last executing test programs: 4m51.800286786s ago: executing program 0 (id=484): setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060080"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m50.810913588s ago: executing program 0 (id=487): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB="a4a201f4939c383fd44e41d0aa4e999c5222be733acfb118ad2f306db817800869ea65c94b3292f6f55c6842073e50afc9100c8be1060fc7ffc73ab6a6af09acaaf16b0b5e20699ee46a57f0a0fe5b839373f041d6acd83b033d9c9bef50a57480f0cbe07601c956a89a651bec77bb19b239935167b45d2066ac2477a45ba793e13a88d8a0b8d170d026ad8ecf8ddc23a2254d323204d8a39bfec95c6abfd5d5450931e62eb1b7134c7e109c"], 0x40}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x4, 0xffff082d, 0x8001}, 0x10) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000500)='status\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x0, 0x0, @SEQ_NOTEON}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x502, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000980)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a394a20c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cb4ea2008ae8a61634a7044765b8f9831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d66311bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f499b6812850273d04ed44cea50d3e7019ada5b6342ea378df700fe826b1e918538f1d98a73503b6aff148de6c454d0de9080000007c9914d5518256122711aace4837695298e38d41a0a35472632144c53738b271d19671f962c8084319da96b0533dca42527e88942bef8c19a14cce1338828e4fc8b729b0503b182641db69f91d4d8d83a3636ba1e56564f43b71a0aaea82937ee5c84eb9af29a7a5158bbce2e3ba4026961cf15b47d0e42b9544dd0af0064818096ec48a6c7b26698919e8303daf8d06c5317f92fbd601deb5562247bd3b0a5cfb7c2192ea4ebe06d8d0f093e5e9d838cc5215963df8f315aaeb2e54547cbd651675ab4557c18c4fdcb0adff2a112efd8a30ade408351fb116299570eecf838733a81b45f646e4f1c4f97cd51392e664d4b44e7f9b8531f33c227993c1edeaed5315cc32cda5d643fa352a706cc9242405e5a807029f886b4240f3227e95635c5eedf11ce9615b60a25a8ca788c13b920f262b6745203fd244428fda8c88eb0b7b4457b93ec6b85b2074e8ad246ae1765cfa4835791465bb0b8dd13d0c10cbb45c64620c636fcef73738dfa121052c7d352a95ca06c33a785fabac39faf052b073f059e8a2d13c5063d5a1295799df4626b2e9b025559ae23ae419191be4d121ef471b53e5f70a8d40b7346db768c2663093ad410e45b40afc3470e2170e098ae214f17ba34477e5d752977fd5015d2e0b8cfbc503c6e5318be329603e4717e660bd9d33c72430a2878f283f1cdda0c9f08f3ea2f1ef6f983e7902c858f5cf670cad4b70002521f19bef11f685f5aa4a6913699ee34e194b290e7392b43d18ef57083742dbfee44dfe24e70000000000009fe18bd36a89ac88df5e79ec576649d17f3fd80dfb546e75bd21ffea75af9cf59398e7d6d66dee5fd624d9f502d627c46ae35295fa36b754ef1b13deb0653e177da828439b2140c9cea9d98b3a001071f98c5dd24adc150f0ffee9043c43d138071c4974bc72891f760d24b8a6619670d60224c84c97764b340167a79e87358c912c81b7d9337c2eeba2b700354d8bb4e942d7e8b35a3fc7df172b233ea425c1218b255fcfdabbc2e2429dc8ed0acbf395f976eb6d4fff19bc21d8ee450d4865f2b97435a6da8673aad6e60326399c45112128f0b0f548692e0ce7b2302d9bb921448968f33bccddc9436673425bc1bf1558c05f709e12fbd60e9da3e33aa21f04ec4078fbaffa779471ffba3f8d313078e5d8d1b85c4ea505b5710bd2bb3afe20fedb5e3eee9190ee50e3edd56202b2c1c5658dac1a68238a4790a31927db0c6c71e6f21d6579f8471299a9410dc32b089a92899ffcc39a5575319ac7cdee7e9d60d17e121c21579eea8b72f048be1690c05b102d1792fd0724318e9a1dbe90b80b7c382e07a2031d71da777352e399ef9d8ff086d16bb40d8cc4bc2cb382b54ab4499a232cbaeb7319121c76ee17161b092ef69cbae15dc90b9a36a834307edc451fcc864f8ae333d63cbdc066fc8f81459e6b40331b3ea7178d4e3d8d6a2ff3532f6da5bbf27cd91124f5bb00f3e00d9ce8cddfe6131f74491867d071664ebbda5c8645a12af625374de4bac99a60bd38b465a89e36899fd38ddd5a087ec06f1ad7c740519ac7a8cd0d67db3ac8e84990fe0080308a81a2e5d5d8981fcc151b5fa9b4c3f84377961cfbcdbc087ee444af4ce4d66b647a0a32cea0a6c969630c936dfc124c84a3f9cf618901109e6dbe756ecdd28091de799ed401218d3d43ae7897327e1b776922e1193465c1e128740aa1766fe65b921f314fbedcb16a614217e12b12c69b395def208e", 0x69f}], 0x1) 4m49.713782586s ago: executing program 0 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110440000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r6, &(0x7f0000001cc0)=[{&(0x7f0000000540)="b02e0bfcc6ba82d7313ecb648ddbe36ae352a1a602db795e6874ee61a03480ca0380abbf4d043a3f022349c518ce147b980786cf0daf992130e7ce394122abc5b0d66aa9a866c1674df8b65e6d28491165142b6dbfcbb8ac7d0b2f7ae0bf53022a968381cf06a94a0d524494edae51ce4f2c1842fb4a2f13f7aab5029c37b7fdeab4fbeb58d57aabc823ec641f03572d1539dd1c0a20bb15d0909709c5525743fa710a6cc0b61eb8d5492a5dbab6db087569980ff3c82fa64753dabe51d562b58ebc038704d1f0f764b5ace6895b22ac7736421e2b2f", 0xd6}, {&(0x7f0000000700)="35f917bbf51577e31d87b2435e084d8ae6fd4bd2286b1bf9917684f834083843ba8f65f2dbf2e69e9d97c636f9eaa7d2566b3aa0b029bf5ff503742f729d41d002d8882aafef05ffb73aab989800451eaa1f671daa5654ada6cd36e27e31e145ea95827ba634816834dc9f93c68c2d6d4c7c5eaa12754b91f1d4980b0693dd277c9a8355e75e6bf889a08dc091f5e70f46c3990a29440acf5d121a8065680ac72a0051689418365396bbf37a8b5ca7d4a5", 0xb1}, {&(0x7f00000007c0)="7dd0c6ddf7de5364fcb17c6d88ca855d24a6c61e3d68027e46d1be44221b26f1b3a8a9e3aecd414231235d3a04e4d14fdad0925b85283ee2fa6ee2ce09755f7b1af595ac5dc8f4b8a06fa9ec8ba07473dd1f8a8d198765371007e837b91b8616217f9b9dac651bc5bdebd354ad407e0fe05245a4679ac89989725bf141aace1a6a90aa42b1172a238345b9e3864d2cf12090dcf00870fd8eb9083294aa4cddbe4145f04fb4e32c79ac7dfce1b3ba55b98bc0e60f64c677e6ad2c39c07eb223238e4fe3090928b5a060c7abc026d5133bfbe926799cee9a538ddec41cf3e1275e385242bd992fa2693aef5e", 0xeb}, {&(0x7f0000000a80)="63cd8af4478a7b1c5f1fbba46a2d11f0181f7d0fb13ed966c9a314ad8c8ea3df904e9743819d48a087ba2664fe7523e637aea6350bdb4aaa28cd37f34ec9739dfce644b6d33f66309d47ec7c30b07e98d280a1a81fbe73c72388120e668d830c12973218df4aa74821c9324c37cdd9efc077ca0a35c36b369286f226d879cec3e0d96d64790da81825d1e476c11c7f0afa35ebe8c8ae3d768e90c92fb9aecbfffca37c201f664539", 0xa8}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="cf624f66ca05a0dd63ace2f5f0d43d96c0d60c47981065a8a9f8a30b68e99fa0efb57afd80c6382d615877887952af0ee5f5041953aa853fb7116d053ebee7155ba5bc98367f165984b5ff3423a3dfa688074f053d4e353626797e1238ba00d95c41dd77c0dea98b7a64d6b35cf0f653339f6f8e60a396172804bc6252730eb5ebf2884b9803", 0x86}, {&(0x7f0000000100)="74034fa151ed10d4278f739669b2de6245eaec14851b319e61e58e4c81e0c6db5f2cd8b574023830f9be85835390fc0fb94a8b92212a12ae", 0x38}], 0x7, 0x80, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 4m49.196903525s ago: executing program 0 (id=495): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071101d0000000000950000000000efff"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m46.764098759s ago: executing program 0 (id=503): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9bf8628813aeb47bd522b643b92ab511f9b666392ee7ffade814bf1261ad71ec57c026f736fcb9fe29aa6c7d928eb29568"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x40, 0x80000100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4m46.448703531s ago: executing program 0 (id=505): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r7, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) 4m45.78352126s ago: executing program 32 (id=505): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r7, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) 3m9.27222326s ago: executing program 3 (id=835): syz_open_dev$dri(0x0, 0x1, 0x400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x3}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r6 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x141002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0045543, &(0x7f0000000080)) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0x71d, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x1000, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x8, 0x800003, 0x600, 0x80, 0xaf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x127, 0x4, 0x1, 0x542, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0xfffd, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r7) mknod$loop(0x0, 0xfff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[0x0]}) 3m7.529136332s ago: executing program 3 (id=841): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000010000009500000000000000f4c884d99e61aef4fc1ffa0c9bb098d6b8c19da3c9ad5a079ebb921bc32480e429506eaffa44d359d0bfdfe43249c3599333ddb6ad7536d5c048a1fc4386cf96e45b88c7c21a4b2d8ef99a9561840081283f86232e42e93300eba345bd40c0d6e1a1e10a2afed20f260f200a6d2a4f9d734363ad5dc47790a584344f910201d850d6c534d9a2887c0a7d9a5e775c3f4e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) 3m4.191586034s ago: executing program 3 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x24, 0xd7, 0x0, 0x10, 0x40d, 0x3801, 0x91d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x86, 0x20, 0x2, [{{0x9, 0x4, 0xa3, 0xc, 0x0, 0xb7, 0xa7, 0xe9, 0x1}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x80) 3m1.377081284s ago: executing program 3 (id=860): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(0x0, 0x3) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2m58.360731503s ago: executing program 3 (id=872): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0xb001, 0xff03, 0x3d0, 0xe8, 0xe8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="f170c2aa2cf8", @empty, @multicast1, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffb, 0x7fffffff, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4f) 2m57.81820127s ago: executing program 3 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40045) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c4}, 0x41) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'sit0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2008055}, 0x20000001) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0x3}, {0x5, 0x4}, {0x8, 0x4}, {0x6, 0x3}], "18dfd7940cd0be94"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x4}, {0x40, 0x6}, {0x5, 0x1}, {0x4, 0x2}, {0xe1}, {0x8}], "782c937006114f4a"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x80400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000740)={0x40000000}) (async) r5 = landlock_create_ruleset(&(0x7f0000000780)={0x8004, 0x2, 0x2}, 0x18, 0x1) close_range(r0, r5, 0x0) r6 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x1, &(0x7f00000007c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044001}, 0x4001) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000940)={0x0, 0x4}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000009c0)={r8, @in={{0x2, 0x4e24, @remote}}, 0x8, 0x8, 0xb886, 0x0, 0x41, 0x8, 0x7}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000a80)={r8, 0x51b, 0x20, 0xd0d1, 0x3632}, &(0x7f0000000ac0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000b00)={r9, 0x1}, 0x8) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/6, 0x6, 0x1, &(0x7f0000000b80)=""/144, 0x90}, &(0x7f0000000c80)=0x40) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x101}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffff}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffff00}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) fcntl$notify(r0, 0x402, 0x6) 2m57.203737504s ago: executing program 33 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40045) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c4}, 0x41) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'sit0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2008055}, 0x20000001) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0x3}, {0x5, 0x4}, {0x8, 0x4}, {0x6, 0x3}], "18dfd7940cd0be94"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x4}, {0x40, 0x6}, {0x5, 0x1}, {0x4, 0x2}, {0xe1}, {0x8}], "782c937006114f4a"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x80400) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000740)={0x40000000}) (async) r5 = landlock_create_ruleset(&(0x7f0000000780)={0x8004, 0x2, 0x2}, 0x18, 0x1) close_range(r0, r5, 0x0) r6 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x1, &(0x7f00000007c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044001}, 0x4001) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000940)={0x0, 0x4}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000009c0)={r8, @in={{0x2, 0x4e24, @remote}}, 0x8, 0x8, 0xb886, 0x0, 0x41, 0x8, 0x7}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000a80)={r8, 0x51b, 0x20, 0xd0d1, 0x3632}, &(0x7f0000000ac0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000b00)={r9, 0x1}, 0x8) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/6, 0x6, 0x1, &(0x7f0000000b80)=""/144, 0x90}, &(0x7f0000000c80)=0x40) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x101}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffff}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffff00}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) fcntl$notify(r0, 0x402, 0x6) 1m47.886922127s ago: executing program 5 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r3, &(0x7f0000006740), 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xffffff80, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1m46.047655046s ago: executing program 5 (id=1194): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000"}}}}}}, 0x0) 1m45.894655868s ago: executing program 5 (id=1197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x58, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x74, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mincore(&(0x7f0000098000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/233) (async) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000480)={0xc, 0x10, {0x55, 0x5, 0x1ff, {0xd, 0x7fff}, {0x3, 0x8000}, @cond=[{0x200, 0xfffa, 0x7f, 0x3, 0x0, 0x5}, {0x7, 0xfffa, 0x6, 0x40, 0x6, 0x8}]}, {0x52, 0xeb, 0x0, {0x650, 0x4}, {0x8, 0x8809}, @period={0x5d, 0xa5, 0x5, 0x6ae9, 0x800, {0x6, 0x0, 0xa, 0x9}, 0x8, &(0x7f0000000340)=[0x81, 0x8, 0x6, 0x3d, 0x4, 0x2, 0x5, 0x9]}}}) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) (async) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, 0x0, 0x88) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r7, 0x7}, 0x8) 1m45.850368067s ago: executing program 5 (id=1199): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x6, 0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000640)='io_uring_complete\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x4002ce}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000240)=@ethtool_gfeatures={0x51}}) 1m45.562370371s ago: executing program 5 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x300}, 0x80) 1m45.539638643s ago: executing program 5 (id=1202): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m32.512965926s ago: executing program 4 (id=1264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724", 0xa9}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa313012}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xffffff80, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) socket$nl_route(0x10, 