last executing test programs: 2m31.968394535s ago: executing program 1 (id=3805): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) write(r2, &(0x7f0000000240)="781d57e5cbc738ca4ebb9112a82cdef21272ece19f3cd0e9543ccc73e27b5838da29ad4b90672c2a16154f9c9830c5cfdb215cf73344028b25a13e49d465639cb8591dcb1faac7162d0a7c7bddc1cb0addc4dd343c9a6e7a99237a165b40c15a2c1eec003b678b47dc4e", 0x6a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x8400000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x4}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000200000008ffd9b3914bfb0a100000000"], 0x48) 2m29.187745376s ago: executing program 1 (id=3812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x1b4) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x100010, 0xffffffffffffffff, 0x80001000) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x9, 0x7, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)={0xf0400, 0x80}, 0x18) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) 2m26.237965305s ago: executing program 1 (id=3818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 2m25.185900921s ago: executing program 1 (id=3821): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x630800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2m24.728073852s ago: executing program 1 (id=3824): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x503}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2007) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r8 = syz_clone(0x100000, &(0x7f00000010c0)="7f1241a403b8ba876423ed4145d6d08908153830e8088acd609d5fe59290ed8074411b3b23e334c91059a5565f0b19ee88d44141c78d6591e61027d266cb04887f3494ebee84a8922abc73f37baa1969ba021cd15feb700f956bb3707d6d02bc44ed8b93b2daa592eefb4636b86dabc83c4475b4e4b6149b0d34dfeef72486abbff7b7a08afc46aacb3030a66de26a3785df3a37023330f89767a945c2889710380434f8f8f52d856c7a77e87593599f102d6b3760f86198e28a8a9273f79d83095dc0eae9c0c50222b9d77bd6fed1517a835bc84779869ef5d38657ba9ab31fb963a56bb004e2b7318eceeda79e9b81", 0xf0, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="3de02c320595feb2e74b4e1b616b3947ff2712fff3") newfstatat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000004c0)="b117ec96bfb54d17b94913c9a8c42c2638407b9261421c175f47c5c86f193f87f0cd81f4acdd39436d63964085462188ea12589a96eb2d", 0x37}, {&(0x7f0000000500)="594324d0b861c86063d15f5bac8a167de8655ab88539c515baf3", 0x1a}, {&(0x7f0000000540)="56b6b9726bf1cca54dde2d0973b552c109a8fedd246b73b6f3723003043073fd7668b46ada35447b080533b93c2cb1c51b7fba5f39c8da9e7cf842a35a7179a6bf246c0ee7947a0cce1aa3019ea79aab0dd9038a94f8b3f3a3ae2b1ddbdd0a2c20a02b0e965cbb043fa36431de3f13eb0fe63b9db1254f6f690a06a91a50af17a65bfdf3e45bbb8f22b5f0b906074ef34f23839fa6c87438a7b3364cfbe69654c909", 0xa2}, {&(0x7f0000000600)="5e93651cc53e4e96a4f8cd6d124b02aa567b1ed286e9df491b44e3008f3b04de8ab2a8f563feeb2c258c666fe7e9fe2d5e6428604db552e65118d3f4fc392d58c1fd37774fc6863ee9398bad4e6432460a0441b92ea775936b3113347628bb31a0a2a3015b341b59b87e0a33511e1ed06bb50fb5ace9ad3e5044443618926518b9cf1ce89f02d9beb32834b99425f6bfb36beae90bfc8383400f9efa6bcefe51a597410265fe26cdeb7008faa02aacb73a852e9c2cec448274560e8299483b49979eb7", 0xc3}, {&(0x7f0000000700)="531538933dcdb96f0be4f7985efd5f7e0064c63672ca734758622231fd8444795befcd9dd7061ff1f536e40f624715212c07f849a8828208185f66123c38ba34439a5faaaa9e196f49e37b", 0x4b}], 0x5, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0xb0, 0x800}}, {{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)="84ecf899e71c6a08abceeb04ed4ddf46c41da1f0f8a3125f95757555bada60777dcf676419f817b1c2a378d69efe3835d47d6e9638853564bfa48fdb2b83b9424c6dac6e73f5742e354b78e119dcc909ead210d39d5103f924479331d92ebeea2fc92980c461ef5f4aca934156b2722047d585e747b26893f61c5acd8ed4f0cbe2399d04ea83937b7c5cae59704e02f20c2fa9252a4216be8b6d197c19cddb8133c7ce08d8ec80c28299e6bfc681d3087b9c207610c1ee5dace761d837fa550348e7f4e024bc7ff919ad53761388", 0xce}], 0x2, &(0x7f0000001340)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x40, 0x4000801}}], 0x2, 0x2) r11 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0x20008800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x9, 0x800000, 0xfe99, 0x34325258, [0x8000, 0x2], [0x1, 0x5], 0x1}}) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x80000001}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048}, 0x20000884) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r12, 0x4068aea3, &(0x7f00000001c0)) 2m24.432961781s ago: executing program 1 (id=3827): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2457]}, 0xa11) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000a70000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mkdir(0x0, 0x0) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x32c6, &(0x7f0000000000)={0x0, 0x8800, 0x0, 0x1, 0x104}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @void, @value}, 0x50) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 2m23.96675184s ago: executing program 32 (id=3827): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2457]}, 0xa11) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000a70000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mkdir(0x0, 0x0) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x32c6, &(0x7f0000000000)={0x0, 0x8800, 0x0, 0x1, 0x104}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @void, @value}, 0x50) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 1m59.465684158s ago: executing program 3 (id=3886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r2}, 0xc) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/oss_mixer\x00', 0x10900, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x80) 1m58.1923198s ago: executing program 3 (id=3889): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x60, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) 1m56.183068904s ago: executing program 3 (id=3894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0x401, 0x0, {{0xd, 0x4, 0x2, 0x6, 0x34, 0x64, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@timestamp={0x44, 0x8, 0xd2, 0x0, 0x4, [0x5]}, @lsrr={0x83, 0x17, 0xe7, [@local, @remote, @multicast1, @multicast1, @rand_addr=0x64010102]}]}}}}}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xdcd, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000180), 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5, 0x6b32, 0x12, &(0x7f0000000240)={[0x10]}, 0x8) lseek(r7, 0xc6c3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7ffd}], 0x1, 0x40002100, 0x0) kexec_load(0x0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0xfffffffe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='ext4_mb_discard_preallocations\x00', r0, 0x0, 0x3}, 0x18) quotactl$Q_QUOTAOFF(0x90fc27f403c8764, 0x0, 0x0, 0x0) 1m53.976534795s ago: executing program 3 (id=3897): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x630800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) 1m52.555803039s ago: executing program 3 (id=3901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x9, 0x0, '\x00', 0xe}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r3, @ANYRES32, @ANYBLOB="00e2ff00"/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r7, r6}, 0xc) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x17d5c5c1f9b0f2f0, &(0x7f00000027c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x65, 0x6b]}}, {@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x35, 0x38, 0x31, 0x33, 0x65, 0x74, 0x34]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x35, 0x67, 0x35, 0x65, 0x74, 0x36, 0x70]}}, {@usrquota_block_hardlimit}, {@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x2d, 0x6d]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38, 0x38, 0x6d, 0x6d]}}, {@quota}, {@nr_blocks={'nr_blocks', 0x3d, [0x31]}}, {@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x34, 0x31, 0x38, 0x37]}}}}], [{@fowner_gt={'fowner>', r8}}, {@smackfshat={'smackfshat', 0x3d, 'a)\xfa'}}, {@fowner_lt={'fowner<', r8}}]}) 1m50.755099791s ago: executing program 3 (id=3904): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfd}, 0x14}, 0x4, 0x700000000000000}, 0x0) r2 = open(&(0x7f0000000180)='./file1\x00', 0x301482, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x140d, 0x20, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4000000) r3 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x8fc7, 0x1, 0x200001, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt(r6, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r9, 0x3) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r11 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg(r11, &(0x7f0000001500), 0x588, 0x3000000) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1m49.354936855s ago: executing program 33 (id=3904): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfd}, 0x14}, 0x4, 0x700000000000000}, 0x0) r2 = open(&(0x7f0000000180)='./file1\x00', 0x301482, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x140d, 0x20, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4000000) r3 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x8fc7, 0x1, 0x200001, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt(r6, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r9, 0x3) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r11 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg(r11, &(0x7f0000001500), 0x588, 0x3000000) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1m0.677046995s ago: executing program 5 (id=4003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x300, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1m0.051276837s ago: executing program 5 (id=4005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008040) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000011c0)=""/4117, 0x200021d5) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[], 0x50) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, 0x0, 0xb5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) 56.999003471s ago: executing program 5 (id=4013): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfd}, 0x14}, 0x4, 0x700000000000000}, 0x0) r2 = open(&(0x7f0000000180)='./file1\x00', 0x301482, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x140d, 0x20, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4000000) syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x8fc7, 0x1, 0x200001, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt(r5, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmmsg(r10, &(0x7f0000001500), 0x588, 0x3000000) close_range(r7, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 56.186603547s ago: executing program 5 (id=4017): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x630800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 55.265471955s ago: executing program 5 (id=4020): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r5) io_setup(0x7ff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001fc0)={'wpan0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x7, 0x85, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x46) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r6}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf25110000005c0004800900010073797a31000000002400078008000400090000000800020001000000080002004000000008000200030000000900010073697a30000000001c000780080001000d00000008000400040000000800010005000000140003800800030013ea000008000200030000003400098008000200060000000800020001000000080001"], 0x124}}, 0x0) 53.384772427s ago: executing program 5 (id=4024): socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)={0x8000000f}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x800040, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 52.523350235s ago: executing program 34 (id=4024): socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)={0x8000000f}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x800040, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 32.688629175s ago: executing program 0 (id=4064): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfd}, 0x14}, 0x4, 0x700000000000000}, 0x0) r2 = open(&(0x7f0000000180)='./file1\x00', 0x301482, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x140d, 0x20, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4000000) r3 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x8fc7, 0x1, 0x200001, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt(r6, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r9, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmmsg(r10, &(0x7f0000001500), 0x588, 0x3000000) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 31.11593095s ago: executing program 0 (id=4068): socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)={0x8000000f}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x800040, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 29.846201576s ago: executing program 0 (id=4070): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xe4}, {0x9, 0x5, 0xc, 0xd}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r5, 0x409, 0xc) fcntl$addseals(r5, 0x409, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1a4}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2", 0x4a}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 28.451409286s ago: executing program 0 (id=4073): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) clock_settime(0xe, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x5}, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32, @ANYBLOB="83000400cb1507002000128008000100736974001400028008000300ac14141005000900dd0000008dd187dc247b8c01123fd9bfaaf22c4a6efeb13221f17d8a4ac43f204cde927b7c8156e7ed0ee74322528da0c570ffa4912630a3ff9a4961a687de715018fcfc2818c6c9343234014c418598e62328459bff5109f5b7261aef161da4c26cae4387135f79f6e81fafa91f353114e8a19acd4fded455ff9ab334b93fc367facf7282fa3d50546ecd0cee73aee8fe32881c2fb6d0011a17a1e48ee0b8b13e64a2b222a0a361f9494ae6c4fb5e520d3ebd8541"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfa}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) 27.584310086s ago: executing program 0 (id=4076): faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) setuid(0xee00) shmctl$IPC_SET(0x0, 0x1, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x5069f481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r3, r1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=0x7, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec300059191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc91", 0xf0}, {&(0x7f0000001480)}], 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050003000000c220a759f5faff63df6052722d3974042ecfe401465441d05808b282a43ee9d2586e52"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, 0x0, 0x24000000) 24.548764184s ago: executing program 0 (id=4086): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xe4}, {0x9, 0x5, 0xc, 0xd}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r5, 0x409, 0xc) fcntl$addseals(r5, 0x409, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1a4}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2", 0x4a}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 24.108620646s ago: executing program 35 (id=4086): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xe4}, {0x9, 0x5, 0xc, 0xd}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r5, 0x409, 0xc) fcntl$addseals(r5, 0x409, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1a4}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2", 0x4a}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 12.641950176s ago: executing program 4 (id=4101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 10.912488464s ago: executing program 4 (id=4103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpgrp(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "a4b974367ee80b0c", "67a2d3d81d6dffe0d1ddb47b023469fa", "60ed6092", "a37fd9572a3f0e65"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "a686fc0daf88e219", "846ca8f982f370664098ab807ae1a4c7a0767d807b25b0b80946a1b96e009b20", "fde95573", "2c44704dee6e167d"}, 0x38) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x26c3, &(0x7f0000000340)={0x0, 0x905b, 0x10, 0xd7e5, 0xbd}, &(0x7f0000000040), &(0x7f0000000180)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e24, 0x396adb53, @private1={0xfc, 0x1, '\x00', 0x3}, 0x1}}, 0x0, 0x0, 0x4e, 0x0, "7bae1124a6844db244deca47613623df1fd25e71ae29ea4a69d672cea90c228b00887f97bf87024691aec3b3e7d96c17ebc10c1851dca1fd3b80bb82e1d749f332b6eaccf4b7dc8975ab6dafcf9e5342"}, 0xd8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 10.623773262s ago: executing program 7 (id=4025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x2, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 10.111267848s ago: executing program 6 (id=4104): socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)={0x8000000f}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x800040, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) 9.520288609s ago: executing program 2 (id=3943): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f4a5b2289baa4bf656e785efcbceec35e295d54e554977cd3a3a3f5781097ec3e403d05a435501ec94f0ec43efb4576faf79caccdfb5abcf504bb6dd7ca2f5367de16584b098da4a28b8ee4fec9537b7bbac05317ff2bed9f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@overlay={0x6, 0x2, 0x4, 0x40, 0x9, {0x77359400}, {0x0, 0xc, 0x3, 0x74, 0x1, 0x4, "f873d4ed"}, 0x9, 0x3, {}, 0x6}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 8.967150279s ago: executing program 4 (id=4105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="140002"], 0x48}}, 0x240000e1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x33cb51d780978a93, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0xffffffff) r5 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r5, &(0x7f0000000b80)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000005c0)=""/7, 0x7}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000980)=""/209, 0xd1}, {&(0x7f0000000a80)=""/252, 0xfc}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x4, &(0x7f0000001b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x2, 0x40, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000400000000000000000950091b610000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYBLOB, @ANYBLOB="000000000000001a00"/22], 0x48) r10 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000006c0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x46}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004880}, 0x20008d4) ioctl$SNDCTL_DSP_RESET(r10, 0x80044dff, 0x1000000000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180)=0x2, &(0x7f00000000c0)=r7}, 0x20) write$dsp(r6, &(0x7f00000000c0)="5cba91a4", 0x4) 8.49688173s ago: executing program 7 (id=4025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x2, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 8.050372742s ago: executing program 6 (id=4106): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r0 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x2000000000000299, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x480, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuse\x00', &(0x7f00000002c0)='#!/.-(\x00', 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x42, 0x70) getdents(r4, &(0x7f0000000140)=""/184, 0xb8) r5 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0xa38) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000000)) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000480)={0x7a5, 0x0, 0x9, 0x0, 0x0, 0x0, "004205ed5d4fc8355500", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 7.533267439s ago: executing program 2 (id=3943): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f4a5b2289baa4bf656e785efcbceec35e295d54e554977cd3a3a3f5781097ec3e403d05a435501ec94f0ec43efb4576faf79caccdfb5abcf504bb6dd7ca2f5367de16584b098da4a28b8ee4fec9537b7bbac05317ff2bed9f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@overlay={0x6, 0x2, 0x4, 0x40, 0x9, {0x77359400}, {0x0, 0xc, 0x3, 0x74, 0x1, 0x4, "f873d4ed"}, 0x9, 0x3, {}, 0x6}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 6.651321277s ago: executing program 7 (id=4025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x2, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 6.197973653s ago: executing program 6 (id=4107): faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee00) shmctl$IPC_SET(0x0, 0x1, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x5069f481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r3, r1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=0x7, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec300059191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc91", 0xf0}, {&(0x7f0000001480)}], 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050003000000c220a759f5faff63df6052722d3974042ecfe401465441d05808b282a43ee9d2586e52"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, 0x0, 0x24000000) 6.197215864s ago: executing program 4 (id=4108): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x630800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 5.649670597s ago: executing program 2 (id=3943): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f4a5b2289baa4bf656e785efcbceec35e295d54e554977cd3a3a3f5781097ec3e403d05a435501ec94f0ec43efb4576faf79caccdfb5abcf504bb6dd7ca2f5367de16584b098da4a28b8ee4fec9537b7bbac05317ff2bed9f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@overlay={0x6, 0x2, 0x4, 0x40, 0x9, {0x77359400}, {0x0, 0xc, 0x3, 0x74, 0x1, 0x4, "f873d4ed"}, 0x9, 0x3, {}, 0x6}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 5.213179543s ago: executing program 8 (id=4087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.806402739s ago: executing program 7 (id=4025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x2, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 4.311777615s ago: executing program 6 (id=4109): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000880)=@can, 0x80, &(0x7f0000000e80)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="ce5c278765515695481f816c2eb0ffc74e0515a6370c71c8700e67e1173172a3113cbb9a21008a1bd563a9e72d6c6f8b059e55b479baa273662749280a8037dc7e6ca5c824d6f6c522764e76e886e2464bb70ec1ca2a5c0b39ddd070f8e6ec6fa45fc377ccdcb2698850701fecc832e16003ecdbcf9fe175303df72a3e90dce31785b017835350af2f1d9df82a4110b7615ecf37729bf4381f380924168eda7e664a4088d54bf819cc2f978e28e1f5eb593400eb4b7f9d4f92a99fb1784f203e26", 0xc1}, {&(0x7f0000000d80)="721807ef3d400bd067b7844798e14da5e5a5ad81acb52ccfd26bc4877e945aac7474dfd7b800a07ab4131c508178a9e14ace736f1d54e4f6e54a4665b06b385a36a7def0cfd4a305d5803a8ac04da207ca6581a3da7488b6e011eadd7756324177dba0c1e35a882f08b6d47bbd1fb31c492930a45cd2f987ed57f70f56c5c3704ca57ce48299b6f55e8661596ee3dce9ab271bc2beda378c8b32fb0385bd376c96190b5a5f2d89c0abb3cbe35c29d8e539d31820081eee110ba92a3aa0e6f442f51a98375c6aeb79b136b21351bf583523e84d24fd3282442092f7e831", 0xdd}, {&(0x7f0000000cc0)="ffc5244ffd1c8c3242c21340434c191dafc03af599620f314cd2b38f5c2e3e196439e1d8f06d4fd63794ba1d7b37b17c4a16a210f3bde12970d29ba163710f6867d689b6ebd7bbc1ee01836af024cb4f588a57113b0a3f73150bd61699c3796ad1ade0971e2c0fb8d89da905893325619a", 0x71}], 0x5, &(0x7f00000010c0)=[{0x68, 0x117, 0xb, "ed4ce1b30976a71f117a954c592f38f93ef05c9a0d692e7061fc817870b196f6b36842a76fc326bf568c1276614bb3f0f4622703c667798be086ed2666c23cc349f50df0341a2970f4493c0becce841502a0efe7f4db"}, {0xa0, 0x109, 0x3, "e41187591f13c1822d40f903db6361b876255681a7abfa3e2ffd95e65f1901af9b0a9490b2e4b063398b02602d7412e13a548cf447cbc21fa52ac5f3639c7000706a12365b39735d8a15ee2c66b0b559720011f992666512132167bcbf86c8432f6f3f8b4c0a0b66bef5d5645c5be804261b5f8b8933100f3faaf910ee6770649b5d2a33958dda4e6085"}], 0x108}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) 4.310977737s ago: executing program 4 (id=4110): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_unlink(0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, 0x0, 0x40000) io_uring_setup(0x5342, &(0x7f0000000240)={0x0, 0xe97d, 0x8, 0x3, 0x236}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r1}, 0x10) 4.310603415s ago: executing program 8 (id=4087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.669312979s ago: executing program 2 (id=3943): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f4a5b2289baa4bf656e785efcbceec35e295d54e554977cd3a3a3f5781097ec3e403d05a435501ec94f0ec43efb4576faf79caccdfb5abcf504bb6dd7ca2f5367de16584b098da4a28b8ee4fec9537b7bbac05317ff2bed9f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@overlay={0x6, 0x2, 0x4, 0x40, 0x9, {0x77359400}, {0x0, 0xc, 0x3, 0x74, 0x1, 0x4, "f873d4ed"}, 0x9, 0x3, {}, 0x6}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 3.172201184s ago: executing program 8 (id=4087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.702191521s ago: executing program 7 (id=4025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x2, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 2.265495419s ago: executing program 6 (id=4111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r1, 0x503, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee01, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) geteuid() landlock_create_ruleset(&(0x7f0000001080)={0x600a, 0x2, 0x2}, 0x18, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) 2.264992853s ago: executing program 8 (id=4087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.63304592s ago: executing program 2 (id=3943): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f4a5b2289baa4bf656e785efcbceec35e295d54e554977cd3a3a3f5781097ec3e403d05a435501ec94f0ec43efb4576faf79caccdfb5abcf504bb6dd7ca2f5367de16584b098da4a28b8ee4fec9537b7bbac05317ff2bed9f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@overlay={0x6, 0x2, 0x4, 0x40, 0x9, {0x77359400}, {0x0, 0xc, 0x3, 0x74, 0x1, 0x4, "f873d4ed"}, 0x9, 0x3, {}, 0x6}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 1.601536893s ago: executing program 7 (id=4025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x2, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 901.301691ms ago: executing program 6 (id=4112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x359, 0xfffa}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xf, &(0x7f0000001100)=ANY=[@ANYBLOB="18020000005000800000000000000000201811c351", @ANYRES32, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0100000000000000000009058103400000000009058202000000000009050302"], 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000008000004"]) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x100000000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8c8804}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x4010) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xc2}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0xc081}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x2800000, 0x3, {{0x10, 0x4, 0x0, 0x17, 0x40, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0x4a, 0x1, 0xf, [{@multicast2, 0x800}, {@rand_addr=0x64010100, 0x80000001}, {@empty, 0x6}, {@multicast2, 0x3}, {@private=0xa010100, 0x70}]}]}}}}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0xf72}]}}}}}}}, 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002340)=@newqdisc={0x78, 0x14, 0xf2b, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, {}, {0x7, 0xffe0}, {0x0, 0x4}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0xa, 0xffffffff, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0xa, 0xd, 0x9, 0x5, 0x7, 0xd29, 0xe, 0x2]}}, {{0x1c, 0x1, {0x9, 0x40, 0xc}}, {0x4}}]}]}, 0x78}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000074000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000090780000080a06e2d4c3d9fe10f9899fca59893b5031248415b8f1080a0000020000000009050a0000000200000002fe0bf98943ecdca921d221040222068537c8550502000000"], 0x0) 900.623759ms ago: executing program 4 (id=4113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 900.156799ms ago: executing program 36 (id=4113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 872.106006ms ago: executing program 8 (id=4087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 795.622748ms ago: executing program 2 (id=3943): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f4a5b2289baa4bf656e785efcbceec35e295d54e554977cd3a3a3f5781097ec3e403d05a435501ec94f0ec43efb4576faf79caccdfb5abcf504bb6dd7ca2f5367de16584b098da4a28b8ee4fec9537b7bbac05317ff2bed9f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@overlay={0x6, 0x2, 0x4, 0x40, 0x9, {0x77359400}, {0x0, 0xc, 0x3, 0x74, 0x1, 0x4, "f873d4ed"}, 0x9, 0x3, {}, 0x6}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 0s ago: executing program 8 (id=4087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): DP 224.0.0.2:0 - no destination available [ 1563.709735][T20262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1563.716913][T20262] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1563.728239][T20262] vhci_hcd vhci_hcd.0: Device attached [ 1564.212011][T16059] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1564.721023][T12721] vhci_hcd: vhci_device speed not set [ 1564.752289][T20261] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 1564.758946][T20261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1564.870061][T12721] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1565.011897][T16059] usb 4-1: Using ep0 maxpacket: 16 [ 1565.026950][T16059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1565.052578][T20261] vhci_hcd vhci_hcd.0: Device attached [ 1565.091613][T20262] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1565.115474][T16059] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1565.132358][T16059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.140503][T16059] usb 4-1: Product: syz [ 1565.145549][T16059] usb 4-1: Manufacturer: syz [ 1565.150187][T16059] usb 4-1: SerialNumber: syz [ 1566.118060][T16059] usb 4-1: config 0 descriptor?? [ 1566.126150][T20262] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1566.139740][T16059] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1566.149257][T16059] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1566.164122][T20261] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 1566.170791][T20261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1566.778475][T20261] vhci_hcd vhci_hcd.0: Device attached [ 1566.812469][T16059] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1566.852855][T20272] vhci_hcd: connection closed [ 1566.853416][T20263] vhci_hcd: connection reset by peer [ 1566.863779][ T8118] vhci_hcd: stop threads [ 1566.863922][T20279] vhci_hcd: connection closed [ 1566.868040][ T8118] vhci_hcd: release socket [ 1566.880568][ T8118] vhci_hcd: disconnect device [ 1566.928191][T16059] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1566.955808][T20291] syz.3.3568: attempt to access beyond end of device [ 1566.955808][T20291] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1566.966250][T16059] em28xx 4-1:0.0: board has no eeprom [ 1566.968905][T20291] hfs: can't find a HFS filesystem on dev loop3 [ 1566.984733][ T8118] vhci_hcd: stop threads [ 1566.989335][ T8118] vhci_hcd: release socket [ 1566.994089][ T8118] vhci_hcd: disconnect device [ 1566.999337][ T8118] vhci_hcd: stop threads [ 1567.006479][ T8118] vhci_hcd: release socket [ 1567.011221][ T8118] vhci_hcd: disconnect device [ 1567.052184][T16059] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1567.069839][T16059] em28xx 4-1:0.0: dvb set to bulk mode. [ 1568.062358][T18358] em28xx 4-1:0.0: Binding DVB extension [ 1568.084836][T16059] usb 4-1: USB disconnect, device number 42 [ 1568.091481][T16059] em28xx 4-1:0.0: Disconnecting em28xx [ 1568.186178][T18358] em28xx 4-1:0.0: Registering input extension [ 1568.224672][T16059] em28xx 4-1:0.0: Closing input extension [ 1568.299359][T16059] em28xx 4-1:0.0: Freeing device [ 1569.134550][T18358] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1569.299896][T18358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1569.484326][T18358] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1569.494677][T18358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.503015][T18358] usb 3-1: Product: syz [ 1569.507207][T18358] usb 3-1: Manufacturer: syz [ 1569.512743][T18358] usb 3-1: SerialNumber: syz [ 1569.530616][T18358] usb 3-1: config 0 descriptor?? [ 1570.172005][T12721] vhci_hcd: vhci_device speed not set [ 1570.638928][T18358] usb 3-1: USB disconnect, device number 73 [ 1570.788326][T20333] syz.0.3578 (20333): drop_caches: 2 [ 1570.967345][T20318] udevd[20318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.490091][T20343] dccp_close: ABORT with 626 bytes unread [ 1573.483149][T20358] netlink: 'syz.0.3586': attribute type 29 has an invalid length. [ 1573.568989][T20359] syz.1.3582: attempt to access beyond end of device [ 1573.568989][T20359] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1573.582855][T20359] hfs: can't find a HFS filesystem on dev loop1 [ 1574.064745][T18358] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1574.556393][T18358] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.574967][T18358] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1574.575774][ T29] audit: type=1400 audit(1737384109.727:885): avc: denied { mount } for pid=20372 comm="syz.0.3592" name="/" dev="autofs" ino=65966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1574.841873][T18358] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.907176][T18358] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1574.917837][ T29] audit: type=1400 audit(1737384110.067:886): avc: denied { getopt } for pid=20376 comm="syz.3.