C0] R13: 0000000000000001 R14: 00007f59c1db5fa0 R15: 00007ffe80658f98 [ 550.922997][ C0] [ 550.926079][ T5873] usb 8-1: USB disconnect, device number 15 [ 551.029165][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 551.029182][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 551.029201][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 551.029210][ T31] Call Trace: [ 551.029215][ T31] [ 551.029221][ T31] dump_stack_lvl+0x3d/0x1f0 [ 551.029245][ T31] panic+0x71c/0x800 [ 551.029268][ T31] ? __pfx_panic+0x10/0x10 [ 551.029282][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 551.029300][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.029315][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 551.029330][ T31] ? watchdog+0xdda/0x12c0 [ 551.029345][ T31] ? watchdog+0xdcd/0x12c0 [ 551.029362][ T31] watchdog+0xdeb/0x12c0 [ 551.029380][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.029393][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.029412][ T31] ? __kthread_parkme+0x19e/0x250 [ 551.029434][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.029448][ T31] kthread+0x3c2/0x780 [ 551.029464][ T31] ? __pfx_kthread+0x10/0x10 [ 551.029476][ T31] ? __pfx_kthread+0x10/0x10 [ 551.029490][ T31] ? __pfx_kthread+0x10/0x10 [ 551.029503][ T31] ? __pfx_kthread+0x10/0x10 [ 551.029516][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.029534][ T31] ? __pfx_kthread+0x10/0x10 [ 551.029549][ T31] ret_from_fork+0x45/0x80 [ 551.029564][ T31] ? __pfx_kthread+0x10/0x10 [ 551.029577][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.029606][ T31] [ 551.038023][ T31] Kernel Offset: disabled