0x3, 0x0) 1m31.296930398s ago: executing program 4 (id=1268): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, 0x1d92, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7831, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001d00b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r5}) io_uring_enter(r7, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x181000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) 1m30.719105125s ago: executing program 1 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1m30.631856902s ago: executing program 1 (id=1271): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m30.25605102s ago: executing program 34 (id=1202): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m30.208397521s ago: executing program 1 (id=1274): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x6]}, 0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=interave:7-N:0/N']) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) signalfd4(r2, &(0x7f0000000180), 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0x1000, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) 1m30.118971271s ago: executing program 6 (id=1275): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x218, 0x3, 0xff, 0x4}}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getpgrp(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000740)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4}) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000001c0), 0x3000443, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {}]}) fcntl$dupfd(r4, 0x406, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x3, 0x0, &(0x7f0000000300)) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x4040844) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m28.386156459s ago: executing program 6 (id=1277): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000840)={0x6, {{0xa, 0x4e23, 0xc5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2000009}}, {{0xa, 0x4e21, 0xb0d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x1}, 0x1c) socket(0x10, 0x3, 0x3ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m28.049712907s ago: executing program 4 (id=1279): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002004e2300000000000000000000000008001200000000000000000000000000302000000000000000000000000000000a000000000000000000000000000000fe800000000000000000000000000000030005000000000002"], 0x80}}, 0x2) 1m27.829299737s ago: executing program 1 (id=1280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r1}, 0x18) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r2, r3) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=interave:7-N:0/6', @ANYRESDEC]) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x1000}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000180)=""/103, 0x32, 0x67, 0x0, 0xfffffff9, 0x1cfcb317365efc5c}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000800)={@private1, 0x0}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', r9, 0x29, 0x2, 0x6b, 0xc, 0x11, @private2, @mcast1, 0x40, 0x700, 0x80, 0x9}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000680)={r10, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x26, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7b7d, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x2, 0xd, 0x2, 0x4, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x97}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x28000}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x200, 0xba, &(0x7f0000000380)=""/186, 0x41100, 0x6, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x4, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000640)=[r5, r6, r7], &(0x7f0000000680)=[{0x0, 0x3, 0x7, 0x5}, {0x1, 0x1, 0xe, 0x3}, {0x4, 0x2, 0x4, 0x1}, {0x3, 0x1, 0x4, 0x1}, {0x5, 0x3, 0x1, 0x7}, {0x3, 0x2, 0x6, 0x6}, {0x5, 0x4, 0xc}, {0x4, 0x4, 0xc, 0x9}, {0x0, 0x3, 0x10, 0x8}, {0x5, 0x1, 0x6, 0x4}], 0x10, 0x6}, 0x94) 1m27.803332418s ago: executing program 4 (id=1281): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000020000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 1m27.749908784s ago: executing program 6 (id=1282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd, @fd={0x66642a85, 0x0, r0, 0x0, 0x1000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m27.684678682s ago: executing program 4 (id=1283): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0x121}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001f00)={0x0, 0xae, "43a72a8951216214c9663b1d1ee4b871bb0ade6301533a954310a6f620133082a58086445fb3f40a90cf13de6c83ebc06767b509df68784bcb93f3819e2e1886bcfaf155384402638f39aea2dd916dbdd689db072acbab0e2ed7ffea405138970c62b3903e63e31d3e3973822efd5a2aa5687238b779be71899a688919ffd8508436d940aa6108a8e17bccb61c13911b2c8c2558aa9a2f3ad86102df9ff21895f8b0542a89df92df2093634bde85"}, &(0x7f0000001fc0)=0xb6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r11, 0x0, 0x2}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000002280)={0x0, 0x5}, &(0x7f00000022c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002400)={0x0, 0x8, 0x64, 0x4141, 0x3, 0x2}, &(0x7f0000002440)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002480)={0x0, 0xa6, "e46c4494629df296da1790267f3bf6f3a7c1de89c56685cdd592ccbd85f43fc2eecc5e8103c7afdaa8e953a176ec5f69677e5fdd78c63d6088f827fbba0c00cb64ee8312ada8bb2907d40ec395bc3258a21fa2b8d8462169e3a249b6753fd31bfabcc2b11eff24da26671a36fc4d1833df0252be426bb9e1e8ba6ed1f021233877e2a3d75cd04e10633ded5144802d43e4a92ac9ea0d5a25fa69b06c13296827a81b8a250aaf"}, &(0x7f0000002540)=0xae) sendmmsg$inet_sctp(r8, &(0x7f0000003c40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xff, @private0, 0x5}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000000c0)="4020823b68f25d56393d11e76c3fb4f9286de335", 0x14}, {&(0x7f0000000380)="c88d0f71e91f436454322af7dbc54a6a50a839ff85d7194200c2a7265de38c63a499e0a6ceceeabff01473989cc1f2730ea5ee23892c8a9b167b63e239479dc4e6a5cc7fc25dd5717d735d5f9435839d3bdafb1883c6f1e48042a79caeceb72faad6049fdd77b7c0e48523f558b27036007da3940fb69b70e26fd15438e09898b6a9b0ad094191a407eb3d2a44e994ac10ce2d479280ee10af203a98628616588e52e6cc33ccac7306905ef9af25e7ace02e056cea08fc45e4a2290a708ff82118ae3494dbb15116326e2d7ddf49d737435570c55c3b925b7189f93d749b40f70fb2a5aa7e79ecd5fee42e95e66008ae69f12b2f8689015f2b", 0xf9}, {&(0x7f0000000480)="de9ac5f5d1f59e139a388b55dc544c3e4a348c9a175443d85aaf8230116abb7b7daa5c9a918d17ebbbfe82fceab5bf0ec740f152c01d683807ea29048c4553765b217601035270838f5b1e2346cdb9472eb3a3fb64eabdb88e8ca79eea605934a0766b31f34eb38b59f219d0813da2d048452d665216c1829f1ded8fcc3864ac79c3e39ad46fe0ee", 0x88}, {&(0x7f0000000540)="0a48b03c429d04559e4868bddf108e7188bce6902de74f6e8b477ba6fa67ecd2f901aa2bd42fe864777568f8101f372a1cc708690df5f8fc44b9fcfa583e8eac6ab76b7ccee5502ebecf36512acce173b75546079e49e70c036accf616b63ca3b85766c4be0f00700e0d5b1f22deb27c75a11cd40a52c3073686b5de8b021d633b6b4216b3593b4fc3ac8c45601477a7c6924abf9308", 0x96}, {&(0x7f0000000600)="5f57e30f764e47b54cf31d8cf5b3f57e51d51080d49d080c0fff8b0a638d144b2c5150713d00a33e44adc78fde4d7fcd3b416357f0cf10174bb3b0efdae2ad6c88745ca6d8d2f0fcd1145834f9ebe0bbd92c4d386372341a932863ffb4d5a8d2ff33bd8f518adcdda440d1006d6b37f23fc293691bd3ecac85ac92768a3bc93b4315e7803de6ffeefb1a4625636aecaa6543932ac059d1533ca847daa2e6170f4e7907d588d7f70fa2ebfdc2bf662efcc15c900a0edafe8fd988c0b4af7ee8e56780e35a6c5d857ba393714b87dd931cd297138897a5", 0xd6}, {&(0x7f0000000700)="92ff27442559ff61f32753ef8a258306001584303a6fe7658c21c894ff6247de954c8642515d6872e1202011668ed935bfc79fdde06c072bcf1c404a08aab93e4531922735aa0431f7808efac07307f13d95726a6b3c7e3d5880d7fa3f60cf250935a629a44250c3da54fe907b24ed6b98f1fb23677dc4c0cb4db7555a0302678c8fd6df55867249f0180836e56f1ecf52372a40a62768ef686cc47a7b8e6922f8b62c22e46d3a44af4522c539f7327a3ff3c1292d362d2600ce750ce584e94f554ee79bce9be0f819cfed1cda2a5391de79901fcf4c6a26", 0xd8}, {&(0x7f0000000800)="f37566c44806987685a200026ba14bd95aa5e4463f16cb5eb9041c314d2560f4e9dde5426233c1589af569db9779927b74699e4dfd04662e0fa99dcf675904468a1aa7ec8b6f0e0b7c2c7e28e460e5605741691ab35a6331d6710f2d9ec30cec02841de4203c5e1187e9e4d6d321e6d37dedc00120030341939744b85f511a5e4177361523c547e73572a2c2331be483f45d7acc113cbd8ee17867efdc083a68763742b6372b", 0xa6}, {&(0x7f00000001c0)="e73ddc1ba3dac4069d104ff685188489d5d4d8485971eca63ff27e1e5b5c9ab854f254ba3fd9aac51eb9d217ea879579", 0x30}, {&(0x7f00000008c0)="7ca80736f2d65042e52a2fcda4d699bea282a6a747fce155fea78947d37c8a750c4651325f51f4bd7cf4de2e65c8a24c9ee39f4d31d0520a05190606e2bc953fc5fe0b66ad46526af3d28c5599823f5f4734a59edae8cce05da85824c3879fce1e2ba352d446bddaf644de081527b8eb486e2e8c1d822949d88932cd71ab284085746af43a56d043a3730f13afbf5677ae821d784a88ffc0779187e5ee1b05b66ee6a97d78c9409993", 0xa9}], 0x9, &(0x7f0000000300)=[@init={0x18, 0x84, 0x0, {0x5, 0x9, 0xfffc, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0xfffc}}], 0x30}, {&(0x7f0000000a40)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="128dda64bb10f0302ec35a105fb538fba24adfce531966658bd4b68d029e5c6d692c0141f954f0ba878467914125162b007c528b6724c0a3df329c8e6ab447ba4c8fb167fcc43921fa59b7729397178f1b05fb424b3fb0be2ca570d19fa6d0c44c5e4556595fd4c95cb02c2e701a8f2ef578a380fd8d83210d1a638b03685fe340155d9ce8df2f544bf7a4f742122f8cc73d131dc2d95ed96a4256a8a798b4f6a831497cb65a84c67086147c42281340c3169dae6fbecdeedc967ab16f", 0xbd}, {&(0x7f0000001b40)="d691270d206035895c6ea13355d4532f8558389eb7af547883cc318fcd2d6598b174de520acdf9a4c9114b2bb22f92dce877c6a9b18582835c2f93", 0x3b}], 0x3, &(0x7f0000001bc0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0xf}}, @sndrcv={0x30, 0x84, 0x1, {0xa, 0x1, 0x4, 0x4, 0xff5, 0x2, 0x5, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x10}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xdeee}}], 0x90, 0x20000010}, {&(0x7f0000001c80)=@in6={0xa, 0x4e24, 0x4, @local, 0x8001}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)="f6543ddbe7d6391e4b28ce6a0b46440fda0a69454f852c1d2b0c780ca36c1f324e94d1eeb6e237a5482748c3c1a865ed52ce2c5c8310e9212fc089dda868a41162a69be3c81efeb6534f18a230b481b8759e7efb02e704add6559e9f64a806a162134d72137eda608d9fbf5397dc9808ed25f6636e7d98839a4af564b194a4d30a71258e40a56352276b74761fb5976ee2266023c93f236c81a0f1000cc3e4157a79b9072d47d643de7f857040a6af83a3d2261d220b3d3b", 0xb8}, {&(0x7f0000001d80)="ef20d7c293735d48018b8ec364537a1662c6bfd03b4f2b54106a23b9e13239d6ac938b83d914778dceb913cec97c5568f65f2aef05eb62281d200234a02942f3e2b08d4fff0d3604640b3a9e34bcd1c4d3cf28fc25cf2254b92e723e5edfee0701069ab0f9569556f9f6b782f1574c07d1c416ffb64addb0d7eaf82e76560753ed3493480bbe171a8aa1d96949f6f81c3909d7d8bfa1909c1487491b8c3a745d3206bcb8e91759df93599ecfe4dc2ba196445ceb19d0efda8a863141b4be660a02a9408431bde3ce28adea33f30761ba7b792dd7cde74a343c2cef15221f15480af0d025ca0b1dfdf14bd65f", 0xec}, {&(0x7f0000001e80)="fc5fa14018b868a9ff12", 0xa}], 0x3, &(0x7f0000002000)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @sndinfo={0x20, 0x84, 0x2, {0x800, 0x820a, 0xfa, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x911, 0x6, 0xfffffff8, 0x0, 0xb06, 0x94dc, 0x8, r9}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @init={0x18, 0x84, 0x0, {0x8, 0x9, 0x3, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0xfff9, 0x8001, 0x2, 0xff, r11}}], 0xd8, 0x4}, {&(0x7f0000002100)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002140)="6c455cd888309441c8644c1b4a44958be5a8adbce66ce9d349cd57dd762ebee9db9d8dffcf196172a6b7768df916c1776368da654b1eb0f7623170c24aa978e5afebae64f089809e940fd1637368a9a9e15c47bf9bffd090aa87a67c2657020ded3d17986a5eb965577d52baf4362f824a659c59f7028c108cd02bb2a6284097c9452c0d34e1270dffc77f3b3f9033124bf54ebd15dea78b7ebb8eba951c1bf9ef025dee7b091b1d66db84099114714849800f8006f3b835e2e474f27cdbc81ad021fb36c128408a2df9e30e91bb3ef7d1abb959e19911a33ca3cab17371c9", 0xdf}], 0x1, &(0x7f0000002300)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x33}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x820e, 0xffff, 0x6, r12}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18, 0x84, 0x6, {0x80}}], 0x68, 0x4040804}, {&(0x7f0000002380)=@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f00000023c0), 0x0, &(0x7f0000002580)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x8001, 0x7, r13}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x4, 0x0, 0x7fffffff, 0x0, 0x5, 0x3, 0x4}}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x1, 0x4, 0x93, r14}}], 0xa0, 0x40014}, {&(0x7f0000002640)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000003b40)=[{&(0x7f0000002680)="fede02081537167ada3f033747e3ed98268f5c4fb6350a5377c2e5f51d43011a5c4acf132dea9aa8fbe080071d0692f957abe93330da9fef710e50dedafc28aa80247e56c938a0aa3c650d574c78742934622206a766198ada49eb0f6517ecbed3d26ec15a1f4342b92f0186584b324e22dc21e1457984d35d7f03438b9839e5e8f2a9bb85b7724470a3aff15b9e5ba23efa1fe8b82283b790342c96e03178e2e83bfad94be1d3f00348b73cf053d3f29e9d3f2ba66cdc8e2c9b37c5c9344db11dbd2b07e065ab220635ad4ff28ae50b463882d80850109dc7", 0xd9}, {&(0x7f0000002780)="9085dd9523e951adf72c", 