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1574.960299][T18358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.981743][T18358] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1574.998769][T18358] usb 2-1: invalid MIDI out EP 0 [ 1575.128733][T18358] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1575.156492][T20387] syz.2.3595: attempt to access beyond end of device [ 1575.156492][T20387] loop2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1575.169773][T20387] hfs: can't find a HFS filesystem on dev loop2 [ 1575.559474][T20334] udevd[20334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1575.662383][ T29] audit: type=1400 audit(1737384110.827:887): avc: denied { unmount } for pid=17751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1578.837498][T20425] syz.3.3603: attempt to access beyond end of device [ 1578.837498][T20425] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1578.850826][T20425] hfs: can't find a HFS filesystem on dev loop3 [ 1579.033991][T16059] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1579.163481][T18358] usb 2-1: USB disconnect, device number 62 [ 1579.201977][T16059] usb 1-1: Using ep0 maxpacket: 16 [ 1579.215135][T16059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.240652][T20430] syz.4.3606 (20430): drop_caches: 2 [ 1579.252685][T16059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1579.265412][T16059] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1579.283601][T16059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1579.294278][T16059] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1579.307619][T16059] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1579.351308][T16059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1579.360806][T16059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1579.379125][T16059] usb 1-1: SerialNumber: syz [ 1579.415274][T16059] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1579.438841][T16059] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1579.685948][T20442] block nbd3: not configured, cannot reconfigure [ 1580.559105][T20449] syz.3.3612: attempt to access beyond end of device [ 1580.559105][T20449] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1580.572191][T20449] hfs: can't find a HFS filesystem on dev loop3 [ 1580.615290][T20457] 9pnet_fd: Insufficient options for proto=fd [ 1581.674039][T20413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1581.686074][T20413] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1581.733011][T20413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1581.742549][T20413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1581.749933][T20413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1581.893601][T16059] usb 1-1: USB disconnect, device number 70 [ 1582.402073][ T9085] Bluetooth: hci3: command 0x0c1a tx timeout [ 1583.556229][ T29] audit: type=1400 audit(1737384118.717:888): avc: denied { shutdown } for pid=20473 comm="syz.3.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1583.690970][T20487] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1583.701253][T20487] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1583.812189][T13204] Bluetooth: hci1: command 0x0c1a tx timeout [ 1583.820161][T13204] Bluetooth: hci4: command 0x0c1a tx timeout [ 1583.828161][T13204] Bluetooth: hci0: command 0x0c1a tx timeout [ 1583.834386][ T9085] Bluetooth: hci2: command 0x0c1a tx timeout [ 1584.113338][T20495] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1586.002044][T20515] syz.1.3627: attempt to access beyond end of device [ 1586.002044][T20515] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1586.015283][T20515] hfs: can't find a HFS filesystem on dev loop1 [ 1589.215479][ T29] audit: type=1400 audit(1737384124.267:889): avc: denied { listen } for pid=20545 comm="syz.3.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1590.005017][ T29] audit: type=1400 audit(1737384124.267:890): avc: denied { map } for pid=20545 comm="syz.3.3636" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1590.028701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.041892][ T29] audit: type=1400 audit(1737384124.267:891): avc: denied { execute } for pid=20545 comm="syz.3.3636" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1590.065892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.080996][ T29] audit: type=1400 audit(1737384124.277:892): avc: denied { accept } for pid=20545 comm="syz.3.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1590.194417][ T29] audit: type=1400 audit(1737384125.347:893): avc: denied { write } for pid=20560 comm="syz.2.3639" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1590.657117][T20563] syz.4.3641: attempt to access beyond end of device [ 1590.657117][T20563] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1590.670128][T20563] hfs: can't find a HFS filesystem on dev loop4 [ 1592.942467][T20594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3647'. [ 1594.283948][ T29] audit: type=1400 audit(1737384129.287:894): avc: denied { read } for pid=20591 comm="syz.2.3649" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=43944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1594.439121][T20603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3651'. [ 1594.457261][T20606] dccp_close: ABORT with 32 bytes unread [ 1594.474266][T20603] FAULT_INJECTION: forcing a failure. [ 1594.474266][T20603] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.487230][T20603] CPU: 0 UID: 0 PID: 20603 Comm: syz.0.3651 Not tainted 6.13.0-syzkaller #0 [ 1594.495950][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1594.506004][T20603] Call Trace: [ 1594.509296][T20603] [ 1594.512219][T20603] dump_stack_lvl+0x16c/0x1f0 [ 1594.516900][T20603] should_fail_ex+0x497/0x5b0 [ 1594.521578][T20603] ? fs_reclaim_acquire+0xae/0x150 [ 1594.526688][T20603] should_failslab+0xc2/0x120 [ 1594.531470][T20603] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1594.537266][T20603] ? __alloc_skb+0x2b1/0x380 [ 1594.541867][T20603] __alloc_skb+0x2b1/0x380 [ 1594.546299][T20603] ? __pfx___alloc_skb+0x10/0x10 [ 1594.551251][T20603] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1594.557256][T20603] netlink_alloc_large_skb+0x69/0x130 [ 1594.562627][T20603] netlink_sendmsg+0x689/0xd70 [ 1594.567393][T20603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1594.572686][T20603] ____sys_sendmsg+0xaaf/0xc90 [ 1594.577446][T20603] ? copy_msghdr_from_user+0x10b/0x160 [ 1594.582893][T20603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.588166][T20603] ? __lock_acquire+0xcc5/0x3c40 [ 1594.593117][T20603] ___sys_sendmsg+0x135/0x1e0 [ 1594.597806][T20603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.603004][T20603] ? trace_lock_acquire+0x14e/0x1f0 [ 1594.608211][T20603] __sys_sendmmsg+0x201/0x420 [ 1594.612897][T20603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1594.618099][T20603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1594.624087][T20603] ? fput+0x67/0x440 [ 1594.627978][T20603] ? ksys_write+0x1ba/0x250 [ 1594.632479][T20603] ? __pfx_ksys_write+0x10/0x10 [ 1594.637344][T20603] __x64_sys_sendmmsg+0x9c/0x100 [ 1594.642285][T20603] ? lockdep_hardirqs_on+0x7c/0x110 [ 1594.647475][T20603] do_syscall_64+0xcd/0x250 [ 1594.651971][T20603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.657854][T20603] RIP: 0033:0x7f7a44385d29 [ 1594.662253][T20603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.681860][T20603] RSP: 002b:00007f7a45114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1594.690277][T20603] RAX: ffffffffffffffda RBX: 00007f7a44575fa0 RCX: 00007f7a44385d29 [ 1594.698237][T20603] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 1594.706196][T20603] RBP: 00007f7a45114090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.714152][T20603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.722284][T20603] R13: 0000000000000000 R14: 00007f7a44575fa0 R15: 00007ffd55bed4d8 [ 1594.730269][T20603] [ 1594.748587][T20605] syz.1.3650 (20605): drop_caches: 2 [ 1595.892510][T20618] syz.4.3654: attempt to access beyond end of device [ 1595.892510][T20618] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1595.906433][T20618] hfs: can't find a HFS filesystem on dev loop4 [ 1598.162759][T20629] block nbd0: not configured, cannot reconfigure [ 1599.557861][T20652] syz.4.3662: attempt to access beyond end of device [ 1599.557861][T20652] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1599.571177][T20652] hfs: can't find a HFS filesystem on dev loop4 [ 1599.953040][T20653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1601.832024][T19937] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1602.063178][T19937] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1602.071391][T19937] usb 2-1: config 0 has no interface number 0 [ 1602.080541][T19937] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1602.100475][T19937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.109728][T19937] usb 2-1: Product: syz [ 1602.117210][T19937] usb 2-1: Manufacturer: syz [ 1602.141363][T19937] usb 2-1: SerialNumber: syz [ 1602.199312][T20673] syz.2.3669: attempt to access beyond end of device [ 1602.199312][T20673] loop2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1602.212661][T20673] hfs: can't find a HFS filesystem on dev loop2 [ 1602.226460][T19937] usb 2-1: config 0 descriptor?? [ 1602.570787][T19937] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1602.604475][T20675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1602.627048][T19937] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1602.640603][T19937] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1602.649658][T19937] usb 2-1: media controller created [ 1602.825577][T19937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1604.272909][ T29] audit: type=1400 audit(1737384139.407:895): avc: denied { ioctl } for pid=20690 comm="syz.2.3675" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1604.521921][T11879] usb 2-1: USB disconnect, device number 63 [ 1604.848048][ T29] audit: type=1400 audit(1737384140.007:896): avc: granted { setsecparam } for pid=20694 comm="syz.1.3676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1607.527579][T20717] syz.2.3682: attempt to access beyond end of device [ 1607.527579][T20717] loop2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1607.553175][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.559794][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.069938][T20717] hfs: can't find a HFS filesystem on dev loop2 [ 1612.947026][T20769] xt_CT: No such helper "syz0" [ 1613.331104][T20771] syz.3.3696: attempt to access beyond end of device [ 1613.331104][T20771] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1613.344392][T20771] hfs: can't find a HFS filesystem on dev loop3 [ 1613.520011][T20776] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1614.053533][T20779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1616.846035][T20812] xt_CT: No such helper "syz0" [ 1617.907170][T20824] block nbd1: not configured, cannot reconfigure [ 1619.414764][T20836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1619.962297][T11879] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1620.045571][T20844] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1620.181949][T11879] usb 2-1: Using ep0 maxpacket: 32 [ 1620.198637][T11879] usb 2-1: config 64 has an invalid interface number: 110 but max is 0 [ 1620.221914][T11879] usb 2-1: config 64 has no interface number 0 [ 1620.228151][T11879] usb 2-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1620.280791][T11879] usb 2-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1620.313824][T11879] usb 2-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1620.352006][T11879] usb 2-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1620.420988][T11879] usb 2-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1620.461856][T11879] usb 2-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1621.076785][T11879] usb 2-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1621.171895][T11879] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 1621.191886][T11879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.200782][T11879] usb 2-1: Product: syz [ 1621.212725][T11879] usb 2-1: Manufacturer: syz [ 1621.225488][T11879] usb 2-1: SerialNumber: syz [ 1621.432897][T20832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1622.283331][T20862] xt_CT: No such helper "syz0" [ 1622.367830][T11879] spcp8x5 2-1:64.110: SPCP8x5 converter detected [ 1622.400699][T11879] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1622.440204][T11879] usb 2-1: USB disconnect, device number 64 [ 1622.470208][T11879] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1622.525085][T11879] spcp8x5 2-1:64.110: device disconnected [ 1622.778169][T20874] block nbd4: not configured, cannot reconfigure [ 1623.858196][T20878] libceph: resolve 'c' (ret=-3): failed [ 1625.789014][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 1626.476248][T20921] block nbd1: not configured, cannot reconfigure [ 1626.914134][ T29] audit: type=1400 audit(1737384162.067:897): avc: denied { ioctl } for pid=20916 comm="syz.2.3735" path="socket:[69087]" dev="sockfs" ino=69087 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1628.311088][T20944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1628.438325][T20948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3744'. [ 1629.607866][T20953] loop7: detected capacity change from 0 to 16384 [ 1630.503992][T20953] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 1630.514866][T20953] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1630.523899][T20953] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 1630.532343][T20953] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 1630.540706][T20953] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 1630.549110][T20953] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 1630.557562][T20953] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 1630.566784][T20953] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 1630.575251][T20953] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 1630.585780][T20953] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 1630.594305][T20953] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 1630.862235][T20979] block nbd0: not configured, cannot reconfigure [ 1631.325641][T16647] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1631.502362][T16647] usb 3-1: Using ep0 maxpacket: 8 [ 1631.725118][T16647] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1631.733633][T16647] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1631.776481][T16647] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1631.812102][T16647] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1631.846076][T16647] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1631.861198][T16647] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1631.873063][T16647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.010476][T20990] FAULT_INJECTION: forcing a failure. [ 1632.010476][T20990] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.038428][T20990] CPU: 1 UID: 0 PID: 20990 Comm: syz.1.3754 Not tainted 6.13.0-syzkaller #0 [ 1632.047153][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1632.057233][T20990] Call Trace: [ 1632.060532][T20990] [ 1632.063484][T20990] dump_stack_lvl+0x16c/0x1f0 [ 1632.068183][T20990] should_fail_ex+0x497/0x5b0 [ 1632.072872][T20990] ? fs_reclaim_acquire+0xae/0x150 [ 1632.077994][T20990] should_failslab+0xc2/0x120 [ 1632.082708][T20990] __kmalloc_noprof+0xcb/0x510 [ 1632.087507][T20990] ? d_absolute_path+0x137/0x1b0 [ 1632.092479][T20990] ? rcu_is_watching+0x12/0xc0 [ 1632.097261][T20990] tomoyo_encode2+0x100/0x3e0 [ 1632.101949][T20990] tomoyo_encode+0x29/0x50 [ 1632.106370][T20990] tomoyo_realpath_from_path+0x19d/0x720 [ 1632.112017][T20990] tomoyo_path_number_perm+0x248/0x590 [ 1632.117479][T20990] ? tomoyo_path_number_perm+0x235/0x590 [ 1632.123118][T20990] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1632.129126][T20990] ? __pfx_lock_release+0x10/0x10 [ 1632.134156][T20990] ? trace_lock_acquire+0x14e/0x1f0 [ 1632.139364][T20990] ? lock_acquire+0x2f/0xb0 [ 1632.143871][T20990] ? __fget_files+0x40/0x3a0 [ 1632.148467][T20990] ? __fget_files+0x206/0x3a0 [ 1632.153149][T20990] security_file_ioctl+0x9b/0x240 [ 1632.158202][T20990] __x64_sys_ioctl+0xb7/0x200 [ 1632.162904][T20990] do_syscall_64+0xcd/0x250 [ 1632.167423][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.173336][T20990] RIP: 0033:0x7ffa4af85d29 [ 1632.177749][T20990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.197356][T20990] RSP: 002b:00007ffa4bd18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.205770][T20990] RAX: ffffffffffffffda RBX: 00007ffa4b175fa0 RCX: 00007ffa4af85d29 [ 1632.213741][T20990] RDX: 0000000020000640 RSI: 00000000c00464af RDI: 0000000000000003 [ 1632.221712][T20990] RBP: 00007ffa4bd18090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.229694][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.237663][T20990] R13: 0000000000000000 R14: 00007ffa4b175fa0 R15: 00007ffe1f3eedb8 [ 1632.245648][T20990] [ 1632.263863][T20990] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1632.283613][T16647] usb 3-1: usb_control_msg returned -32 [ 1632.289238][T16647] usbtmc 3-1:16.0: can't read capabilities [ 1632.316798][T16647] usb 3-1: USB disconnect, device number 74 [ 1632.392005][T16059] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1632.484822][T21001] FAULT_INJECTION: forcing a failure. [ 1632.484822][T21001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.498240][T21001] CPU: 0 UID: 0 PID: 21001 Comm: syz.1.3757 Not tainted 6.13.0-syzkaller #0 [ 1632.506946][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1632.516990][T21001] Call Trace: [ 1632.520253][T21001] [ 1632.523172][T21001] dump_stack_lvl+0x16c/0x1f0 [ 1632.527846][T21001] should_fail_ex+0x497/0x5b0 [ 1632.532524][T21001] _copy_from_user+0x2e/0xd0 [ 1632.537104][T21001] kstrtouint_from_user+0xd7/0x1c0 [ 1632.542222][T21001] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1632.547949][T21001] ? irqentry_exit+0x3b/0x90 [ 1632.552543][T21001] ? lockdep_hardirqs_on+0x7c/0x110 [ 1632.557769][T21001] proc_fail_nth_write+0x84/0x250 [ 1632.562814][T21001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1632.568461][T21001] ? preempt_schedule_thunk+0x1a/0x30 [ 1632.573839][T21001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1632.579480][T21001] vfs_write+0x24c/0x1150 [ 1632.583831][T21001] ? mark_held_locks+0x9f/0xe0 [ 1632.588599][T21001] ? __pfx_vfs_write+0x10/0x10 [ 1632.593363][T21001] ? irqentry_exit+0x3b/0x90 [ 1632.597960][T21001] ? lockdep_hardirqs_on+0x7c/0x110 [ 1632.603192][T21001] ksys_write+0x12b/0x250 [ 1632.607529][T21001] ? __pfx_ksys_write+0x10/0x10 [ 1632.612386][T21001] do_syscall_64+0xcd/0x250 [ 1632.616898][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.622800][T21001] RIP: 0033:0x7ffa4af847df [ 1632.627215][T21001] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1632.646833][T21001] RSP: 002b:00007ffa4bcf7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1632.655251][T21001] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa4af847df [ 1632.663239][T21001] RDX: 0000000000000001 RSI: 00007ffa4bcf70a0 RDI: 0000000000000008 [ 1632.671221][T21001] RBP: 00007ffa4bcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.679220][T21001] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1632.687194][T21001] R13: 0000000000000000 R14: 00007ffa4b176080 R15: 00007ffe1f3eedb8 [ 1632.695185][T21001] [ 1633.341851][T16059] usb 4-1: Using ep0 maxpacket: 8 [ 1633.353625][T16059] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1633.362869][T16059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.370883][T16059] usb 4-1: Product: syz [ 1633.375483][T16059] usb 4-1: Manufacturer: syz [ 1633.381090][T16059] usb 4-1: SerialNumber: syz [ 1633.402627][T16059] usb 4-1: config 0 descriptor?? [ 1633.428969][T21005] hsr0: entered promiscuous mode [ 1633.430398][T16059] gspca_main: se401-2.14.0 probing 047d:5003 [ 1633.453648][T21007] FAULT_INJECTION: forcing a failure. [ 1633.453648][T21007] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.466794][T21007] CPU: 1 UID: 0 PID: 21007 Comm: syz.0.3759 Not tainted 6.13.0-syzkaller #0 [ 1633.475504][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1633.485594][T21007] Call Trace: [ 1633.488885][T21007] [ 1633.491821][T21007] dump_stack_lvl+0x16c/0x1f0 [ 1633.496520][T21007] should_fail_ex+0x497/0x5b0 [ 1633.501208][T21007] ? fs_reclaim_acquire+0xae/0x150 [ 1633.506329][T21007] should_failslab+0xc2/0x120 [ 1633.511014][T21007] __kmalloc_cache_noprof+0x68/0x410 [ 1633.516302][T21007] ? trace_lock_acquire+0x14e/0x1f0 [ 1633.521515][T21007] packet_mc_add+0x157/0x7e0 [ 1633.526110][T21007] ? __might_fault+0xe3/0x190 [ 1633.530813][T21007] packet_setsockopt+0x1df5/0x2360 [ 1633.535941][T21007] ? __pfx_packet_setsockopt+0x10/0x10 [ 1633.541404][T21007] ? __pfx_sock_has_perm+0x10/0x10 [ 1633.546524][T21007] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 1633.552944][T21007] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1633.559724][T21007] ? selinux_socket_setsockopt+0x6a/0x80 [ 1633.565360][T21007] ? __pfx_packet_setsockopt+0x10/0x10 [ 1633.570828][T21007] do_sock_setsockopt+0x222/0x480 [ 1633.575862][T21007] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1633.581413][T21007] ? lock_acquire+0x2f/0xb0 [ 1633.585936][T21007] __sys_setsockopt+0x1a0/0x230 [ 1633.590805][T21007] __x64_sys_setsockopt+0xbd/0x160 [ 1633.595920][T21007] ? do_syscall_64+0x91/0x250 [ 1633.600607][T21007] ? lockdep_hardirqs_on+0x7c/0x110 [ 1633.605814][T21007] do_syscall_64+0xcd/0x250 [ 1633.610327][T21007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.616234][T21007] RIP: 0033:0x7f7a44385d29 [ 1633.620649][T21007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1633.640262][T21007] RSP: 002b:00007f7a45114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1633.648682][T21007] RAX: ffffffffffffffda RBX: 00007f7a44575fa0 RCX: 00007f7a44385d29 [ 1633.656664][T21007] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 1633.664636][T21007] RBP: 00007f7a45114090 R08: 0000000000000010 R09: 0000000000000000 [ 1633.672609][T21007] R10: 000000002000d7c0 R11: 0000000000000246 R12: 0000000000000001 [ 1633.680579][T21007] R13: 0000000000000000 R14: 00007f7a44575fa0 R15: 00007ffd55bed4d8 [ 1633.688564][T21007] [ 1633.719754][T21004] hsr0: left promiscuous mode [ 1633.854787][T21011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3761'. [ 1633.917559][T16059] gspca_se401: ExtraFeatures: 117 [ 1633.922949][T16059] gspca_se401: Too many frame sizes [ 1634.124079][T21016] block nbd4: not configured, cannot reconfigure [ 1634.209706][T16059] usb 4-1: USB disconnect, device number 43 [ 1637.314653][T21044] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3768'. [ 1637.963172][T21059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1639.219874][T21071] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1639.262145][T21070] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1639.293996][T21071] openvswitch: netlink: Flow actions attr not present in new flow. [ 1641.113508][T21095] syz.4.3783: attempt to access beyond end of device [ 1641.113508][T21095] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1641.126704][T21095] hfs: can't find a HFS filesystem on dev loop4 [ 1641.544809][T21088] x_tables: duplicate underflow at hook 2 [ 1641.557162][T21084] block nbd3: shutting down sockets [ 1642.067307][ T29] audit: type=1400 audit(1737384177.227:898): avc: denied { lock } for pid=21103 comm="syz.1.3786" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1642.212057][T16059] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1643.228636][T21116] syz.4.3788 (21116) used greatest stack depth: 20320 bytes left [ 1643.517937][T16059] usb 1-1: Using ep0 maxpacket: 16 [ 1643.532238][T16059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.583648][T16059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1643.629046][T16059] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1643.641052][T16059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1643.736237][T16059] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1643.742905][T21123] overlayfs: failed to resolve './file1': -2 [ 1643.861611][T16059] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1644.012778][T16059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1644.052497][T16059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1644.080716][T16059] usb 1-1: SerialNumber: syz [ 1644.122738][T16059] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1644.162316][T16059] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1645.391015][T21147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1646.291502][T21099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1646.318951][T21099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1646.335907][T21099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1646.354211][T21099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1646.372686][T21099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1646.437460][T16059] usb 1-1: USB disconnect, device number 71 [ 1646.932093][ T5900] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1647.136477][T21164] dccp_close: ABORT with 32 bytes unread [ 1647.214598][T13204] Bluetooth: hci3: command 0x0c1a tx timeout [ 1647.324266][ T5900] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 1647.366452][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.391874][ T5900] usb 3-1: Product: syz [ 1647.397105][ T5900] usb 3-1: Manufacturer: syz [ 1647.402022][ T5900] usb 3-1: SerialNumber: syz [ 1647.427768][ T5900] usb 3-1: config 0 descriptor?? [ 1648.188881][T21138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.212035][T21138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.235941][T21138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.268193][T21138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.281815][ T5900] usb 3-1: USB disconnect, device number 75 [ 1648.322143][T13204] Bluetooth: hci0: command 0x0c1a tx timeout [ 1648.414128][T21174] syz.1.3802: attempt to access beyond end of device [ 1648.414128][T21174] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1648.427375][T21174] hfs: can't find a HFS filesystem on dev loop1 [ 1648.501979][T13204] Bluetooth: hci2: command 0x0c1a tx timeout [ 1648.508223][T13204] Bluetooth: hci1: command 0x0c1a tx timeout [ 1648.527321][T13204] Bluetooth: hci4: command 0x0c1a tx timeout [ 1649.198575][T21180] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3803'. [ 1649.207879][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3803'. [ 1653.737907][T21222] Cannot find add_set index 3 as target [ 1654.877801][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'. [ 1654.945095][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'. [ 1655.412702][ T29] audit: type=1400 audit(1737384190.577:899): avc: denied { append } for pid=21233 comm="syz.4.3817" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1655.529614][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1655.569572][ T29] audit: type=1400 audit(1737384190.577:900): avc: denied { open } for pid=21233 comm="syz.4.3817" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1655.628301][ T29] audit: type=1400 audit(1737384190.787:901): avc: denied { append } for pid=21233 comm="syz.4.3817" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1656.462181][T19937] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1656.684982][T19937] usb 3-1: Using ep0 maxpacket: 16 [ 1656.794191][T19937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.815697][T19937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1656.838722][T19937] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1656.883673][T19937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.908289][T19937] usb 3-1: config 0 descriptor?? [ 1657.006766][T21260] ebt_among: dst integrity fail: 200 [ 1657.170863][ T29] audit: type=1326 audit(1737384192.327:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.4.3826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbcf85d29 code=0x0 [ 1657.252261][T19937] usbhid 3-1:0.0: can't add hid device: -71 [ 1657.263853][T19937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1657.275015][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.275694][T21263] xt_TCPMSS: Only works on TCP SYN packets [ 1657.293239][T19937] usb 3-1: USB disconnect, device number 76 [ 1657.504914][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.712268][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.060687][T21277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1658.072538][T21277] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1658.312678][ T29] audit: type=1400 audit(1737384193.307:903): avc: denied { read } for pid=21270 comm="syz.0.3829" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1658.651898][ T29] audit: type=1400 audit(1737384193.307:904): avc: denied { open } for pid=21270 comm="syz.0.3829" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1658.713795][ T29] audit: type=1400 audit(1737384193.317:905): avc: denied { search } for pid=21270 comm="syz.0.3829" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1658.777956][ T29] audit: type=1400 audit(1737384193.317:906): avc: denied { getattr } for pid=21270 comm="syz.0.3829" name="saved_tgids" dev="tracefs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1659.056038][T18611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1659.071006][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.094391][T18611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1659.392030][T18611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1659.404461][T18611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1659.412229][T18611] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1659.421355][T18611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1660.773144][ T78] bridge_slave_1: left allmulticast mode [ 1660.788604][ T78] bridge_slave_1: left promiscuous mode [ 1660.801945][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.002648][ T78] bridge_slave_0: left allmulticast mode [ 1661.056776][ T78] bridge_slave_0: left promiscuous mode [ 1661.086364][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.532542][T13204] Bluetooth: hci1: command tx timeout [ 1661.840410][ T5900] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1662.113684][ T5900] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1662.147376][ T5900] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1662.781618][ T5900] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1662.862417][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.874766][T21309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1662.902152][ T5900] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1662.994341][T21316] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1663.412886][T11879] usb 3-1: USB disconnect, device number 77 [ 1663.602306][T13204] Bluetooth: hci1: command tx timeout [ 1663.680345][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.721253][T21318] udevd[21318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1664.034754][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.048091][ T78] bond0 (unregistering): Released all slaves [ 1664.255874][T21289] chnl_net:caif_netlink_parms(): no params data found [ 1664.407583][T21330] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1665.189181][T21338] syz.3.3843 (21338): drop_caches: 2 [ 1665.363823][T21329] dccp_close: ABORT with 32 bytes unread [ 1665.690515][T13204] Bluetooth: hci1: command tx timeout [ 1666.217442][T21289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.313132][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.390964][T21289] bridge_slave_0: entered allmulticast mode [ 1666.415441][T16647] kernel read not supported for file /vcs (pid: 16647 comm: kworker/0:4) [ 1666.453061][T21289] bridge_slave_0: entered promiscuous mode [ 1666.603137][ T78] hsr_slave_0: left promiscuous mode [ 1666.611158][ T78] hsr_slave_1: left promiscuous mode [ 1666.623838][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.623900][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.625374][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.625407][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.704144][ T78] veth1_macvtap: left promiscuous mode [ 1666.704233][ T78] veth0_macvtap: left promiscuous mode [ 1666.704349][ T78] veth1_vlan: left promiscuous mode [ 1666.704445][ T78] veth0_vlan: left promiscuous mode [ 1667.761955][T13204] Bluetooth: hci1: command tx timeout [ 1668.300978][T21397] overlayfs: failed to resolve './file0': -2 [ 1668.506910][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3854'. [ 1668.868435][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1668.918513][T21402] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3855'. [ 1668.948447][T21401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.971093][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.979861][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.989733][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1670.132137][T21289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.156998][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.170123][T21289] bridge_slave_1: entered allmulticast mode [ 1670.179083][T21289] bridge_slave_1: entered promiscuous mode [ 1670.292322][T21408] syz.4.3857: attempt to access beyond end of device [ 1670.292322][T21408] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1670.305518][T21408] hfs: can't find a HFS filesystem on dev loop4 [ 1670.554083][T21289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.020728][T21289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.675104][T21289] team0: Port device team_slave_0 added [ 1672.691213][T21432] slcan: can't register candev [ 1672.717957][T21289] team0: Port device team_slave_1 added [ 1673.852343][T21289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.859331][T21289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.011666][T21289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.565501][T21289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.582583][T21289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.641422][ T78] IPVS: stop unused estimator thread 0... [ 1674.664009][T21289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.560388][T21289] hsr_slave_0: entered promiscuous mode [ 1676.592690][T21486] syz.4.3874: attempt to access beyond end of device [ 1676.592690][T21486] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1676.605686][T21486] hfs: can't find a HFS filesystem on dev loop4 [ 1676.646209][T21289] hsr_slave_1: entered promiscuous mode [ 1676.698853][T21289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1676.716772][T21289] Cannot create hsr debugfs directory [ 1678.070554][T21516] syz.4.3876: attempt to access beyond end of device [ 1678.070554][T21516] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1678.084654][T21516] hfs: can't find a HFS filesystem on dev loop4 [ 1679.894362][T21528] xt_CT: No such helper "syz0" [ 1681.664720][T21289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1682.125274][T21289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1682.214260][T21289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1682.254698][T21289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1683.857248][T21289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.237261][T21289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.248892][T16611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.256135][T16611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.305645][T16611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.312812][T16611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.965083][T21598] xt_CT: No such helper "syz0" [ 1688.760015][T21621] dccp_close: ABORT with 351 bytes unread [ 1688.923176][T21289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.914767][T21658] xt_CT: No such helper "syz0" [ 1692.270644][T16620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.869023][T21680] syz.2.3909: attempt to access beyond end of device [ 1692.869023][T21680] loop2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1692.882553][T21680] hfs: can't find a HFS filesystem on dev loop2 [ 1692.932785][T16620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.094274][T21289] veth0_vlan: entered promiscuous mode [ 1694.110169][T18611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1694.993033][T18611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1695.026582][T16620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.044830][T21695] xt_CT: No such helper "syz0" [ 1695.050404][T18611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1695.063830][T18611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1695.150707][T18611] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1695.158171][T18611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1695.308748][T21289] veth1_vlan: entered promiscuous mode [ 1695.426009][T16620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.474355][T21700] bridge0: entered promiscuous mode [ 1695.479992][T21700] macvlan2: entered promiscuous mode [ 1695.485987][T21700] macvlan2: entered allmulticast mode [ 1695.491528][T21700] bridge0: entered allmulticast mode [ 1695.504106][T21289] veth0_macvtap: entered promiscuous mode [ 1695.633935][T21289] veth1_macvtap: entered promiscuous mode [ 1696.281406][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.311406][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.332317][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.343058][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.353663][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.365990][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.376266][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.387132][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.397351][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.412420][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.434880][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.471123][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.501695][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.531256][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.541413][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.553329][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.569457][T21289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1696.652573][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.723986][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.775611][ T8916] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1696.795955][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.826386][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.852535][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.863472][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.882040][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.914002][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.934836][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.946088][ T8916] usb 1-1: Using ep0 maxpacket: 32 [ 1696.960309][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.003913][ T8916] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 1697.031877][ T8916] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1697.040898][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.341917][ T9085] Bluetooth: hci3: command tx timeout [ 1697.428093][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.604485][ T8916] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1697.613799][ T8916] usb 1-1: config 0 has no interface number 0 [ 1697.620033][T21289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.620195][ T8916] usb 1-1: config 0 interface 145 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1697.643251][T21718] xt_CT: No such helper "syz0" [ 1697.651790][ T8916] usb 1-1: config 0 interface 145 altsetting 0 endpoint 0xC has invalid maxpacket 15917, setting to 64 [ 1697.671216][T21289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.683691][ T8916] usb 1-1: config 0 interface 145 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1697.709078][T21289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.741258][ T8916] usb 1-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=ec.a1 [ 1697.776638][ T8916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.809818][ T8916] usb 1-1: Product: syz [ 1697.820291][T21289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.825781][ T8916] usb 1-1: Manufacturer: syz [ 1697.837383][T21289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.844285][ T8916] usb 1-1: SerialNumber: syz [ 1697.848150][T21289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.862555][ T8916] usb 1-1: config 0 descriptor?? [ 1697.867796][T21289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.055247][T16620] bridge_slave_1: left allmulticast mode [ 1698.060955][T16620] bridge_slave_1: left promiscuous mode [ 1698.073400][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.085236][T16620] bridge_slave_0: left allmulticast mode [ 1698.090942][T16620] bridge_slave_0: left promiscuous mode [ 1698.116108][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.188762][T16620] xfrm0: left allmulticast mode [ 1698.319872][T16647] usb 1-1: USB disconnect, device number 72 [ 1698.968451][T16620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.985105][T16620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.004555][T16620] bond0 (unregistering): Released all slaves [ 1699.034670][T21726] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3919'. [ 1699.108743][ T29] audit: type=1400 audit(1737384234.267:907): avc: denied { sys_chroot } for pid=21746 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1699.146456][ T29] audit: type=1400 audit(1737384234.267:908): avc: denied { setgid } for pid=21746 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1699.168742][ T29] audit: type=1400 audit(1737384234.267:909): avc: denied { setrlimit } for pid=21746 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1699.364737][ T9085] Bluetooth: hci3: command tx timeout [ 1699.787411][T21690] chnl_net:caif_netlink_parms(): no params data found [ 1700.009381][T21758] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1700.106818][T21764] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3923'. [ 1700.168883][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.298810][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.953553][T16620] hsr_slave_0: left promiscuous mode [ 1700.959611][T16620] hsr_slave_1: left promiscuous mode [ 1700.968024][T16620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.983452][T16620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.991409][T16620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.999164][T16620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.024032][T16620] veth1_macvtap: left promiscuous mode [ 1701.029656][T16620] veth0_macvtap: left promiscuous mode [ 1701.035410][T16620] veth1_vlan: left promiscuous mode [ 1701.040784][T16620] veth0_vlan: left promiscuous mode [ 1701.442015][ T9085] Bluetooth: hci3: command tx timeout [ 1701.970955][T16620] team0 (unregistering): Port device team_slave_1 removed [ 1702.081594][T16620] team0 (unregistering): Port device team_slave_0 removed [ 1702.928677][T21690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.942100][T21690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.949619][T21690] bridge_slave_0: entered allmulticast mode [ 1702.966947][T21690] bridge_slave_0: entered promiscuous mode [ 1703.059096][T16626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.068927][T16626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.777499][T21690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.785314][T21690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.800819][ T9085] Bluetooth: hci3: command tx timeout [ 1703.822827][T21690] bridge_slave_1: entered allmulticast mode [ 1703.862032][T21690] bridge_slave_1: entered promiscuous mode [ 1704.051251][T21690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.675905][T21690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.786438][T21788] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1704.868030][T21690] team0: Port device team_slave_0 added [ 1704.970709][T21690] team0: Port device team_slave_1 added [ 1705.108105][T21690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.162762][T21797] ebt_among: dst integrity fail: 200 [ 1705.171964][T21690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.198576][T21690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.230462][ T29] audit: type=1326 audit(1737384240.387:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.5.3828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x0 [ 1705.283432][T21690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.295211][T21690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.333457][T21690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.416988][T21805] xt_TCPMSS: Only works on TCP SYN packets [ 1705.535081][T16620] IPVS: stop unused estimator thread 0... [ 1705.783115][T21690] hsr_slave_0: entered promiscuous mode [ 1705.859169][T21690] hsr_slave_1: entered promiscuous mode [ 1705.887429][T21690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1706.028692][T21690] Cannot create hsr debugfs directory [ 1706.253412][ T29] audit: type=1400 audit(1737384241.417:911): avc: denied { read write } for pid=21816 comm="syz.4.3933" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1706.405851][ T29] audit: type=1400 audit(1737384241.417:912): avc: denied { open } for pid=21816 comm="syz.4.3933" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1707.520994][T21830] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1708.158275][T21690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1708.194350][T21690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1708.334621][T21690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1708.946304][T21690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1709.327970][T21690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.958323][T16620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.037582][T21856] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1710.113435][T21690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.264128][T16620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.318623][T11089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.325786][T11089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.437946][T16620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.462372][T11879] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1710.471503][T16626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.478680][T16626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.553847][T13204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1710.571026][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1710.585289][T16620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.591969][T13204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1710.610467][T13204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1710.619883][T13204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1710.632110][T13204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1710.641111][T13204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1710.645811][T21690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1710.658826][T11879] usb 1-1: Using ep0 maxpacket: 16 [ 1710.676869][T11879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.722391][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 1710.728648][T11879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.750855][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.770929][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.782307][T11879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.801942][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.812103][T11879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1710.835525][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1710.851994][T11879] usb 1-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 1710.875779][T11879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.897779][ T46] usb 6-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 1710.909398][T11879] usb 1-1: config 0 descriptor?? [ 1710.914618][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.937932][ T46] usb 6-1: config 0 descriptor?? [ 1711.015704][T16620] bridge_slave_1: left allmulticast mode [ 1711.031870][T16620] bridge_slave_1: left promiscuous mode [ 1711.040984][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.072214][T16620] bridge_slave_0: left allmulticast mode [ 1711.078131][T16620] bridge_slave_0: left promiscuous mode [ 1711.092436][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.669324][T21910] xt_nat: multiple ranges no longer supported [ 1712.057970][T21912] xt_nat: multiple ranges no longer supported [ 1713.447299][ T9085] Bluetooth: hci2: command tx timeout [ 1713.605249][T11879] usbhid 1-1:0.0: can't add hid device: -71 [ 1713.611276][T11879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1713.672270][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 1713.679973][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1713.697784][T11879] usb 1-1: USB disconnect, device number 73 [ 1713.710166][ T46] usb 6-1: USB disconnect, device number 2 [ 1713.804765][T21918] fuse: Unknown parameter 'grou00000000000000000000' [ 1714.112067][ T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1714.485888][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 1714.491628][ T29] audit: type=1400 audit(1737384249.637:913): avc: denied { write } for pid=21924 comm="syz.4.3952" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1714.514875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.522390][ T29] audit: type=1400 audit(1737384249.637:914): avc: denied { getopt } for pid=21924 comm="syz.4.