0xa}, {&(0x7f00000027c0)="bce5065ade06dfdf288496bafe9d0493a9205a17639078be3991b00c20ab844f8da742d13fed4b4a5abd734a9657202beda562a128c0563ae93bde133f4d26c66b4fbe20ad64884ed9fd30028e32f501d92d3fee5f7c21ac00eefde15a31d17961d356988bec07e609fe75dd100094b925f0dc663c1385caf55ec2f4e0e4ec6e7278b4066456d0b262f7c74891d3d942b1cc0125996efb53e1197ea46cd0c20340233e43f58f306a5bad4fa0f2fc06a70e9646cb732e822179f1139079010c7cf6b9fa6c73fe3668dc7abcc7183f54f3cbf891e5daa674688bfda99225ccb907f2d9984dc15c496c29bef76bcfe8bdcfaff1d756c699a9a0026bda7a27f3c8750d5f00ed33cf940b62bc6ca7b3ef217dece0c02dc2f83ddb2c40b776bc515c46fe620243d1d16168e05dc927eec482e11fdcb7a60f2d3f8fca880057f3c1210b3848ca5d0ad92c69645263872eca733176777501a9f6ea66ffa86b86281ffd9abf54d3f5d82d023d2fd3e4b7b8c41fce497ea5903365ebe5e81213adf48adbd4bd5c38c053d53a14274515f8fe335bae546895f8087fb31a817524b1e33aceb9c3b8e907b793c6a63d144a58435b41d1541efe3a6b9f1055e9b27788419c386cb565e2be3f9c62e4447f9979a903dc5668061f115831d108d69ed5dc0b5af984f55150dd1728c951896c422217f829380a35653187a6453b15e544aedd1358617fa04c75b269d7a4c0ea23fdfdde83fda2a440326615b7d0063b084e7ba4f36a3529d11301b496da1a57e624534b7df87dc32b379183ee1f94e83d2ed311cbb88f6ece428c1b737711a290516891895fa342d8503ba0fc15bb12498ff78db72f167dd1530888d512ea96626a242db2a7ba1a6c378550ec3ccedfe005633c13ac768c50e47d7eaf45a35c5caa0415b5c97a20fe6181a90f23500658544625fac6fe1288425c90ce8d18b278b3e4d83ba8e602a74883d940c6953bf6a48915d4a3a4aab68a27728519535f908789d6555d5c91cb1fd1c56758430773795e95724fce1c0d846828e333009ee666afe49daa50f676ea4c137cab6a0811aef3dafc6a5c48785ac0b711a1e9658536aae4ba67f7c66cbfa4348a5095d47a9cff0a5b7ab79d10b4309c7e934bc203218ed097be62c70eabba751d22d7c3ea0bf00c526fd11611ed93daf018dd8b530d1690e17aa966c594db35bc75e2ec1cb844310797bea4300b1fd0ac5fd228bafd7f180aa310d7aa934b45630152a10d1fbb8073b00abd5d3d08e6b9cd999707cec9e51e33892e325f12bc0d79cda4b4506c2520ee11447d083aad137476b38d871eb956703e7414313946f7cd358339a1d2e272fbfdbaf77f768617709a7af2ae69a8e31e21493aeaef12586e2c670c841264aa13ba95521ff40bd98f9d58ff71adb944c6b7641415041c4265a92550caa17e9d606239fd2e7e12b9b9bfb460540934ab50895a83e4fad00dfa5460eec7d3e3506fccd985ac5c0719cfcf2e4e24a0dc60c381d6ae68e602a55431209f0e7c87548c10b3a426d384c7a68f1ae602041a455ca536479893d91605fe213a31206ff2611af6dc77fdb2d97c6005ea1a96c82eaa3bffd69621d6a0b29bdb7635a2728340cce2ebab48e2207e5939c6606a3879f17436f4eec1f7064eb5d7c6dae0949eada15770be7b85331f1c5ef51de1f584c430ea94b9a837c3ce86bf438414d5e96dee10c71cba0e58e16398ed5dce85892d1569f17dd063c2e6507a7f55eb7d555aaa712eb8699e57fccb89121199c72e2433b8f6d3c8042f2a95f5ad4596a78042d83fa671a6d2a95a1722d834a2dc26846209828108bed84ff4b559ea69ded74ffa3fe4aa5780ea6059e4e8779d2941ad0198f95671c45f5dd642a7acb9122b2fe08e5b1791ca35a5f318864ef31931a483879ef139502f31aea0c8d9dc0084a1a51d900750a47bff6b8458e515dbd6e92787b580ac88036e51dba2e924f243e5474bb407339f6aec759efd05053930e507db8da5216505f8424345b66cbda84a07852387c8b110e3da09e4dd6bc20f471366ec4cf337fb160b39163a4ee88c436861f6b48a559696f640bdc29d1f79f94498a413621e10ab8370b7a8de423594ea73a7fa6489305c7e5849493b09b0df88dcd14074761825a07fda7e36bab63f69b1c13181dc79a5dd227dccffed18bfb6ec71dfb89d9fdede50c4ab1615d7243e5a89f9081f2f72c9e764c2924dfdf999352ad4bcafee16c86569fadc473cfb4254b7ee624b53fdb5d6b45565fdd8e393f4a45f33d42fdfca43e227cc917994dd81b51c03f309efe60ff5d20e88510efc28028ad85d9ecf60594b2bc8654ba3c3ac331288c658d29d9f0042c585b5c4bcf5b49a09d8f49c0c15ad798c59c64099ac02612ae80c941228464ad1b11a4d804f1db761dfb60e05143b054c5e232a3eefdeeaffcdb45c1bf553ad027d92c7433ff7178a2b0831726d755f34205f46db2f44ecf6829c69e549d022e15733aacade6168f16ad7e633443329ded9b65236f99b4cc5a8963484969dbb73bb7fe72afe6a6a6945aaff6520a691a2e85a06cf7e092cee117f0376cbae9230a043ed8d2fd8595ccb057fed483d4f3fe8a7a86bc7ed937214acbaa0da7603c20a6c6fb3392880f39275e9f3621c4bfce640b1233a664a32dd2e4602a3778504f316dc9d6003bedbdc43fea540f95eb1e6d74b4ee0d3590ac2bef8b348d0e85409124d3bbc03a4d6e7232e14454bb955f1b49552170d45643f7ee7b49363a192befd4ac7379d3cb1591abb34da02224a5653bf6b11576e5bdcde21925df950e123474bb1f3708b73023c0538bedf789f4663da13f7462ab7f5177dd06f727a996505662169d56552fb7bdead2a003ddf89a13b2fee662a1a024eb2f018219eebed21cab823458f84c1bfa16d9bd0eba400ffe74820b2f5bfffdba14022e243b01be19f9f74926b4afebc03732e748cd466352e60352a3ce38d2783d736927859f0c730853c08620a8a3a4c397a59adbe784ad620746aaa5c6c37530b702e1b3815a5f79e941a1ee8d2bc0d96c64e8e9bdc18543627590bdd0b4e0ce609038cacaedf718178b58f09f9d9865d1d42ac30900455a2f3ab66ef2ae5d905c99ab0b72ed4488af677401a931e492a97bb30320c52dbcb7d54a030bb4901ca29ad10aa9b644fe86d9b2fcbfaac3e7bde89c2b62dc60af8e406f851cbd5d9a43800a4fd550a1fd0c8925003ac9123927ee8ffd460a59f1224caff4e5e908d07f374d1eef9d7228a4da5c809d01153c62b1e6efd0f175fb9970e455c381dda97c149d36937c843263f383d20c7314d0eb68216641061bdcee46089eee767a24c445055e40810ff0cc29d1ba7bb745bc80a6070520f42fe292089ce0ba0bebfe2d636cd693d5f74d48bded3ef076c9d73b201d003931b7476a7c0092f68d533d844597f2fdecaa5840e81b6d6e38a3c552359437554564a396f0b27a4b5b37961d42005b79d00b88ecb739ef86514d83b22149796f8dff783f041a91e48d921eca21cbf2448e8f03bce3b2f7c73baee41c4885ef682e7b230bbc6a6f189f35f874bc6ddccc97b02c7fc89dde075faea1feff25696b2eb5c37dd0ef690819446b6f6207bbed1aa6dd6b0607c59691ac4680916bf2841b84233e1bb01a4e8f2a3b1c07cff91445bc9532a238148993d55997639e919cc12db3b6d69f033374502bc81311b7c6a778326a34ab38469c514cc4d8130df864340ed73edb71ef56d6473e9a94c5d73dafb226faf0d8fca422c5ab3c2dbcd6924a79487819ed3caa8acbf56f6b2ece532bbe808130b07ec6b49614dd12ee5640c2adaae4b6443fd666272e89bb2333d84db8741d116b1df01edf4bb81de7d0173212df875d00a30b820496a3d4cac3cef7d8c9e0f2a7bda5670e73b31b79c3c9d1e1795da193acb80a0f74551350dd6f3692ae54acfa0cb10517dcaf8f66ed01e1ef672627908c54e00b3b9a0a9846afa7553ae1e2889aecabfdd7127528711ad76eb2b509137a26ae5ee161ac05b8c91a0afcf1187fc50276d813b82322d584f53ae5922744d1d73e18e9a1a363e23ece2a4cdbe6d9cc45bd881a581057b22098aa8f1a3981214f7cd08411f7029b7a8ce8d933bf7882f4934909157a65b75d3949330b40c45ada5d9eda4872c1396ac4be6cdc4a1650518b663416d5ac34ea3019f499101f26f8fb88db2a3b536f66419ed78caf220b7592e6dd258edc2753baefc1110dcb6709ee4c42b88eb1bdc7647ac0ccc64d777cd2cd24a3b41dfc7b065254da73f92500d2eb540bb619666e2222d984bb0fcc508d6c35188c68964212dd8360cef85534572259dcfaf936f89ade96a115bdf1c9e8a22c75037a164627e6694573c7163cfb761fa314c9b6f01e844275bcd04f190aca977741043433ec15c75760211efb0aeb948184efca85b1750373702ea470792d180f0b1e9298023bfb2c34eee300b12cea12040d7258fe03a086dfc022cd960d61e0147b2e2f9dbb04994e0df7bd3faf40c91e8ebb63e26beb6b1fda583033e4f268da0f92572e8b950bdf7d9aa08d438945de9c43ad1c9a4eafd166bb8845b050fe2823b7a36528cda30e8e78e1ccd18161eb6619c715d1dac1e9fa7f99cf8978706565440840bcf2daaa02f7f238d82c9fd28261283996e3858ae2cfe9a6e7b876ea1c6a291bdd078fd8eae63277abe5e03bb040e40a96ea94cbece8741392da77b4db10790b7a65e3a1c8c973ce7f46013fc7390e1ee1c75bfd316c7d4b7f393b2cd89398e197d1e409699859288f1fbac82e737ac69a7a64516ce21402d78b23f871f1ac6518ab2b13fc83848ba4c7129751be49fd3d2ddda4dfdb9efe983f6f4a851849c7b0b8b9aa59f6c11c876f0df5cd34383a8abc1d0903106e95536773fbe413b0aed80e02afe1a186591d86a5dcbc4e50716b577bd59bc3482897ab999d80bcec479bb48830f2b63858c9d257f0b39e448c4e5c8d1b91731c2ac5f6fbd7a2c3430048dd2b8644d4cd28a9c1eb319ec018b6bd894cf10a5473687cfef24c176c91323e3ff3a4b1ebbb628211e3da4972bbc7e369b6b1e460792954d164cc5313fbc3cba7e86032f6c6b0564b692972a274f3cc372c3119359c30f3230a1f3c424f6073cc3b5512423f58af7aef448336b5bbbb2c9cf3c5ba15b55d979c236e7096484a0b496cb6a139465cb4862d2f6a9c8afbc9b0e905b66c26a829ca8cbd97e6205682a1a4bb1cd7151e3b5429017536ce0a266599f973019bb3feb01229f1205df1e21c4e17fe2b4a39d4fc63b679c525a24b7e3154622ab3611c91b46f54409c7c879c6ac8ac746512a9af971fe9baefe822945853b05c45cab9e6c31ed33c0f90d7aa9b134eb2cb7b8f058a9306a5beeba3fcf5ee8508a21b02abfac3f5fe945bc958ba8bbad1c6e1b2cd8e9fb4893b80de016a603a317bc3703a1791fce7d4959668453ac62d4aaac6bcdad61a29dd9e8d91e2dfdcc65038d6b0de7d7ae321e6a6e13f391b7e745d83058c80648bd643f9572e150be927112664fbbebc5282c34b0587da0831c1ab4dd35c64427b2d32eed726452ab4dc20d469513d986616e0ef6b79a28974db7ca96991b5cbb6c7e7b27fd3012868464e49682cbc9a56deaffe3fdf32429b90bb6eb6ee95a4b7cac8664389203bf102d55dcd6e6562deedc0dd6f6ac4d8eddf7a73b3e372b9418dca4a2c7c3657ab1ca481f424bf59a16ba891dcfe4f24dcd3a4c8afa407571db6bbade0adbb71d40622ff7af9ae43b57db", 0x1000}, {&(0x7f00000037c0)="ea774de1638c0ef5849246759ebd7aef48dd3e379628b505e4b7bfc14f0091ef4209882fb4e2b70fdb5d689263112b1f9c846f0f331a69e5f9e292a62bac", 0x3e}, {&(0x7f0000003800)="79cf5602224085fae8631a0ab23a7fb83ac73eb735fdf1cf921a6ca06479e0919c07e6b48f4f0be7e6a8445fc79fce9e853218693100a2660500646c52b4f1a2d1bdb1b278a0ddbf3a28c324e0d2084bf4eba680e86c8a5e4052c2a9423079215408117c13d9dfb6372461", 0x6b}, {&(0x7f0000003880)="205895807f9285782155f2bfd01c601c2fa2a69825db75b7afcd901eddaa771c6751120ff95f94500617b58d9a8006bfee7991d6cb947f8aaf5a9e627bb921e3bc66150b080c264ead9a527a50fa8c7fbf8abd6cc1ddb1f532163636967c92b3fa850c2283f22ca855ebc99c0d3e1883267a10248f61312226037f66be447846162b47cde4db524ee8fd0e1d619fddbbdc5487b026c724721216643d81616a7c0026bb04f1072ce1edc459d1a8d6a03ee23a66573659e30ee7ec1726d279817b20e334b4c41eb731c82ab564f19dc5", 0xcf}, {&(0x7f0000003980)="015adcc5d4feae0409a3da4d4570e2ee6e37c03e1d8587b56d6d472e93f3c59a02db317fb0413490a6fdb7023eb512c9dfe77923e26294cb7b605195d00c4cc0dcb19b3370ba3f667ca492fe09d381814ef45a32220acb8954f18ceca12fb68fe960c6c3f52d6c63d3220c16a703ef00ff153bb02b025678000b4d", 0x7b}, {&(0x7f0000003a00)="d6e190ce16bff8943707e5ce27d65ec411c349cd9916b987dc89442513a3", 0x1e}, {&(0x7f0000003a40)="4714e91a2b2d6adf8080e178b2e0df478cf4c1efd880746d1b9e96204861472a0878150831654d8e5e6eea881c7ee8969472c71255bfd40cf751bc185046a96677739c677d1622667f0bce7065509086c0789dee5e0fe8f29eacd975d30a70", 0x5f}, {&(0x7f0000003ac0)="6468a6d5c60d269247c803c9e4e777ea108ef62ebaf79097b0ce87ee83dc5cbdc539e27fa37f6f188778f96812ac00624092667da110c7aa129e1b7c1e46afd0c69b0972ed4a7b73bfbf19359faad2f2f51acc3313214566e010e4b3fa76533f00a6d3d300c906b117166dbe", 0x6c}], 0xa, &(0x7f0000003c00)=[@init={0x18, 0x84, 0x0, {0x0, 0x2, 0x92, 0x1}}], 0x18, 0x80}], 0x6, 0x80) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000100)={0x8002a000}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r15 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r16, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r16, r17, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r15, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 1m27.677221382s ago: executing program 1 (id=1284): sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x7, 0xe4, &(0x7f0000000500)=""/228}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba4200360f797e0066ef0f39902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f070f01d9c4033921820f47a753fd", 0x45}], 0x1, 0x37, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240048d0}, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x800, 0x0, 0x10, 0xf7, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') 1m27.673609032s ago: executing program 6 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x7f000000, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 1m26.624551574s ago: executing program 6 (id=1287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x18, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3, 0xf0ff}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m26.579455005s ago: executing program 4 (id=1288): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002f40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) mkdir(0x0, 0x0) 1m26.36948467s ago: executing program 6 (id=1289): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x80, 0xf, 0xe8, 0x8, 0x57c, 0x2200, 0xefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x160, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x88, 0x68, 0x2b}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0xffffffffffffffba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$selinux_load(r2, 0x0, 0x10c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x955, 0x7214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0xa4, [{{0x9, 0x4, 0x0, 0xb2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x7ff, 0x0, 0x1, {0x22, 0x934}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x40, 0x6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xb, 0x7, 0x84, 0x10, 0x6}, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x3, 0x7, 0x522e}]}, 0x5, [{0x91, &(0x7f0000000100)=@string={0x91, 0x3, "aedb34a8ae8889745b6b3fef2f621711f9aefd4227c721727a8733b6def911368ee201de4cb0f897b7e624e1c2943c8d4278baaae04df55bad4cdab6d2c1b92ae0346d4cefda45f701ecc8305b808f8f024e35b432ef264bb2d15802e00400de90a58f7cfab317f7d0bd3e3737f23ae7010e52f50dbf89ffb3cc7ebf96db3a5afb1c1589c374db697d30040253a7d5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x455}}, {0xd8, &(0x7f0000000200)=@string={0xd8, 0x3, "0e070fb011b273fb49dbb2e78350424d257e4afcecb90f065aac33ef97c82af019f26e98b5d1e66d25f310492529cbc13429a5fbfe94d2ab08ee1609b18250676c82f5b913e5e5e02131b988bfb734335e4136432ad8ae15a2179cea0e4f0cde0ae3b19e1e93069c7f2feeb181834e3909f2238a4f4ef78b9a55013024d072226b695c9f50527ed65f737db433c573e7c1a82ba0ea30182a7e0cd48ba0b9b34fda5cecbb67a72a3f7a57733088d7d80a8856f571a14c0d0b6d602f12028de225106a6bfb6708d56a5e0903f5e66b92335d2b9d17dcd7"}}, {0x96, &(0x7f0000000300)=@string={0x96, 0x3, "6d25697c33390c3f9dca358553766eb90a7d0cda3fa94a2824eaca0eb064d8e9cca24086c23fc2a1da32556f19c8e44359cb3cc255d2ad04eafe12953c0a173452a264a39523774948906db7d4bc311a4457eac8c70203f7a28444fb32ccd84cec29f80c6096ab86f6eadd88a182065606fc3934c136bea846aff0669d02dd782f1babe1ecc389fec7ca95068fa2aae095a7f366"}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "39b0df63e4fa89a7057984830954de5b4ce3b244c9f0ceb275c775ad3a4f40a896c23c7db66a1c8bc8460139deb92e98e0af2934b4a69fea70008c2bf53893952f7509d57343246fdc1e578d94c9a47ff5502742b41be9b8875ef8221440cd820c61b7d3ac85d0256861f2c5e93b25af4d6aba91eb709d7a04dc50a014fba17c2b0cae3ffd56bcaf652a58b4f57c0ce14fcbff7cfc54b32fc4a42d4ff29b43316a34a3a5cefbd36aa47d0d1a57b2b105c98eb724b805ca4c4a7321e2cc5b6a842f917b0acac9f1a3430bb6478699df"}}]}) 1m25.926536697s ago: executing program 1 (id=1295): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd700007002f0002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m11.118366522s ago: executing program 35 (id=1289): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x80, 0xf, 0xe8, 0x8, 0x57c, 0x2200, 0xefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x160, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x88, 0x68, 0x2b}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0xffffffffffffffba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$selinux_load(r2, 0x0, 0x10c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x955, 0x7214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0xa4, [{{0x9, 0x4, 0x0, 0xb2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x7ff, 0x0, 0x1, {0x22, 0x934}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x40, 0x6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xb, 0x7, 0x84, 0x10, 0x6}, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x3, 0x7, 0x522e}]}, 0x5, [{0x91, &(0x7f0000000100)=@string={0x91, 0x3, "aedb34a8ae8889745b6b3fef2f621711f9aefd4227c721727a8733b6def911368ee201de4cb0f897b7e624e1c2943c8d4278baaae04df55bad4cdab6d2c1b92ae0346d4cefda45f701ecc8305b808f8f024e35b432ef264bb2d15802e00400de90a58f7cfab317f7d0bd3e3737f23ae7010e52f50dbf89ffb3cc7ebf96db3a5afb1c1589c374db697d30040253a7d5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x455}}, {0xd8, &(0x7f0000000200)=@string={0xd8, 0x3, "0e070fb011b273fb49dbb2e78350424d257e4afcecb90f065aac33ef97c82af019f26e98b5d1e66d25f310492529cbc13429a5fbfe94d2ab08ee1609b18250676c82f5b913e5e5e02131b988bfb734335e4136432ad8ae15a2179cea0e4f0cde0ae3b19e1e93069c7f2feeb181834e3909f2238a4f4ef78b9a55013024d072226b695c9f50527ed65f737db433c573e7c1a82ba0ea30182a7e0cd48ba0b9b34fda5cecbb67a72a3f7a57733088d7d80a8856f571a14c0d0b6d602f12028de225106a6bfb6708d56a5e0903f5e66b92335d2b9d17dcd7"}}, {0x96, &(0x7f0000000300)=@string={0x96, 0x3, "6d25697c33390c3f9dca358553766eb90a7d0cda3fa94a2824eaca0eb064d8e9cca24086c23fc2a1da32556f19c8e44359cb3cc255d2ad04eafe12953c0a173452a264a39523774948906db7d4bc311a4457eac8c70203f7a28444fb32ccd84cec29f80c6096ab86f6eadd88a182065606fc3934c136bea846aff0669d02dd782f1babe1ecc389fec7ca95068fa2aae095a7f366"}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "39b0df63e4fa89a7057984830954de5b4ce3b244c9f0ceb275c775ad3a4f40a896c23c7db66a1c8bc8460139deb92e98e0af2934b4a69fea70008c2bf53893952f7509d57343246fdc1e578d94c9a47ff5502742b41be9b8875ef8221440cd820c61b7d3ac85d0256861f2c5e93b25af4d6aba91eb709d7a04dc50a014fba17c2b0cae3ffd56bcaf652a58b4f57c0ce14fcbff7cfc54b32fc4a42d4ff29b43316a34a3a5cefbd36aa47d0d1a57b2b105c98eb724b805ca4c4a7321e2cc5b6a842f917b0acac9f1a3430bb6478699df"}}]}) 1m11.088031868s ago: executing program 36 (id=1288): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002f40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) mkdir(0x0, 0x0) 1m10.620035595s ago: executing program 37 (id=1295): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd700007002f0002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 17.213831595s ago: executing program 2 (id=1428): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x7fff, 0xfffffffe, 0x88b, 0x2000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0xb0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 17.165831619s ago: executing program 2 (id=1429): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000840)=ANY=[@ANYBLOB="94884205080000ec5fd97525185efe010000d0b55d8fae71ed7da6c5636e6a40458bbcb4baa9835c930013658c89d1eccd4385c191b33828865f5066b2aaa1f81835c7c56e54fff0ede7ebf6800ddce02d597b6191af7f0377", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000010003000100000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040003000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040003000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffff7}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x28, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 17.162718919s ago: executing program 2 (id=1430): io_setup(0x101, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x311, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 16.635080487s ago: executing program 2 (id=1431): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700000072009fb3001de5000000000607001d40", @ANYRES32=0x0, @ANYRES32=r0], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="25417370aa3918c58400820004010000000000000c00850000000fbf799c89"], &(0x7f0000000540)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000005b40)=[{{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003240)="2ae4ee356aa605aeda693995c3a0148910aa86c1", 0x14}], 0x1, 0x0, 0x0, 0x24044045}}, {{&(0x7f00000032c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000003900)=[{&(0x7f0000003340)="ac9c2487a89faa82b0b862f0932b4302b9436f8bd24978e8814ef69091236b309dd0c06ba17c731028233b66fd0ea928c90d133b871ebfab06c22ba4ec796c8b06d98fbdce1d0e71f1faf33e0dea39203c2c987b87ff04f04e30a1fb5618b029ad5ccfd8476a2be369d6bef3a1b818c21f307d0c7f7964bd79ba68bb66cbc347e9a6a66e2986421c454b301bdad0b7507b49907a5508a8ad4c3e1629ce3bf4e7015c781b466d45be63a3dda6575be84dc4211437a5b48ffa5966ab3ba073fc0c97b571531999c1a6a55c85960c18a842e7e116e25ddfbc", 0xd7}, {&(0x7f0000003440)="769094856a2ff12b8e89bb0a36791ab39231d46b3cee56a1ac1b54ea30e5b6702176dbd60e1b646d6d2b327db1336b60fa0f179edf6cd395e60e9d98e6e5c8dff6541cdf0d14a0f0dd5ac5761719496d0031f30a27527f1a30e6dc60f60f9a3c9b41c74068a955314be44b287e655b2b039f1596b32a7e81ee180d60cf24aff7eff53e14b2186ed28d7ee85c4de795ad0ebe73d8a27c6af3e99529e191cbb3150a0de97b2d3f457246ef47b42f1c648ca51ed5e15b9611fdb52f335b6b1d6e6d4918f9e2744078f0e4e513b7a9499992", 0xffffffc0}, {&(0x7f0000003700)="c4746e41a5afe31bd495d9ce1f76ffee18e7dea6e89f7752d455987f675b3a342087a0746bc7ebdb7e4493c5a7ef941348d7179e52f74b4e0b253815e74c192a3b459817d5373a959d68ece8e7df6e504f99356e17fca75ec51a6bc9d3c14e0f7c7c7fa87433ad5891cceafdc78272576d2fd230c70a96cbd1f6cabe0633aa545962104d4bb638886b0edcea55e5d05385c0fe9df785c86cafa207cf636bc80006ef71051f089c1e72708472d4a3da7821ce3c02e0f3931bd0068e5aa3d5e9feadf54bb88560", 0xc6}, {&(0x7f0000003800)="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", 0xfc}, {&(0x7f0000000100)="b816f23f02ec32adf76aa99961239fac45c0c7aa731228bd63e56b2c62cc2daa4ef6fad900d34e08adfbc03d76fe79ac1453f2", 0x33}], 0x5, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000a7ea694c56a3d2ba9f9d45eb240702f980dc613df6e9512db0a849", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x90, 0x20000040}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005740)="aa55cb89f2517ba2f4d823686346826e8c9a51d961478f6c8d49eba0797f3db54cbf65be579c528b8da607840c6e6e5fc6a30897b7b7e280dd12e8822181176b5bde5d5fc76145ce358b3d9fe1df093f4d2b5f8a119cf2b9eeef7c071b92a4f64d58aecd0d066035de8f319197416d626fa1ba844d41cd5c1861ab57033303b16d116b6ce518a8f87a3a8e07e840eece1b243086450514d0446550db63875decb59f3f1adb358a9b9827741c7f7b28ada7f8d8c9702ce10e8d59071998dcca45dec39a97eb780634b119c384849afe62d8ab9e426b50", 0xd6}, {&(0x7f0000005840)="f727b743ed70de5b684f785a66f95606f012c87c9fe28f65e49936ea19072e669831813c9d48bb2a28bba1a0349f907afc6efd8c69d1920239df879429ca9656870af7d4a035d81039b6a6c3922d46dcaec0c677889aa122baeb973b08cfbeec87b61f22ebdb42f4adb1a62f9e9dab5fd46604", 0x73}], 0x2, &(0x7f0000003640)=ANY=[@ANYBLOB="2800000000bb2760c8391bc20ef3d2ee", @ANYRES32, @ANYBLOB="2f504af1a162e6ad20ead08e7abac7b58c2332298f51d09032211a9dd046185fb1516b7f84b04ba9fe0db2abfd99939680f4eab2", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r4, @ANYRES16=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x8084}}], 0x3, 0x40010) recvmmsg(r6, &(0x7f0000003140)=[{{&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000600)=""/172, 0xac}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x4, &(0x7f0000001840)=""/182, 0xb6}, 0xc000000}, {{&(0x7f0000001900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001980)=""/49, 0x31}, 0x2}, {{&(0x7f0000001a40)=@generic, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001ac0)=""/235, 0xeb}, {&(0x7f0000001bc0)=""/186, 0xba}, {&(0x7f0000001c80)=""/229, 0xe5}], 0x3, &(0x7f0000001dc0)=""/226, 0xe2}, 0x5}, {{&(0x7f0000001ec0), 0x80, &(0x7f0000003080)=[{&(0x7f0000001f40)=""/155, 0x9b}, {&(0x7f0000002000)=""/120, 0x78}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x3, &(0x7f00000030c0)=""/95, 0x5f}, 0x4}], 0x4, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r2) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r11 = accept(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r10, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 15.705314698s ago: executing program 2 (id=1432): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$setregset(0x4205, r1, 0x202, &(0x7f00000003c0)={&(0x7f0000000380)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x25, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pipe2(&(0x7f0000000300), 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000420007012bbd700000000000047c0000040c000000003b00", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002c00070100000000ffdbdf2503"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 15.657550777s ago: executing program 2 (id=1433): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000008", @ANYRES8=r0, @ANYBLOB="010000e60000000000001b0000000700000061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = eventfd2(0x80000000, 0x80000) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r1, 0x0, 0x0, 0x400, 0x0, 0x1, r3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r9) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r10, 0x101, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x6, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4, 0x0, 0xfdff}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 38 (id=1433): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000008", @ANYRES8=r0, @ANYBLOB="010000e60000000000001b0000000700000061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = eventfd2(0x80000000, 0x80000) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r1, 0x0, 0x0, 0x400, 0x0, 0x1, r3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r9) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r10, 0x101, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x6, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4, 0x0, 0xfdff}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): 0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14f98f749 code=0x0 [ 243.832897][ T5976] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 243.841779][ T8382] team_slave_0: entered promiscuous mode [ 243.847420][ T8382] team_slave_1: entered promiscuous mode [ 243.854197][ T8382] vlan2: entered promiscuous mode [ 243.859237][ T8382] team0: entered promiscuous mode [ 244.004651][ T5976] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 244.014615][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.021527][ T5920] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 244.022967][ T5976] usb 5-1: Product: syz [ 244.035353][ T5976] usb 5-1: Manufacturer: syz [ 244.039962][ T5976] usb 5-1: SerialNumber: syz [ 244.055583][ T5976] usb 5-1: config 0 descriptor?? [ 244.073845][ T5976] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 244.161482][ T5920] usb 4-1: device descriptor read/64, error -71 [ 244.411617][ T8386] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.599'. [ 244.593593][ T5976] gspca_stk1135: reg_w 0x2 err -110 [ 244.652952][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.659533][ T5976] gspca_stk1135: Sensor write failed [ 244.665205][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.674958][ T5976] gspca_stk1135: Sensor write failed [ 244.680561][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.688021][ T5976] gspca_stk1135: Sensor read failed [ 244.694409][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.710165][ T5976] gspca_stk1135: Sensor read failed [ 244.718539][ T5976] gspca_stk1135: Detected sensor type unknown (0x0) [ 244.725505][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.732295][ T5976] gspca_stk1135: Sensor read failed [ 244.737951][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.744589][ T5976] gspca_stk1135: Sensor read failed [ 244.750020][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.756679][ T5976] gspca_stk1135: Sensor write failed [ 244.762231][ T5976] gspca_stk1135: serial bus timeout: status=0x00 [ 244.768847][ T5976] gspca_stk1135: Sensor write failed [ 244.774405][ T5976] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 244.882393][ T5920] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 245.931474][ T5920] usb 4-1: device descriptor read/64, error -71 [ 246.054918][ T5920] usb usb4-port1: attempt power cycle [ 246.411507][ T5920] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 246.530677][ T90] usb 5-1: USB disconnect, device number 25 [ 246.574870][ T5920] usb 4-1: device descriptor read/8, error -71 [ 246.814819][ T8414] syzkaller0: entered promiscuous mode [ 246.820316][ T8414] syzkaller0: entered allmulticast mode [ 246.860148][ T8414] netlink: 256 bytes leftover after parsing attributes in process `syz.5.603'. [ 247.853878][ T5920] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 248.386974][ T5920] usb 4-1: device not accepting address 23, error -71 [ 248.412737][ T8444] NFSD: Failed to start, no listeners configured. [ 248.454785][ T30] audit: type=1400 audit(1766007429.593:447): avc: denied { write } for pid=8445 comm="syz.3.612" name="file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.562332][ T5920] usb usb4-port1: unable to enumerate USB device [ 248.639280][ T30] audit: type=1400 audit(1766007429.613:448): avc: denied { open } for pid=8445 comm="syz.3.612" path="/123/file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.763229][ T30] audit: type=1400 audit(1766007429.763:449): avc: denied { ioctl } for pid=8445 comm="syz.3.612" path="/123/file0" dev="tmpfs" ino=668 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.289682][ T30] audit: type=1326 audit(1766007430.423:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.1.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14f98f749 code=0x0 [ 249.631635][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 249.783234][ T9] usb 4-1: device descriptor read/64, error -71 [ 250.137437][ T30] audit: type=1400 audit(1766007431.253:451): avc: denied { ioctl } for pid=8467 comm="syz.2.616" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 250.185374][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 250.393767][ T9] usb 4-1: device descriptor read/64, error -71 [ 250.611898][ T9] usb usb4-port1: attempt power cycle [ 250.953100][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 250.984986][ T9] usb 4-1: device descriptor read/8, error -71 [ 252.042143][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 252.072365][ T9] usb 4-1: device descriptor read/8, error -71 [ 252.268046][ T9] usb usb4-port1: unable to enumerate USB device [ 252.837765][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 252.924990][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 253.012120][ T8520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.360791][ T8527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.452702][ T5976] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 254.701880][ T6582] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 254.781581][ T5976] usb 4-1: Using ep0 maxpacket: 32 [ 254.812163][ T5976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.921644][ T5976] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.922801][ T6582] usb 2-1: Using ep0 maxpacket: 16 [ 255.157658][ T5976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.342516][ T5976] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 255.354267][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.615618][ T5976] usb 4-1: config 0 descriptor?? [ 255.646396][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655087][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.665360][ T8541] input: syz0 as /devices/virtual/input/input44 [ 255.874469][ T6582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.874592][ T6582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.874617][ T6582] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.874650][ T6582] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.874662][ T6582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.887971][ T6582] usb 2-1: config 0 descriptor?? [ 256.039959][ T30] audit: type=1400 audit(1766007437.173:452): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 256.245570][ T8549] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.327270][ T6582] microsoft 0003:045E:07DA.0010: nested delimiters [ 256.385180][ T6582] microsoft 0003:045E:07DA.0010: item 0 4 2 10 parsing failed [ 256.445168][ T6582] microsoft 0003:045E:07DA.0010: parse failed [ 256.475671][ T6582] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 256.592444][ T8552] xt_hashlimit: max too large, truncated to 1048576 [ 256.600611][ T8552] xt_limit: Overflow, try lower: 0/0 [ 256.887466][ T5976] usbhid 4-1:0.0: can't add hid device: -71 [ 257.111711][ T5976] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 257.179772][ T5976] usb 4-1: USB disconnect, device number 28 [ 257.526249][ T6582] usb 2-1: USB disconnect, device number 22 [ 258.892871][ T8563] input: syz0 as /devices/virtual/input/input45 [ 259.120358][ T30] audit: type=1400 audit(1766007440.253:453): avc: denied { bind } for pid=8572 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 259.218019][ T30] audit: type=1400 audit(1766007440.253:454): avc: denied { write } for pid=8572 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.146557][ T8573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 260.200479][ T8573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 260.476302][ T8593] netlink: 104 bytes leftover after parsing attributes in process `syz.1.646'. [ 261.110604][ T8596] xt_hashlimit: max too large, truncated to 1048576 [ 261.117532][ T8596] xt_limit: Overflow, try lower: 0/0 [ 261.494180][ T8603] netlink: 68 bytes leftover after parsing attributes in process `syz.1.648'. [ 261.578639][ T8605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.216121][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 262.421707][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 262.494743][ T8617] input: syz0 as /devices/virtual/input/input46 [ 262.571271][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.584258][ T9] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.604072][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.614321][ T8616] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 262.627445][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 262.648247][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.664041][ T9] usb 5-1: config 0 descriptor?? [ 262.726197][ T8608] NFSD: Failed to start, no listeners configured. [ 263.706016][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.654'. [ 263.721568][ T8631] netlink: 76 bytes leftover after parsing attributes in process `syz.5.654'. [ 264.549157][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 264.564765][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 264.575535][ T9] usb 5-1: USB disconnect, device number 26 [ 265.116283][ T30] audit: type=1400 audit(1766007446.253:455): avc: denied { accept } for pid=8649 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 267.233331][ T5892] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 267.342939][ T8675] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 267.385398][ T8675] bond0: (slave wlan1): Opening slave failed [ 267.401762][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 267.420236][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.446330][ T5892] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 267.461460][ T5892] usb 2-1: config 1 has no interface number 1 [ 267.467916][ T5892] usb 2-1: too many endpoints for config 1 interface 6 altsetting 15: 243, using maximum allowed: 30 [ 267.468016][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 267.492886][ T5892] usb 2-1: config 1 interface 6 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 243 [ 267.512836][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.517982][ T5892] usb 2-1: config 1 interface 6 has no altsetting 0 [ 267.520325][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.533588][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.552352][ T8679] bridge0: entered allmulticast mode [ 267.555809][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.581509][ T5892] usb 2-1: Product: syz [ 267.585694][ T5892] usb 2-1: Manufacturer: syz [ 267.594905][ T5892] usb 2-1: SerialNumber: syz [ 267.766068][ T8683] ip6t_srh: unknown srh match flags FF3F [ 267.854860][ T30] audit: type=1400 audit(1766007448.993:456): avc: denied { listen } for pid=8685 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.875605][ T30] audit: type=1400 audit(1766007448.993:457): avc: denied { cmd } for pid=8685 comm="syz.2.672" path="socket:[20409]" dev="sockfs" ino=20409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.954349][ T8687] xt_bpf: check failed: parse error [ 268.241047][ T30] audit: type=1400 audit(1766007449.373:458): avc: denied { read } for pid=8685 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.566252][ T8690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.673'. [ 268.576643][ T8690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 268.966968][ T5892] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 269.060895][ T5892] usb 2-1: USB disconnect, device number 23 [ 269.127302][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.518757][ T30] audit: type=1400 audit(1766007451.223:459): avc: denied { bind } for pid=8698 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.615482][ T30] audit: type=1400 audit(1766007451.223:460): avc: denied { listen } for pid=8698 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.635430][ T30] audit: type=1400 audit(1766007451.223:461): avc: denied { connect } for pid=8698 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.677267][ T8706] CIFS mount error: No usable UNC path provided in device string! [ 270.677267][ T8706] [ 270.687494][ T8706] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 270.808938][ T30] audit: type=1400 audit(1766007451.283:462): avc: denied { write } for pid=8698 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.892995][ T8706] md: superblock version 1768186226 not known [ 270.901654][ T8706] md: couldn't set array info. -22 [ 271.009606][ T30] audit: type=1400 audit(1766007451.283:463): avc: denied { accept } for pid=8698 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.380487][ T8569] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 271.511486][ T8717] ip6t_srh: unknown srh invflags 7F00 [ 271.988828][ T8569] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 272.039029][ T8569] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.041207][ T8720] input: syz0 as /devices/virtual/input/input48 [ 272.182179][ T8569] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.194258][ T8569] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.238086][ T8569] usb 3-1: Product: syz [ 272.275495][ T8569] usb 3-1: Manufacturer: syz [ 272.280388][ T8569] usb 3-1: SerialNumber: syz [ 272.413024][ T8569] usb 3-1: config 0 descriptor?? [ 272.699693][ T8569] usb 3-1: selecting invalid altsetting 0 [ 274.253999][ T8742] loop2: detected capacity change from 0 to 7 [ 274.268109][ T5995] Dev loop2: unable to read RDB block 7 [ 274.303466][ T5995] loop2: AHDI p1 p2 p3 [ 274.312961][ T5995] loop2: partition table partially beyond EOD, truncated [ 274.359255][ T8569] usb 3-1: USB disconnect, device number 33 [ 274.373576][ T5995] loop2: p1 start 1601398130 is beyond EOD, truncated [ 274.394751][ T5995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 274.409430][ T8742] Dev loop2: unable to read RDB block 7 [ 274.416381][ T8742] loop2: AHDI p1 p2 p3 [ 274.420712][ T8742] loop2: partition table partially beyond EOD, truncated [ 274.432288][ T8742] loop2: p1 start 1601398130 is beyond EOD, truncated [ 274.439274][ T8742] loop2: p2 start 1702059890 is beyond EOD, truncated [ 275.400390][ T30] audit: type=1400 audit(1766007456.503:464): avc: denied { bind } for pid=8753 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.651932][ T5819] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 275.831632][ T5819] usb 4-1: device descriptor read/64, error -71 [ 276.087034][ T5819] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 276.155736][ T8765] netlink: 32 bytes leftover after parsing attributes in process `syz.4.694'. [ 276.448604][ T8769] omfs: Invalid superblock (0) [ 276.531443][ T5819] usb 4-1: device descriptor read/64, error -71 [ 276.651655][ T5819] usb usb4-port1: attempt power cycle [ 277.113299][ T8783] xt_bpf: check failed: parse error [ 277.545032][ T5819] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 277.692083][ T5819] usb 4-1: device descriptor read/8, error -71 [ 278.411931][ T5819] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 278.658342][ T5819] usb 4-1: device not accepting address 32, error -71 [ 278.665498][ T5819] usb usb4-port1: unable to enumerate USB device [ 278.768273][ T8809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.154995][ T5922] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 279.491448][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 279.498829][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.511851][ T5922] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.531040][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.166758][ T8825] ip6t_srh: unknown srh invflags 7F00 [ 280.429212][ T8827] FAULT_INJECTION: forcing a failure. [ 280.429212][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 280.472512][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT(full) [ 280.472537][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.472547][ T8827] Call Trace: [ 280.472552][ T8827] [ 280.472559][ T8827] dump_stack_lvl+0x16c/0x1f0 [ 280.472584][ T8827] should_fail_ex+0x512/0x640 [ 280.472610][ T8827] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 280.472631][ T8827] should_failslab+0xc2/0x120 [ 280.472653][ T8827] kmem_cache_alloc_node_noprof+0x86/0x800 [ 280.472670][ T8827] ? __alloc_skb+0x156/0x410 [ 280.472693][ T8827] ? __alloc_skb+0x35d/0x410 [ 280.472719][ T8827] ? __alloc_skb+0x156/0x410 [ 280.472740][ T8827] __alloc_skb+0x156/0x410 [ 280.472762][ T8827] ? __alloc_skb+0x35d/0x410 [ 280.472785][ T8827] ? __pfx___alloc_skb+0x10/0x10 [ 280.472818][ T8827] netlink_ack+0x15d/0xb80 [ 280.472837][ T8827] ? avc_has_perm_noaudit+0x149/0x3b0 [ 280.472869][ T8827] netlink_rcv_skb+0x332/0x420 [ 280.472888][ T8827] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 280.472917][ T8827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.472947][ T8827] ? ns_capable+0xd7/0x110 [ 280.472972][ T8827] nfnetlink_rcv+0x1b3/0x430 [ 280.472997][ T8827] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 280.473021][ T8827] ? netlink_deliver_tap+0x1ae/0xd30 [ 280.473046][ T8827] netlink_unicast+0x5aa/0x870 [ 280.473069][ T8827] ? __pfx_netlink_unicast+0x10/0x10 [ 280.473099][ T8827] netlink_sendmsg+0x8c8/0xdd0 [ 280.473123][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.473152][ T8827] ____sys_sendmsg+0xa5d/0xc30 [ 280.473174][ T8827] ? copy_msghdr_from_user+0x10a/0x160 [ 280.473190][ T8827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.473222][ T8827] ___sys_sendmsg+0x134/0x1d0 [ 280.473240][ T8827] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.473293][ T8827] __sys_sendmsg+0x16d/0x220 [ 280.473310][ T8827] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.473342][ T8827] do_syscall_64+0xcd/0xf80 [ 280.473364][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.473380][ T8827] RIP: 0033:0x7fb14f98f749 [ 280.473394][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.473410][ T8827] RSP: 002b:00007fb1507d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.473426][ T8827] RAX: ffffffffffffffda RBX: 00007fb14fbe5fa0 RCX: 00007fb14f98f749 [ 280.473436][ T8827] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 280.473446][ T8827] RBP: 00007fb1507d2090 R08: 0000000000000000 R09: 0000000000000000 [ 280.473455][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.473464][ T8827] R13: 00007fb14fbe6038 R14: 00007fb14fbe5fa0 R15: 00007ffdd72c3498 [ 280.473487][ T8827] [ 280.486409][ T5922] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 280.768597][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.801233][ T5922] usb 5-1: config 0 descriptor?? [ 280.963939][ T8832] team_slave_0: entered promiscuous mode [ 280.969654][ T8832] team_slave_1: entered promiscuous mode [ 280.997840][ T8832] vlan2: entered promiscuous mode [ 281.131787][ T8832] team0: entered promiscuous mode [ 281.174968][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 281.462048][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 281.521687][ T5922] usb 5-1: USB disconnect, device number 27 [ 281.541501][ T5892] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 282.172018][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 282.185635][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.208859][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.229085][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.261437][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.287559][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.306946][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 282.317412][ T5892] usb 4-1: config 0 descriptor?? [ 282.740178][ T5892] microsoft 0003:045E:07DA.0011: nested delimiters [ 282.751750][ T8863] CIFS mount error: No usable UNC path provided in device string! [ 282.751750][ T8863] [ 282.762565][ T8863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 282.777928][ T5892] microsoft 0003:045E:07DA.0011: item 0 4 2 10 parsing failed [ 282.790996][ T5892] microsoft 0003:045E:07DA.0011: parse failed [ 282.799184][ T5892] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22 [ 284.174005][ T8863] md: superblock version 1768186226 not known [ 284.180110][ T8863] md: couldn't set array info. -22 [ 284.197843][ T8569] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 284.245694][ T5892] usb 4-1: USB disconnect, device number 33 [ 284.401460][ T8569] usb 6-1: Using ep0 maxpacket: 8 [ 284.425353][ T8569] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 284.436861][ T8569] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 284.450166][ T6582] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 284.461839][ T8569] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 284.476354][ T8569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.491900][ T8569] usb 6-1: config 0 descriptor?? [ 284.510972][ T8569] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 284.621741][ T6582] usb 5-1: Using ep0 maxpacket: 32 [ 284.633175][ T6582] usb 5-1: config 0 has no interfaces? [ 284.652090][ T6582] usb 5-1: New USB device found, idVendor=0413, idProduct=6f07, bcdDevice=96.91 [ 284.671512][ T6582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.691427][ T6582] usb 5-1: Product: syz [ 284.701960][ T6582] usb 5-1: Manufacturer: syz [ 284.706606][ T6582] usb 5-1: SerialNumber: syz [ 284.713295][ T5819] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 285.480120][ T6582] usb 5-1: config 0 descriptor?? [ 285.482620][ T5819] usb 3-1: device descriptor read/64, error -71 [ 285.741694][ T5893] usb 5-1: USB disconnect, device number 28 [ 285.881103][ T8890] ip6t_srh: unknown srh match