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1714.545794][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.556484][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.568692][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.582289][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1714.597682][ T46] usb 6-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 1714.609034][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.906873][ T46] usb 6-1: config 0 descriptor?? [ 1715.264605][T16620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.289317][T16620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.312849][T16620] bond0 (unregistering): Released all slaves [ 1715.524352][ T9085] Bluetooth: hci2: command tx timeout [ 1716.212802][T21936] FAULT_INJECTION: forcing a failure. [ 1716.212802][T21936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.227117][T21936] CPU: 0 UID: 0 PID: 21936 Comm: syz.5.3948 Not tainted 6.13.0-syzkaller #0 [ 1716.235841][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1716.245907][T21936] Call Trace: [ 1716.249197][T21936] [ 1716.252135][T21936] dump_stack_lvl+0x16c/0x1f0 [ 1716.256840][T21936] should_fail_ex+0x497/0x5b0 [ 1716.261538][T21936] _copy_from_user+0x2e/0xd0 [ 1716.266142][T21936] do_ipt_set_ctl+0x8e1/0xbe0 [ 1716.270847][T21936] ? __mutex_lock+0x1cc/0xa60 [ 1716.275571][T21936] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1716.280792][T21936] ? __mutex_unlock_slowpath+0x164/0x690 [ 1716.286451][T21936] ? sockopt_release_sock+0x52/0x60 [ 1716.291667][T21936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1716.297684][T21936] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1716.303695][T21936] nf_setsockopt+0x8a/0xf0 [ 1716.308136][T21936] ip_setsockopt+0xcb/0xf0 [ 1716.312580][T21936] udp_setsockopt+0x7d/0xd0 [ 1716.317112][T21936] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1716.323037][T21936] do_sock_setsockopt+0x222/0x480 [ 1716.328081][T21936] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1716.333648][T21936] ? lock_acquire+0x2f/0xb0 [ 1716.338186][T21936] __sys_setsockopt+0x1a0/0x230 [ 1716.343068][T21936] __x64_sys_setsockopt+0xbd/0x160 [ 1716.348197][T21936] ? do_syscall_64+0x91/0x250 [ 1716.352887][T21936] ? lockdep_hardirqs_on+0x7c/0x110 [ 1716.358091][T21936] do_syscall_64+0xcd/0x250 [ 1716.362607][T21936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.368512][T21936] RIP: 0033:0x7eff07985d29 [ 1716.372929][T21936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1716.392541][T21936] RSP: 002b:00007eff057b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1716.400985][T21936] RAX: ffffffffffffffda RBX: 00007eff07b76160 RCX: 00007eff07985d29 [ 1716.408968][T21936] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a [ 1716.416936][T21936] RBP: 00007eff057b4090 R08: 0000000000000548 R09: 0000000000000000 [ 1716.424908][T21936] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1716.432885][T21936] R13: 0000000000000000 R14: 00007eff07b76160 R15: 00007ffcf1e7c2a8 [ 1716.440873][T21936] [ 1717.079676][T21933] veth0_to_team: entered promiscuous mode [ 1717.085579][T21933] veth0_to_team: entered allmulticast mode [ 1717.618269][ T9085] Bluetooth: hci2: command tx timeout [ 1718.057294][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 1718.123064][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1718.248171][ T46] usb 6-1: USB disconnect, device number 3 [ 1718.488611][T21690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.572588][T16620] hsr_slave_0: left promiscuous mode [ 1718.582802][T16620] hsr_slave_1: left promiscuous mode [ 1718.602633][ T29] audit: type=1400 audit(1737384253.717:915): avc: denied { ioctl } for pid=21953 comm="syz.5.3958" path="socket:[74410]" dev="sockfs" ino=74410 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1718.646598][T16620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.658047][T16620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.687215][T16620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.731891][T16620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.764936][T16620] veth1_macvtap: left promiscuous mode [ 1718.770593][T16620] veth0_macvtap: left promiscuous mode [ 1718.983773][T16620] veth1_vlan: left promiscuous mode [ 1719.020264][T16620] veth0_vlan: left promiscuous mode [ 1719.487343][T21967] fuse: Unknown parameter 'grou00000000000000000000' [ 1719.682665][ T9085] Bluetooth: hci2: command tx timeout [ 1720.286030][T16620] team0 (unregistering): Port device team_slave_1 removed [ 1720.372644][T16620] team0 (unregistering): Port device team_slave_0 removed [ 1721.145504][T21887] chnl_net:caif_netlink_parms(): no params data found [ 1721.276711][ T29] audit: type=1326 audit(1737384256.437:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1721.314730][ T29] audit: type=1326 audit(1737384256.437:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1721.349223][ T29] audit: type=1326 audit(1737384256.437:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1721.478293][ T29] audit: type=1326 audit(1737384256.437:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1721.672852][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1721.682367][T21984] openvswitch: netlink: Flow actions attr not present in new flow. [ 1722.100560][ T29] audit: type=1326 audit(1737384256.437:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1722.149397][ T29] audit: type=1326 audit(1737384256.437:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1722.175344][ T29] audit: type=1326 audit(1737384256.437:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1722.201680][ T29] audit: type=1326 audit(1737384256.437:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1722.227190][ T29] audit: type=1326 audit(1737384256.437:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1722.264644][ T29] audit: type=1326 audit(1737384256.437:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21978 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff07985d29 code=0x7ffc0000 [ 1722.314794][T21992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1722.315439][T21887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.340577][T21887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.413507][T21887] bridge_slave_0: entered allmulticast mode [ 1722.431163][T21887] bridge_slave_0: entered promiscuous mode [ 1722.469067][T21887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.487523][T21887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.517715][T21887] bridge_slave_1: entered allmulticast mode [ 1722.673884][T21887] bridge_slave_1: entered promiscuous mode [ 1723.917666][T21887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.201216][T21887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1724.268810][T21887] team0: Port device team_slave_0 added [ 1724.384313][T21690] veth0_vlan: entered promiscuous mode [ 1724.399678][T16620] IPVS: stop unused estimator thread 0... [ 1724.420171][T21690] veth1_vlan: entered promiscuous mode [ 1724.502185][T21887] team0: Port device team_slave_1 added [ 1725.780189][T21690] veth0_macvtap: entered promiscuous mode [ 1726.014507][T21887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.042080][T21887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1726.069075][T21887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.178240][T22030] syz.5.3971: attempt to access beyond end of device [ 1726.178240][T22030] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1726.191235][T22030] hfs: can't find a HFS filesystem on dev loop5 [ 1726.307202][T21887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.408805][T21887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1726.583813][T21887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.318021][T21690] veth1_macvtap: entered promiscuous mode [ 1727.506781][T21887] hsr_slave_0: entered promiscuous mode [ 1727.525564][T21887] hsr_slave_1: entered promiscuous mode [ 1727.542650][T21887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1727.559604][T21887] Cannot create hsr debugfs directory [ 1727.677541][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.708088][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.721874][T19937] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1727.924639][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.944023][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.955195][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.967054][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.977484][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.988907][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.004605][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.016392][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.031381][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.051322][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.068461][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.087327][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.123544][T21690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.187026][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.207777][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.224106][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.242974][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.260110][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.271917][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.282044][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.292987][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.303891][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.315233][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.331695][T21690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.344384][T21690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.345395][T19937] usb 1-1: Using ep0 maxpacket: 16 [ 1728.355617][T21690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.370054][T19937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.381424][T19937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1728.386298][T21690] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.398152][T19937] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1728.406983][T21690] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.420342][T21690] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.429991][T21690] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.435564][T19937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1728.456508][T19937] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1728.470189][T19937] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1728.485450][T19937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1728.495894][T19937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1728.504755][T19937] usb 1-1: SerialNumber: syz [ 1728.612016][T19937] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1728.662461][T19937] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1728.936585][T22072] syz.5.3979 (22072): drop_caches: 2 [ 1729.567775][T22079] can0: slcan on ttyS3. [ 1729.628557][T16626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.655857][T16626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.724746][T22073] can0 (unregistered): slcan off ttyS3. [ 1729.801142][T11105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.852225][T11105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.412725][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.419063][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.456282][T22050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1731.752142][ T9085] Bluetooth: hci0: command 0x0c1a tx timeout [ 1731.758665][T22050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1731.794935][T22050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1732.031909][T22050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1732.066139][T22050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1732.117781][T22050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1732.148473][T22050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1732.270035][T21887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1732.352553][T22050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1732.361046][T21887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1732.517068][T22113] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3982'. [ 1732.526425][T22113] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3982'. [ 1732.587050][T22050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1732.689942][T22050] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1732.761855][T21887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1732.885206][T22050] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1732.947916][T21887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1733.030505][ T9] usb 1-1: USB disconnect, device number 74 [ 1733.311013][T21887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.347067][T21887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.381887][T22128] block nbd4: not configured, cannot reconfigure [ 1733.401204][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.408415][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.806588][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.813820][ T8118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.842078][ T9085] Bluetooth: hci1: command 0x0c1a tx timeout [ 1733.848337][ T9085] Bluetooth: hci4: command 0x0c1a tx timeout [ 1734.161979][T13204] Bluetooth: hci3: command 0x0c1a tx timeout [ 1734.642243][T13204] Bluetooth: hci2: command 0x0c1a tx timeout [ 1734.735357][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1734.735376][ T29] audit: type=1326 audit(1737384269.887:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1734.878461][ T29] audit: type=1326 audit(1737384269.887:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1734.916574][ T29] audit: type=1326 audit(1737384270.047:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.112608][ T29] audit: type=1326 audit(1737384270.047:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.136916][ T29] audit: type=1326 audit(1737384270.047:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.254948][T21887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.272030][ T29] audit: type=1326 audit(1737384270.047:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.379243][ T29] audit: type=1326 audit(1737384270.047:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.418842][T21887] veth0_vlan: entered promiscuous mode [ 1735.495393][ T29] audit: type=1326 audit(1737384270.047:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.571602][T21887] veth1_vlan: entered promiscuous mode [ 1735.683771][ T29] audit: type=1326 audit(1737384270.047:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1735.792581][ T29] audit: type=1326 audit(1737384270.047:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22162 comm="syz.6.