flags FF3F [ 285.891711][ T5819] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 286.041988][ T90] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 286.301574][ T849] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 286.508327][ T5819] usb 3-1: device descriptor read/64, error -71 [ 286.530779][ T6582] usb 6-1: USB disconnect, device number 3 [ 286.538814][ T30] audit: type=1400 audit(1766007467.673:465): avc: denied { unmount } for pid=7919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.671499][ T849] usb 5-1: Using ep0 maxpacket: 16 [ 286.678295][ T5819] usb usb3-port1: attempt power cycle [ 286.679092][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.695216][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.706332][ T849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.719571][ T849] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 286.728952][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.742691][ T90] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 286.752007][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.752648][ T849] usb 5-1: config 0 descriptor?? [ 286.760099][ T90] usb 4-1: Product: syz [ 286.774860][ T90] usb 4-1: Manufacturer: syz [ 286.779532][ T90] usb 4-1: SerialNumber: syz [ 286.794287][ T90] usb 4-1: config 0 descriptor?? [ 286.951557][ T90] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 287.213405][ T8907] xt_socket: unknown flags 0x4c [ 287.618427][ T5819] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 287.626237][ T90] gspca_stk1135: reg_w 0x2 err -110 [ 287.632515][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.639203][ T90] gspca_stk1135: Sensor write failed [ 287.644579][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.650907][ T90] gspca_stk1135: Sensor write failed [ 287.656504][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.662937][ T90] gspca_stk1135: Sensor read failed [ 287.666176][ T849] input: HID 0955:7214 Haptics as /devices/virtual/input/input50 [ 287.668165][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.687621][ T90] gspca_stk1135: Sensor read failed [ 287.692855][ T90] gspca_stk1135: Detected sensor type unknown (0x0) [ 287.699476][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.760227][ T5819] usb 3-1: device descriptor read/8, error -71 [ 287.767466][ T90] gspca_stk1135: Sensor read failed [ 287.772730][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.779913][ T90] gspca_stk1135: Sensor read failed [ 287.789392][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.797835][ T90] gspca_stk1135: Sensor write failed [ 287.804701][ T90] gspca_stk1135: serial bus timeout: status=0x00 [ 287.811040][ T90] gspca_stk1135: Sensor write failed [ 287.823321][ T90] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 287.879081][ T30] audit: type=1400 audit(1766007469.013:466): avc: denied { read } for pid=8896 comm="syz.4.732" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 287.879397][ T8897] random: crng reseeded on system resumption [ 288.171178][ T849] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 288.188198][ T849] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 288.217982][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.232168][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.247279][ T30] audit: type=1400 audit(1766007469.013:467): avc: denied { ioctl } for pid=8896 comm="syz.4.732" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 288.254836][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.313148][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.322075][ T8917] CIFS mount error: No usable UNC path provided in device string! [ 288.322075][ T8917] [ 288.332122][ T8917] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 288.404244][ T5892] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 288.404484][ T90] usb 5-1: USB disconnect, device number 29 [ 288.443472][ T5892] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 288.454699][ T8917] md: superblock version 1768186226 not known [ 288.460756][ T8917] md: couldn't set array info. -22 [ 288.480352][ T5892] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 288.514822][ T5892] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 288.683636][ T8927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 288.894583][ T5989] usb 4-1: USB disconnect, device number 34 [ 289.137161][ T8933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.655311][ T5819] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.665385][ T8937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.743'. [ 289.831519][ T5819] usb 6-1: Using ep0 maxpacket: 32 [ 289.846496][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.317660][ T5819] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.330796][ T5819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 290.338908][ T5819] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 290.368031][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.421682][ T5819] usb 6-1: config 0 descriptor?? [ 291.293088][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 291.725128][ T5819] usbhid 6-1:0.0: can't add hid device: -71 [ 291.747122][ T5819] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 291.766888][ T5819] usb 6-1: USB disconnect, device number 4 [ 291.921690][ T8569] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 292.059912][ T30] audit: type=1400 audit(1766007473.093:468): avc: denied { create } for pid=8979 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.083113][ T8973] random: crng reseeded on system resumption [ 293.136251][ T9007] ip6t_srh: unknown srh invflags 7F00 [ 294.905969][ T9017] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 295.347184][ T9029] NFSD: Failed to start, no listeners configured. [ 295.578281][ T9037] NFSD: Failed to start, no listeners configured. [ 295.942567][ T30] audit: type=1400 audit(1766007477.013:469): avc: denied { create } for pid=9047 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 296.102073][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.775'. [ 296.279070][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 296.288362][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 297.686754][ T9059] xt_bpf: check failed: parse error [ 297.729756][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.5.778'. [ 297.739946][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.5.778'. [ 298.439435][ T30] audit: type=1400 audit(1766007479.573:470): avc: denied { append } for pid=9073 comm="syz.4.781" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 298.692991][ T30] audit: type=1400 audit(1766007479.573:471): avc: denied { append } for pid=9073 comm="syz.4.781" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 299.138115][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 299.258050][ T9096] veth0: entered promiscuous mode [ 299.839340][ T9090] veth0: left promiscuous mode [ 299.880978][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 300.235823][ T9114] ip6t_srh: unknown srh invflags 7F00 [ 301.341526][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 301.556585][ T9134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.606288][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 301.973095][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 301.986416][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 301.998637][ T5893] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 302.008067][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.016409][ T5893] usb 5-1: Product: syz [ 302.029576][ T5893] usb 5-1: Manufacturer: syz [ 302.035394][ T5893] usb 5-1: SerialNumber: syz [ 302.049996][ T5893] usb 5-1: config 0 descriptor?? [ 302.067227][ T9119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.074941][ T9119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.088760][ T5893] usb 5-1: ucan: probing device on interface #0 [ 302.111427][ T5989] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 302.142497][ T9139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.671470][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 302.681198][ T5989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.694173][ T5989] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.708105][ T5989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.715953][ T5989] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 302.725634][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.746108][ T5989] usb 2-1: config 0 descriptor?? [ 302.882165][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 302.893733][ T30] audit: type=1400 audit(1766007484.033:472): avc: denied { create } for pid=9116 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 302.914161][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.794'. [ 303.062788][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 303.144787][ T9148] xt_bpf: check failed: parse error [ 303.478777][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 303.488330][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 303.497441][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 303.505684][ T10] usb 6-1: Product: syz [ 303.509879][ T10] usb 6-1: Manufacturer: syz [ 303.514564][ T10] usb 6-1: SerialNumber: syz [ 303.520735][ T10] usb 6-1: config 0 descriptor?? [ 303.532138][ T10] usb 6-1: selecting invalid altsetting 0 [ 303.821090][ T5893] ucan 5-1:0.0: probe with driver ucan failed with error -110 [ 304.529119][ T5989] usbhid 2-1:0.0: can't add hid device: -71 [ 304.538328][ T5989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.548705][ T5989] usb 2-1: USB disconnect, device number 25 [ 304.593766][ T8569] usb 5-1: USB disconnect, device number 30 [ 304.919062][ T9157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.433139][ T9169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.776079][ T8569] usb 6-1: USB disconnect, device number 5 [ 306.206266][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 306.739504][ T9193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.691460][ T8569] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 307.901866][ T8569] usb 6-1: Using ep0 maxpacket: 32 [ 307.951472][ T5892] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 307.967996][ T8569] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 307.990858][ T8569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.024960][ T8569] usb 6-1: config 0 descriptor?? [ 308.131503][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 308.145484][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.177574][ T5892] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.228583][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.241713][ T5892] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 308.252209][ T8569] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 308.293057][ T8569] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.309532][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.337506][ T8569] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 308.350819][ T5892] usb 2-1: config 0 descriptor?? [ 308.369051][ T8569] usb 6-1: media controller created [ 308.481726][ T8569] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.840567][ T30] audit: type=1400 audit(1766007489.973:473): avc: denied { block_suspend } for pid=9212 comm="syz.2.822" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.866689][ T9214] CIFS mount error: No usable UNC path provided in device string! [ 308.866689][ T9214] [ 308.882668][ T9214] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 309.361812][ T9214] md: superblock version 1768186226 not known [ 309.377575][ T9214] md: couldn't set array info. -22 [ 309.555071][ T9223] netlink: 'syz.5.825': attribute type 1 has an invalid length. [ 309.577504][ T9226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.826'. [ 309.628502][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 309.654563][ T9228] gretap1: entered allmulticast mode [ 309.661146][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.040437][ T5892] usb 2-1: USB disconnect, device number 26 [ 310.622756][ T9245] overlayfs: missing 'lowerdir' [ 310.703574][ T9246] overlayfs: failed to clone lowerpath [ 311.517497][ T8569] az6027: usb out operation failed. (-110) [ 311.882455][ T8569] az6027: usb out operation failed. (-32) [ 311.888210][ T8569] stb0899_attach: Driver disabled by Kconfig [ 311.903477][ T9236] vlan2: entered promiscuous mode [ 311.931465][ T8569] az6027: no front-end attached [ 311.931465][ T8569] [ 311.947551][ T8569] az6027: usb out operation failed. (-32) [ 311.961540][ T8569] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 312.071644][ T8569] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 312.088333][ T9255] omfs: Invalid superblock (0) [ 312.297994][ T9257] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 312.312387][ T8569] dvb-usb: schedule remote query interval to 400 msecs. [ 312.361406][ T8569] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 313.213296][ T9273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.836'. [ 314.353386][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 314.408533][ T5893] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 314.417415][ T90] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 314.642190][ T90] usb 2-1: Using ep0 maxpacket: 16 [ 314.666625][ T5893] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 314.682266][ T90] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.693361][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.700059][ T90] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.711770][ T5893] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.722892][ T90] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 314.732213][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 314.740342][ T5893] usb 4-1: Product: syz [ 314.744734][ T90] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 314.755085][ T90] usb 2-1: Product: syz [ 314.759339][ T5893] usb 4-1: Manufacturer: syz [ 314.764613][ T90] usb 2-1: Manufacturer: syz [ 314.769499][ T5893] usb 4-1: SerialNumber: syz [ 314.774215][ T90] usb 2-1: SerialNumber: syz [ 314.781833][ T5893] usb 4-1: config 0 descriptor?? [ 314.788700][ T90] usb 2-1: config 0 descriptor?? [ 314.800017][ T5893] usb 4-1: selecting invalid altsetting 0 [ 315.997577][ T9299] netlink: 'syz.4.844': attribute type 3 has an invalid length. [ 316.360105][ T9302] netlink: 'syz.5.846': attribute type 1 has an invalid length. [ 316.396447][ T9302] bond2: entered promiscuous mode [ 316.401971][ T9302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.420026][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 