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x7ffc0000 [ 1736.030064][T22178] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3993'. [ 1736.039317][T22178] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3993'. [ 1736.429284][T21887] veth0_macvtap: entered promiscuous mode [ 1736.443256][T13204] Bluetooth: hci1: command 0x0c1a tx timeout [ 1736.449334][T13204] Bluetooth: hci3: command 0x0c1a tx timeout [ 1736.584078][T21887] veth1_macvtap: entered promiscuous mode [ 1736.720841][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.722384][T13204] Bluetooth: hci2: command 0x0c1a tx timeout [ 1736.844642][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.859554][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.870545][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.945491][T22184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3994'. [ 1736.997169][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1737.182407][ T8916] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1737.248597][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1737.294163][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1737.423159][T22194] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3996'. [ 1737.432371][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3996'. [ 1737.848834][T22180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1737.921998][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1737.938134][ T8916] usb 6-1: Using ep0 maxpacket: 16 [ 1737.962498][ T8916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.983292][ T8916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.997678][ T8916] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1738.013179][ T8916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.026909][ T8916] usb 6-1: config 0 descriptor?? [ 1738.036062][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.100722][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.130564][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.156297][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.173027][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.191791][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.202171][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.219133][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.253231][T21887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.316908][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.351766][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.410997][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.436925][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.452104][ T8916] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 1738.481828][ T9085] Bluetooth: hci1: command 0x0c1a tx timeout [ 1738.483475][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.491897][T13204] Bluetooth: hci3: command 0x0c1a tx timeout [ 1738.513885][ T8916] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 1738.572440][ T8916] appleir 0003:05AC:8241.000C: item fetching failed at offset 2/5 [ 1738.599905][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.744228][ T8916] appleir 0003:05AC:8241.000C: parse failed [ 1738.744554][T22208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.415269][ T8916] appleir 0003:05AC:8241.000C: probe with driver appleir failed with error -22 [ 1739.425543][T13204] Bluetooth: hci2: command 0x0c1a tx timeout [ 1739.449105][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.465193][T22208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.478255][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.530535][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.552092][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.565053][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.578056][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.588374][T21887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.599161][T21887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.615222][T21887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.668417][T22183] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1739.723557][T22183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.733390][T22183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.752139][T22183] bridge0: entered allmulticast mode [ 1739.786927][T11879] usb 6-1: USB disconnect, device number 4 [ 1739.795195][T21887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.952923][T21887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.962614][T21887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.971359][T21887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.704203][ T8118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.732304][ T8118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.843119][T16620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.872506][T16620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.481875][T22241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4004'. [ 1741.813040][T22249] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4005'. [ 1742.170885][ T8118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.471457][ T8118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.093595][ T8118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.188865][ T9085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1743.207177][ T9085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1743.218433][ T9085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1743.226431][ T9085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1743.273778][ T9085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1743.281190][ T9085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1743.605082][T22244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.671580][ T8118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.753385][T22270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1744.249352][T22274] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1745.521159][ T8118] bridge_slave_1: left allmulticast mode [ 1745.553947][ T9085] Bluetooth: hci2: command tx timeout [ 1745.571758][ T8118] bridge_slave_1: left promiscuous mode [ 1745.577545][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.989460][ T8118] bridge_slave_0: left allmulticast mode [ 1746.131677][ T8118] bridge_slave_0: left promiscuous mode [ 1746.188330][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.612383][ T9085] Bluetooth: hci2: command tx timeout [ 1747.884364][ T8118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.901064][ T8118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.912376][ T8118] bond0 (unregistering): Released all slaves [ 1747.932237][T22261] chnl_net:caif_netlink_parms(): no params data found [ 1749.019819][T22329] slcan: can't register candev [ 1749.681825][T13204] Bluetooth: hci2: command tx timeout [ 1749.822838][T13204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1749.843272][T13204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1749.854403][T13204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1749.864936][T13204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1749.875236][T13204] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1749.882717][T13204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1749.942918][T22261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.974695][T22261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.985457][T22261] bridge_slave_0: entered allmulticast mode [ 1749.997594][T22261] bridge_slave_0: entered promiscuous mode [ 1750.048817][ T8118] hsr_slave_0: left promiscuous mode [ 1750.082058][ T8118] hsr_slave_1: left promiscuous mode [ 1750.216143][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.256211][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.303339][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.310823][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.361109][ T8118] veth1_macvtap: left promiscuous mode [ 1750.369633][ T8118] veth0_macvtap: left promiscuous mode [ 1750.378084][ T8118] veth1_vlan: left promiscuous mode [ 1750.398941][ T8118] veth0_vlan: left promiscuous mode [ 1750.581947][T12721] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1750.662076][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1750.742016][T12721] usb 1-1: Using ep0 maxpacket: 8 [ 1750.757833][T12721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1750.778809][T12721] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1750.790208][T12721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.812894][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 1750.819673][T12721] usb 1-1: config 0 descriptor?? [ 1750.836223][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.848295][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1750.861003][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1750.871244][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1750.881288][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1750.892269][ T46] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1750.907374][ T46] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1750.950066][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1750.981800][ T46] usb 7-1: SerialNumber: syz [ 1751.003461][ T46] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1751.011537][ T46] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1751.066677][T12721] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1751.482766][ T8118] team0 (unregistering): Port device team_slave_1 removed [ 1751.589896][T16647] usb 1-1: USB disconnect, device number 75 [ 1751.677969][ T8118] team0 (unregistering): Port device team_slave_0 removed [ 1751.943881][T13204] Bluetooth: hci2: command tx timeout [ 1751.999542][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1751.999580][ T29] audit: type=1400 audit(1737384287.067:1035): avc: denied { ioctl } for pid=22368 comm="syz.4.4029" path="socket:[76509]" dev="sockfs" ino=76509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1752.032050][T13204] Bluetooth: hci1: command tx timeout [ 1752.816393][T22373] syz.4.4031 (22373): drop_caches: 2 [ 1754.083301][T13204] Bluetooth: hci1: command tx timeout [ 1754.292780][T22261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.305595][T22261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.323230][T22261] bridge_slave_1: entered allmulticast mode [ 1754.340580][T22261] bridge_slave_1: entered promiscuous mode [ 1754.446703][T22261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.466839][T22357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1754.513307][T22357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1754.519968][T22357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1754.531537][T22261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.550081][T22357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1754.579124][T22357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1754.618969][T22357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1754.626740][T22261] team0: Port device team_slave_0 added [ 1754.636946][T22261] team0: Port device team_slave_1 added [ 1754.667885][T22357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1754.678849][T22357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1754.702342][T22261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.723036][T22357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1754.729413][T22261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.755506][T22261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.768106][T22261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.775197][T22261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.808449][T22261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.872178][T22261] hsr_slave_0: entered promiscuous mode [ 1754.879787][T22261] hsr_slave_1: entered promiscuous mode [ 1754.889328][ T8916] usb 7-1: USB disconnect, device number 2 [ 1754.905430][T22261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1754.937988][T22261] Cannot create hsr debugfs directory [ 1756.482427][T13204] Bluetooth: hci0: command 0x0c1a tx timeout [ 1756.562481][T13204] Bluetooth: hci2: command 0x0c1a tx timeout [ 1756.570268][T13204] Bluetooth: hci3: command 0x0c1a tx timeout [ 1756.572833][ T9085] Bluetooth: hci4: command 0x0c1a tx timeout [ 1756.761889][ T9085] Bluetooth: hci1: command 0x0419 tx timeout [ 1756.886521][ T8118] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.717856][ T8118] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.849453][T22347] chnl_net:caif_netlink_parms(): no params data found [ 1758.266317][ T8118] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.642367][ T9085] Bluetooth: hci2: command 0x0c1a tx timeout [ 1758.757842][T22430] syz.0.4043 (22430): drop_caches: 2 [ 1758.801979][ T9085] Bluetooth: hci1: command 0x0419 tx timeout [ 1758.963244][ T8118] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.504751][T22347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.577421][T22347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.602530][T22347] bridge_slave_0: entered allmulticast mode [ 1759.609580][T22347] bridge_slave_0: entered promiscuous mode [ 1759.781908][T22347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.799493][T22347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.819175][T22347] bridge_slave_1: entered allmulticast mode [ 1759.826650][T22347] bridge_slave_1: entered promiscuous mode [ 1759.883038][T22458] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4046'. [ 1759.928489][T22459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22459 comm=syz.4.4045 [ 1760.078077][T22347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.124689][ T8118] bridge_slave_1: left allmulticast mode [ 1760.138530][ T8118] bridge_slave_1: left promiscuous mode [ 1760.157581][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.170606][ T8118] bridge_slave_0: left allmulticast mode [ 1760.180452][ T8118] bridge_slave_0: left promiscuous mode [ 1760.196475][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.624313][T22456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.722009][ T9085] Bluetooth: hci2: command 0x0c1a tx timeout [ 1760.882077][ T9085] Bluetooth: hci1: command 0x0419 tx timeout [ 1761.028033][T22470] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1761.037271][T22470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1761.809497][ T8118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.832919][ T8118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.854658][ T8118] bond0 (unregistering): Released all slaves [ 1761.880556][T22347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.990044][T22347] team0: Port device team_slave_0 added [ 1762.656804][T22347] team0: Port device team_slave_1 added [ 1762.749278][T22347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1762.762369][T22347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.798418][T22347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1762.965400][ T9085] Bluetooth: hci1: command 0x0419 tx timeout [ 1763.068605][T22347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.124830][T22347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.215892][T22347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.679552][T22261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1763.736822][T22261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1764.243042][T22261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1764.250112][T22261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1764.337986][ T8118] hsr_slave_0: left promiscuous mode [ 1764.338445][ T8118] hsr_slave_1: left promiscuous mode [ 1764.338928][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.338969][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1764.339423][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.339444][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1764.367298][ T8118] veth1_macvtap: left promiscuous mode [ 1764.420926][ T8118] veth0_macvtap: left promiscuous mode [ 1764.421646][ T8118] veth1_vlan: left promiscuous mode [ 1764.422318][ T8118] veth0_vlan: left promiscuous mode [ 1765.924767][ T8118] team0 (unregistering): Port device team_slave_1 removed [ 1766.007522][ T8118] team0 (unregistering): Port device team_slave_0 removed [ 1767.947880][T22347] hsr_slave_0: entered promiscuous mode [ 1768.328231][T22347] hsr_slave_1: entered promiscuous mode [ 1768.415398][T22347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1768.436160][T22347] Cannot create hsr debugfs directory [ 1770.085394][T22541] slcan: can't register candev [ 1770.191247][T22261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.741253][T22261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.810016][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.817388][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.905298][T11089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.912508][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.928683][T22564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=22564 comm=syz.0.4070 [ 1772.757840][T22570] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4069'. [ 1772.779381][T22564] netlink: 53 bytes leftover after parsing attributes in process `syz.0.4070'. [ 1773.361040][T22347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1773.386194][T22347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1773.422955][T22347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1773.444786][T22347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1773.686660][T22347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.721629][T22347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.738059][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.745294][T16606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.796478][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.803678][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.951736][ T29] audit: type=1400 audit(1737384309.107:1036): avc: denied { unmount } for pid=17751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1774.059959][T22261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1774.195145][T22261] veth0_vlan: entered promiscuous mode [ 1774.202066][ T29] audit: type=1400 audit(1737384309.347:1037): avc: denied { unlink } for pid=17751 comm="syz-executor" name="userfaultfd" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1774.218407][T22261] veth1_vlan: entered promiscuous mode [ 1774.331383][ T29] audit: type=1400 audit(1737384309.487:1038): avc: denied { write } for pid=22609 comm="dhcpcd-run-hook" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1774.333709][T22261] veth0_macvtap: entered promiscuous mode [ 1774.464354][ T29] audit: type=1400 audit(1737384309.527:1039): avc: denied { add_name } for pid=22609 comm="dhcpcd-run-hook" name="null" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1774.488308][T22261] veth1_macvtap: entered promiscuous mode [ 1774.551956][ T29] audit: type=1400 audit(1737384309.527:1040): avc: denied { create } for pid=22609 comm="dhcpcd-run-hook" name="null" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=file permissive=1 [ 1774.598784][ T29] audit: type=1400 audit(1737384309.547:1041): avc: denied { write open } for pid=22609 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=3684 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=file permissive=1 [ 1774.605491][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.695405][ T29] audit: type=1400 audit(1737384309.547:1042): avc: denied { getattr } for pid=22609 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=3684 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=file permissive=1 [ 1774.740952][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.755324][ T29] audit: type=1400 audit(1737384309.547:1043): avc: denied { unmount } for pid=17913 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1774.775375][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.775401][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.775412][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.775428][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.775440][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.775455][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.775480][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.775495][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.775513][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.775527][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.775549][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.775563][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.777355][T22261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1775.064371][T22633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=22633 comm=syz.4.4081 [ 1775.078202][T22633] netlink: 53 bytes leftover after parsing attributes in process `syz.4.4081'. [ 1775.127026][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.157818][ T29] audit: type=1400 audit(1737384310.317:1044): avc: denied { unlink } for pid=17751 comm="syz-executor" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1775.191866][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.203064][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.214261][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.238590][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.324785][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.528293][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.739150][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.801828][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.815101][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.826699][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.884019][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.925769][ T29] audit: type=1400 audit(1737384311.087:1045): avc: denied { unlink } for pid=17751 comm="syz-executor" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 1775.962725][T22261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.017492][T22261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.070396][T22261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.094198][T22261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.110349][T22261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.135231][T22347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.171096][T11105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.228932][T11105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.435577][T11105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.474283][T11105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.582273][T22347] veth0_vlan: entered promiscuous mode [ 1777.590569][T22681] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4088'. [ 1777.627166][T22347] veth1_vlan: entered promiscuous mode [ 1777.676290][T22680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1777.707740][T11105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.732624][T11105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.911085][T11105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.961835][T11105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.997113][T22347] veth0_macvtap: entered promiscuous mode [ 1778.033887][T22347] veth1_macvtap: entered promiscuous mode [ 1778.089072][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.121748][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.162030][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.184009][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.234657][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.283198][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.311791][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.352166][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.391819][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.421230][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.461792][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.482884][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.501805][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.531119][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.552227][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.565259][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.576687][T22347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.589251][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.600089][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.610886][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.625334][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.635719][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.661752][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.682337][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.712864][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.731753][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.761918][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.781748][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.802352][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.832263][T22347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.851819][T22347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.867179][T22347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.920857][T22347] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.929966][T22347] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.948595][T22347] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.957719][T22347] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.085709][T11105] bridge_slave_1: left allmulticast mode [ 1779.119851][T11105] bridge_slave_1: left promiscuous mode [ 1779.149855][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.226559][T11105] bridge_slave_0: left allmulticast mode [ 1779.266372][T11105] bridge_slave_0: left promiscuous mode [ 1779.638694][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.202374][T22711] block nbd4: not configured, cannot reconfigure [ 1781.635478][T11105] bridge0 (unregistering): left promiscuous mode [ 1782.190996][T11105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.220477][T11105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.240319][T11105] bond0 (unregistering): Released all slaves [ 1783.151935][T11105] hsr_slave_0: left promiscuous mode [ 1783.181240][T11105] hsr_slave_1: left promiscuous mode [ 1783.242414][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1783.249919][T11105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1783.298806][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1783.314110][T11105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1783.389044][T11105] veth1_macvtap: left promiscuous mode [ 1783.401968][T11105] veth0_macvtap: left promiscuous mode [ 1783.407587][T11105] veth1_vlan: left promiscuous mode [ 1783.420487][T11105] veth0_vlan: left promiscuous mode [ 1783.553894][T22752] fuse: Bad value for 'user_id' [ 1783.562639][T22752] fuse: Bad value for 'user_id' [ 1786.006652][T11105] team0 (unregistering): Port device team_slave_1 removed [ 1786.138666][T11105] team0 (unregistering): Port device team_slave_0 removed [ 1789.877198][T11105] IPVS: stop unused estimator thread 0... [ 1790.656102][T11105] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.893274][T11105] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.070931][T11105] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.213427][T11105] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.640161][T11105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.838099][T11105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.849597][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.856122][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.957678][T11105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.050379][T11105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.247506][T11105] bridge_slave_1: left allmulticast mode [ 1792.263095][T11105] bridge_slave_1: left promiscuous mode [ 1792.268848][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.288154][T11105] bridge_slave_0: left allmulticast mode [ 1792.299656][T11105] bridge_slave_0: left promiscuous mode [ 1792.311297][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.351145][T11105] bridge_slave_1: left allmulticast mode [ 1792.357128][T11105] bridge_slave_1: left promiscuous mode [ 1792.380251][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.407721][T11105] bridge_slave_0: left allmulticast mode [ 1792.421769][T11105] bridge_slave_0: left promiscuous mode [ 1792.427560][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.552478][T22880] ebt_among: dst integrity fail: 200 [ 1793.563742][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1793.563757][ T29] audit: type=1326 audit(1737384328.717:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22879 comm="syz.6.4106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd4fb85d29 code=0x0 [ 1793.665968][T22881] xt_TCPMSS: Only works on TCP SYN packets [ 1793.734310][T11105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.764716][T11105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.788691][T11105] bond0 (unregistering): Released all slaves [ 1794.138068][T11105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.153930][T11105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.169599][T11105] bond0 (unregistering): Released all slaves [ 1794.332794][T11105] hsr_slave_0: left promiscuous mode [ 1794.344855][T11105] hsr_slave_1: left promiscuous mode [ 1794.368817][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.410630][T11105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.422138][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.429614][T11105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.489989][T11105] hsr_slave_0: left promiscuous mode [ 1794.523815][T11105] hsr_slave_1: left promiscuous mode [ 1794.529996][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.542434][T11105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.555158][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.572437][T11105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.613486][T11105] veth1_macvtap: left promiscuous mode [ 1794.619036][T11105] veth0_macvtap: left promiscuous mode [ 1794.624737][T11105] veth1_vlan: left promiscuous mode [ 1794.630049][T11105] veth0_vlan: left promiscuous mode [ 1794.636604][T11105] veth1_macvtap: left promiscuous mode [ 1794.643007][T11105] veth0_macvtap: left promiscuous mode [ 1794.648605][T11105] veth1_vlan: left promiscuous mode [ 1794.654616][T11105] veth0_vlan: left promiscuous mode [ 1795.450059][T22893] fuse: Bad value for 'user_id' [ 1795.455196][T22893] fuse: Bad value for 'user_id' [ 1795.947316][T11105] team0 (unregistering): Port device team_slave_1 removed [ 1796.032694][T11105] team0 (unregistering): Port device team_slave_0 removed [ 1798.377026][T11105] team0 (unregistering): Port device team_slave_1 removed [ 1798.472501][T11105] team0 (unregistering): Port device team_slave_0 removed SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=4087 state=3 status=67 (errno 32: Broken pipe) [ 1801.661763][ T29] audit: type=1400 audit(1737384336.807:1048): avc: denied { write } for pid=5800 comm="syz-executor" path="pipe:[4529]" dev="pipefs" ino=4529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1802.225016][T16606] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.352834][T16606] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.475031][T16606] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.579781][T16606] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.746231][T16606] bridge_slave_1: left allmulticast mode [ 1802.758090][T16606] bridge_slave_1: left promiscuous mode [ 1802.765312][T16606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.776363][T16606] bridge_slave_0: left allmulticast mode [ 1802.782439][T16606] bridge_slave_0: left promiscuous mode [ 1802.788149][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.371348][T16606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.381923][T16606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.395774][T16606] bond0 (unregistering): Released all slaves [ 1803.780407][T16606] hsr_slave_0: left promiscuous mode [ 1803.786751][T16606] hsr_slave_1: left promiscuous mode [ 1803.793285][T16606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1803.800681][T16606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1803.808775][T16606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1803.817007][T16606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.835122][T16606] veth1_macvtap: left promiscuous mode [ 1803.840681][T16606] veth0_macvtap: left promiscuous mode [ 1803.846503][T16606] veth1_vlan: left promiscuous mode [ 1803.851959][T16606] veth0_vlan: left promiscuous mode [ 1804.486643][T16606] team0 (unregistering): Port device team_slave_1 removed [ 1804.557392][T16606] team0 (unregistering): Port device team_slave_0 removed