317.051288][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.057678][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.078546][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.846'. [ 317.205733][ T5922] usb 2-1: USB disconnect, device number 27 [ 317.270924][ T9304] bond2: entered allmulticast mode [ 317.466152][ T9316] omfs: Invalid superblock (0) [ 317.493052][ T5976] usb 4-1: USB disconnect, device number 35 [ 317.744029][ T9321] xt_hashlimit: max too large, truncated to 1048576 [ 317.750885][ T9321] xt_limit: Overflow, try lower: 0/0 [ 318.021437][ T5976] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 318.271528][ T9328] netlink: 'syz.5.853': attribute type 9 has an invalid length. [ 318.292837][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.853'. [ 318.306202][ T30] audit: type=1400 audit(1766007499.343:474): avc: denied { ioctl } for pid=9322 comm="syz.5.853" path="socket:[22442]" dev="sockfs" ino=22442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.362708][ T5976] usb 4-1: not running at top speed; connect to a high speed hub [ 318.371496][ T5976] usb 4-1: config 23 has an invalid interface number: 163 but max is 0 [ 318.379914][ T5976] usb 4-1: config 23 has no interface number 0 [ 318.402170][ T9328] hsr0: entered promiscuous mode [ 318.407681][ T5976] usb 4-1: config 23 interface 163 has no altsetting 0 [ 318.422647][ T9328] macvlan2: entered promiscuous mode [ 318.442588][ T5976] usb 4-1: New USB device found, idVendor=040d, idProduct=3801, bcdDevice=91.d2 [ 318.451654][ T9328] macvlan2: entered allmulticast mode [ 318.457171][ T9328] hsr0: entered allmulticast mode [ 318.463038][ T9328] hsr_slave_0: entered allmulticast mode [ 318.472638][ T9328] hsr_slave_1: entered allmulticast mode [ 318.499375][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.527397][ T5976] usb 4-1: Product: syz [ 318.538202][ T5976] usb 4-1: Manufacturer: syz [ 318.544630][ T5976] usb 4-1: SerialNumber: syz [ 318.736402][ T5922] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 318.888954][ T5976] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 319.099769][ T5976] usb 4-1: USB disconnect, device number 36 [ 319.381128][ T5922] usb 5-1: device descriptor read/64, error -71 [ 319.606802][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.616944][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.041688][ T5922] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 320.261441][ T5922] usb 5-1: device descriptor read/64, error -71 [ 320.870304][ T5922] usb usb5-port1: attempt power cycle [ 321.008213][ T9353] tipc: Failed to remove unknown binding: 66,1,1/0:3727477217/3727477219 [ 321.017043][ T9353] tipc: Failed to remove unknown binding: 66,1,1/0:3727477217/3727477219 [ 321.255954][ T5922] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 321.471590][ T5922] usb 5-1: device not accepting address 33, error -71 [ 321.562204][ T8569] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 322.071435][ T5922] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 322.102042][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 322.113687][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.127219][ T5922] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 322.141444][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.187461][ T5922] usb 5-1: config 0 descriptor?? [ 322.201409][ T8569] usb 2-1: Using ep0 maxpacket: 16 [ 322.258295][ T8569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 322.315938][ T8569] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.371459][ T8569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.380013][ T8569] usb 2-1: Product: syz [ 322.399755][ T8569] usb 2-1: Manufacturer: syz [ 322.415324][ T8569] usb 2-1: SerialNumber: syz [ 322.439892][ T8569] usb 2-1: config 0 descriptor?? [ 322.504004][ T8569] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.615026][ T5922] vrc2 0003:07C0:1125.0013: fixing up VRC-2 report descriptor [ 322.632727][ T8569] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 322.645121][ T5922] input: HID 07c0:1125 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:07C0:1125.0013/input/input53 [ 323.160897][ T5922] vrc2 0003:07C0:1125.0013: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.4-1/input0 [ 323.232050][ T5922] usb 5-1: USB disconnect, device number 34 [ 323.405955][ T9384] fido_id[9384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 323.451913][ T30] audit: type=1400 audit(1766007504.583:475): avc: denied { map } for pid=9385 comm="syz.2.871" path="socket:[22510]" dev="sockfs" ino=22510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.494699][ T30] audit: type=1400 audit(1766007504.583:476): avc: denied { read } for pid=9385 comm="syz.2.871" path="socket:[22510]" dev="sockfs" ino=22510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.541834][ T8569] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 323.913345][ T9402] omfs: Invalid superblock (0) [ 324.158622][ T30] audit: type=1326 audit(1766007505.273:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.5.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3abe58f749 code=0x0 [ 324.259988][ T6216] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.390951][ T6216] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.688666][ T9415] ip6t_srh: unknown srh invflags 7F00 [ 324.790098][ T6216] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.049759][ T8569] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 325.058791][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.067571][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.075312][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.093212][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.094864][ T8569] em28xx 2-1:0.0: board has no eeprom [ 325.101546][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.119021][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.124410][ T6216] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.126393][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.145533][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.153654][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.161092][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.223889][ T8569] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 325.239639][ T8569] em28xx 2-1:0.0: dvb set to bulk mode. [ 325.279603][ T5892] em28xx 2-1:0.0: Binding DVB extension [ 325.455403][ T8569] usb 2-1: USB disconnect, device number 28 [ 325.552873][ T8569] em28xx 2-1:0.0: Disconnecting em28xx [ 325.650930][ T30] audit: type=1400 audit(1766007506.783:478): avc: denied { read } for pid=9423 comm="syz.4.882" path="socket:[23588]" dev="sockfs" ino=23588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.696730][ T5892] em28xx 2-1:0.0: Registering input extension [ 325.732927][ T9428] netlink: 304 bytes leftover after parsing attributes in process `syz.1.883'. [ 325.734104][ T8569] em28xx 2-1:0.0: Closing input extension [ 325.966116][ T30] audit: type=1400 audit(1766007506.883:479): avc: denied { write } for pid=9423 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.085365][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 326.095377][ T30] audit: type=1400 audit(1766007507.213:480): avc: denied { ioctl } for pid=9409 comm="syz.2.879" path="socket:[23259]" dev="sockfs" ino=23259 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 326.152620][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.882'. [ 326.697560][ T8569] em28xx 2-1:0.0: Freeing device [ 326.805071][ T6216] bridge_slave_1: left allmulticast mode [ 326.821650][ T6216] bridge_slave_1: left promiscuous mode [ 326.828715][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.860334][ T9439] netlink: 128 bytes leftover after parsing attributes in process `syz.1.884'. [ 326.871428][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.884'. [ 326.902499][ T6216] bridge_slave_0: left allmulticast mode [ 326.911914][ T6216] bridge_slave_0: left promiscuous mode [ 326.917636][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.001965][ T9445] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 327.145621][ T9455] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 327.181441][ T5825] Bluetooth: hci4: command tx timeout [ 327.214362][ T9458] fuse: Bad value for 'fd' [ 327.275343][ T9458] CIFS mount error: No usable UNC path provided in device string! [ 327.275343][ T9458] [ 327.293686][ T9456] netlink: 'syz.4.885': attribute type 10 has an invalid length. [ 327.439489][ T9458] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.494915][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 327.504999][ T30] audit: type=1400 audit(1766007508.633:481): avc: denied { append } for pid=9460 comm="syz.1.892" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 328.153455][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.165384][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.176862][ T6216] bond0 (unregistering): Released all slaves [ 328.210309][ T9456] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.239689][ T9456] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.284232][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 328.578077][ T9489] netlink: 27 bytes leftover after parsing attributes in process `syz.5.896'. [ 328.704315][ T9496] netlink: 'syz.5.896': attribute type 5 has an invalid length. [ 328.896221][ T30] audit: type=1400 audit(1766007510.033:482): avc: denied { execute } for pid=9506 comm="syz.2.901" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.961225][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.111757][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.115065][ T9518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.257975][ T9416] bridge_slave_0: entered allmulticast mode [ 329.271749][ T5814] Bluetooth: hci4: command tx timeout [ 329.290508][ T9416] bridge_slave_0: entered promiscuous mode [ 329.388462][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.429530][ T9519] binder: 9510:9519 ioctl c00c6211 200000000a40 returned -14 [ 329.437067][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.447657][ T9416] bridge_slave_1: entered allmulticast mode [ 329.457525][ T9416] bridge_slave_1: entered promiscuous mode [ 329.487101][ T6216] hsr_slave_0: left promiscuous mode [ 329.538233][ T6216] hsr_slave_1: left promiscuous mode [ 329.565096][ T9529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.613449][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.637555][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.680454][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.702233][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.865216][ T6216] veth1_macvtap: left promiscuous mode [ 329.875197][ T6216] veth0_macvtap: left promiscuous mode [ 329.885514][ T6216] veth1_vlan: left promiscuous mode [ 329.900935][ T6216] veth0_vlan: left promiscuous mode [ 330.511795][ T5892] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 330.555365][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.563595][ T5814] Bluetooth: hci5: command 0x1003 tx timeout [ 331.171681][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 331.178476][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.190652][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.201110][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 331.214254][ T5946] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 331.225666][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 331.250243][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.277858][ T5892] usb 2-1: config 0 descriptor?? [ 331.351659][ T5825] Bluetooth: hci4: command tx timeout [ 331.430873][ T9553] random: crng reseeded on system resumption [ 331.679880][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 331.694742][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.756615][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.819555][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 331.915682][ T5946] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 331.979905][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.093308][ T5946] usb 5-1: config 0 descriptor?? [ 332.263635][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 332.414948][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 332.420974][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 332.444571][ T5892] usb 2-1: USB disconnect, device number 29 [ 332.517061][ T9560] comedi comedi0: Minor 1 could not be opened [ 332.523907][ T9562] comedi comedi0: Minor 1 could not be opened [ 332.558085][ T6216] team_slave_1 (unregistering): left promiscuous mode [ 332.566630][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 332.633922][ T5946] microsoft 0003:045E:07DA.0014: nested delimiters [ 332.634596][ T9565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.640504][ T5946] microsoft 0003:045E:07DA.0014: item 0 4 2 10 parsing failed [ 332.640995][ T5946] microsoft 0003:045E:07DA.0014: parse failed [ 332.667121][ T5946] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 332.744711][ T6216] team_slave_0 (unregistering): left promiscuous mode [ 332.758094][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 333.299647][ T9571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.461793][ T5825] Bluetooth: hci4: command tx timeout [ 333.704636][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.735204][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.802357][ T9416] team0: Port device team_slave_0 added [ 333.814333][ T9416] team0: Port device team_slave_1 added [ 333.882751][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.889800][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.920102][ T5893] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 333.924785][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.932551][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.950020][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.957052][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.973835][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.983412][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.042711][ T9416] hsr_slave_0: entered promiscuous mode [ 334.049070][ T9416] hsr_slave_1: entered promiscuous mode [ 334.055509][ T9416] debugfs: 'hsr0' already exists in 'hsr' [ 334.061729][ T9416] Cannot create hsr debugfs directory [ 334.101883][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 334.109212][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.130796][ T5893] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.159690][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 334.174086][ T5893] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 334.193422][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.215691][ T5893] usb 2-1: config 0 descriptor?? [ 334.310190][ T9416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.322365][ T9416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.337647][ T9416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.348018][ T9416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.447241][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.469085][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.494158][ T3059] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.501375][ T3059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.524732][ T90] usb 5-1: USB disconnect, device number 35 [ 334.534365][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.541495][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.812626][ T9613] omfs: Invalid superblock (0) [ 334.914412][ T30] audit: type=1400 audit(1766007516.053:483): avc: denied { setopt } for pid=9617 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 335.140848][ T9416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.411561][ T9646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.811143][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 335.887953][ T9416] veth0_vlan: entered promiscuous mode [ 335.913933][ T9416] veth1_vlan: entered promiscuous mode [ 335.974074][ T9416] veth0_macvtap: entered promiscuous mode [ 335.996348][ T9416] veth1_macvtap: entered promiscuous mode [ 336.013983][ T30] audit: type=1400 audit(1766007517.143:484): avc: denied { read } for pid=9661 comm="syz.5.930" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.070979][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.071293][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 336.081844][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.110275][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 336.129830][ T5893] usb 2-1: USB disconnect, device number 30 [ 336.148896][ T30] audit: type=1400 audit(1766007517.153:485): avc: denied { open } for pid=9661 comm="syz.5.930" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.197851][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.225449][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.312294][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.335196][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.018641][ T3151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.036164][ T3151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.068555][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 337.096134][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 337.430507][ T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.455430][ T9679] ceph: No mds server is up or the cluster is laggy [ 337.470485][ T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.177302][ T9715] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 339.445422][ T9724] ip6t_srh: unknown srh match flags FF3F [ 339.511651][ T5989] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 339.541517][ T9722] vlan2: entered promiscuous mode [ 339.726760][ T5989] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 339.746946][ T5989] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 339.752649][ T30] audit: type=1326 audit(1766007520.883:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 339.759581][ T5989] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 339.790988][ T30] audit: type=1326 audit(1766007520.923:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 339.815358][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.823541][ T5989] usb 7-1: Product: syz [ 339.827774][ T5989] usb 7-1: Manufacturer: syz [ 339.833359][ T5989] usb 7-1: SerialNumber: syz [ 339.841792][ T5989] usb 7-1: config 0 descriptor?? [ 339.848565][ T9717] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 339.856037][ T9717] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 340.174156][ T9717] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 340.202332][ T9740] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 340.249691][ T5989] dm9601 7-1:0.0: probe with driver dm9601 failed with error -71 [ 340.359300][ T9745] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 340.361401][ T30] audit: type=1326 audit(1766007520.923:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 340.371716][ T5989] usb 7-1: USB disconnect, device number 2 [ 340.410798][ T9745] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 340.563631][ T30] audit: type=1326 audit(1766007520.923:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 340.587323][ T30] audit: type=1326 audit(1766007520.923:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.160778][ T9745] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 341.168866][ T30] audit: type=1326 audit(1766007520.923:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.373395][ T30] audit: type=1326 audit(1766007520.923:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.403600][ T30] audit: type=1326 audit(1766007520.923:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.431612][ T30] audit: type=1326 audit(1766007520.933:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.462130][ T30] audit: type=1326 audit(1766007520.933:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.515012][ T30] audit: type=1326 audit(1766007520.933:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.540050][ T30] audit: type=1326 audit(1766007520.933:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f847238f749 code=0x7ffc0000 [ 341.646571][ T9764] NFSD: Failed to start, no listeners configured. [ 341.764040][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.774833][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.911462][ T5989] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 342.061515][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 342.067854][ T5989] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 342.079578][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.103839][ T5989] usb 5-1: config 0 descriptor?? [ 342.117061][ T5989] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 342.424136][ T5892] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 342.460239][ T5946] usb 5-1: USB disconnect, device number 36 [ 342.478892][ T9792] 9p: Bad value for 'rfdno' [ 342.505899][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'. [ 342.593143][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.604618][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.626369][ T5892] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 342.636167][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.648784][ T5892] usb 2-1: config 0 descriptor?? [ 343.147385][ T5892] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 343.683601][ T5892] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 343.792124][ T5892] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 344.129591][ T9811] FAULT_INJECTION: forcing a failure. [ 344.129591][ T9811] name failslab, interval 1, probability 0, space 0, times 0 [ 344.142392][ T9811] CPU: 0 UID: 0 PID: 9811 Comm: syz.6.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.142417][ T9811] Tainted: [L]=SOFTLOCKUP [ 344.142423][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.142433][ T9811] Call Trace: [ 344.142438][ T9811] [ 344.142445][ T9811] dump_stack_lvl+0x16c/0x1f0 [ 344.142470][ T9811] should_fail_ex+0x512/0x640 [ 344.142494][ T9811] ? fs_reclaim_acquire+0xae/0x150 [ 344.142517][ T9811] should_failslab+0xc2/0x120 [ 344.142538][ T9811] __kmalloc_noprof+0xeb/0x910 [ 344.142565][ T9811] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 344.142593][ T9811] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 344.142614][ T9811] tomoyo_realpath_from_path+0xc2/0x6e0 [ 344.142638][ T9811] ? tomoyo_profile+0x47/0x60 [ 344.142664][ T9811] tomoyo_path_number_perm+0x245/0x580 [ 344.142682][ T9811] ? tomoyo_path_number_perm+0x237/0x580 [ 344.142704][ T9811] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 344.142724][ T9811] ? find_held_lock+0x2b/0x80 [ 344.142772][ T9811] ? find_held_lock+0x2b/0x80 [ 344.142794][ T9811] ? hook_file_ioctl_common+0x144/0x410 [ 344.142825][ T9811] ? __fget_files+0x20e/0x3c0 [ 344.142854][ T9811] security_file_ioctl+0x9b/0x240 [ 344.142877][ T9811] __x64_sys_ioctl+0xb7/0x210 [ 344.142899][ T9811] do_syscall_64+0xcd/0xf80 [ 344.142921][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.142938][ T9811] RIP: 0033:0x7f3ba8f8f749 [ 344.142953][ T9811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.142969][ T9811] RSP: 002b:00007f3ba9e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.142985][ T9811] RAX: ffffffffffffffda RBX: 00007f3ba91e6180 RCX: 00007f3ba8f8f749 [ 344.142996][ T9811] RDX: 0000200000000080 RSI: 00000000c0045543 RDI: 0000000000000009 [ 344.143006][ T9811] RBP: 00007f3ba9e17090 R08: 0000000000000000 R09: 0000000000000000 [ 344.143015][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.143025][ T9811] R13: 00007f3ba91e6218 R14: 00007f3ba91e6180 R15: 00007ffd859e3f68 [ 344.143049][ T9811] [ 344.353424][ T9811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 345.233507][ T9823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.867486][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.876906][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.013264][ T9822] FAULT_INJECTION: forcing a failure. [ 346.013264][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 346.026736][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.4.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.026763][ T9822] Tainted: [L]=SOFTLOCKUP [ 346.026769][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.026779][ T9822] Call Trace: [ 346.026788][ T9822] [ 346.026795][ T9822] dump_stack_lvl+0x16c/0x1f0 [ 346.026821][ T9822] should_fail_ex+0x512/0x640 [ 346.026851][ T9822] _copy_from_user+0x2e/0xd0 [ 346.026877][ T9822] kstrtouint_from_user+0xd6/0x1d0 [ 346.026896][ T9822] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 346.026914][ T9822] ? __lock_acquire+0x436/0x2890 [ 346.026938][ T9822] ? preempt_schedule_thunk+0x16/0x30 [ 346.026964][ T9822] proc_fail_nth_write+0x83/0x220 [ 346.026983][ T9822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.027008][ T9822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.027024][ T9822] vfs_write+0x2a0/0x11d0 [ 346.027047][ T9822] ? __pfx___mutex_lock+0x10/0x10 [ 346.027073][ T9822] ? __pfx_vfs_write+0x10/0x10 [ 346.027102][ T9822] ? __fget_files+0x20e/0x3c0 [ 346.027134][ T9822] ksys_write+0x12a/0x250 [ 346.027155][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 346.027174][ T9822] ? rcu_is_watching+0x12/0xc0 [ 346.027211][ T9822] do_syscall_64+0xcd/0xf80 [ 346.027235][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.027252][ T9822] RIP: 0033:0x7f60c9b8e1ff [ 346.027266][ T9822] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 346.027282][ T9822] RSP: 002b:00007f60caaa9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 346.027299][ T9822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60c9b8e1ff [ 346.027310][ T9822] RDX: 0000000000000001 RSI: 00007f60caaa90a0 RDI: 0000000000000007 [ 346.027320][ T9822] RBP: 00007f60caaa9090 R08: 0000000000000000 R09: 0000000000000000 [ 346.027329][ T9822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 346.027339][ T9822] R13: 00007f60c9de6218 R14: 00007f60c9de6180 R15: 00007ffe6ed9b1d8 [ 346.027365][ T9822] [ 346.416794][ T9829] fuse: Bad value for 'fd' [ 346.424596][ T5892] cp2112 0003:10C4:EA90.0015: error setting SMBus config [ 346.445259][ T9832] input: syz0 as /devices/virtual/input/input56 [ 346.452049][ T5892] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 346.465271][ T5892] usb 2-1: USB disconnect, device number 31 [ 346.531437][ T5989] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 346.562553][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 346.562566][ T30] audit: type=1400 audit(1766007527.703:511): avc: denied { setattr } for pid=9833 comm="syz.2.973" name="NETLINK" dev="sockfs" ino=25607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.702892][ T5989] usb 7-1: Using ep0 maxpacket: 32 [ 346.783657][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.795145][ T5989] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.808537][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 346.815306][ T5989] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 346.824683][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.852984][ T5989] usb 7-1: config 0 descriptor?? [ 347.776301][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 347.999194][ T9852] xt_socket: unknown flags 0x4c [ 348.541553][ T5976] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 348.547683][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 348.560030][ T5976] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 348.687972][ T30] audit: type=1400 audit(1766007529.803:512): avc: denied { map } for pid=9859 comm="syz.2.982" path="socket:[25504]" dev="sockfs" ino=25504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 348.771574][ T30] audit: type=1326 audit(1766007529.823:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f847238f749 code=0x0 [ 348.879121][ T5989] usbhid 7-1:0.0: can't add hid device: -71 [ 348.888770][ T5989] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 348.976915][ T9875] xt_hashlimit: max too large, truncated to 1048576 [ 348.983859][ T9875] xt_limit: Overflow, try lower: 0/0 [ 349.658295][ T5989] usb 7-1: USB disconnect, device number 3 [ 351.044837][ T9891] netlink: 104 bytes leftover after parsing attributes in process `syz.1.992'. [ 351.603663][ T30] audit: type=1400 audit(1766007532.743:514): avc: denied { getopt } for pid=9896 comm="syz.5.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.625056][ T9897] i2c i2c-0: Invalid block write size 58 [ 351.802345][ T9916] loop2: detected capacity change from 0 to 7 [ 351.828622][ T5995] Dev loop2: unable to read RDB block 7 [ 351.838994][ T5995] loop2: AHDI p1 p2 p3 [ 351.846401][ T5995] loop2: partition table partially beyond EOD, truncated [ 351.853958][ T5995] loop2: p1 start 1601398130 is beyond EOD, truncated [ 351.860746][ T5995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 351.908962][ T9914] vlan2: entered promiscuous mode [ 351.922107][ T9923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=9923 comm=syz.1.1001 [ 351.949511][ T30] audit: type=1400 audit(1766007533.073:515): avc: denied { read } for pid=9918 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.950629][ T9916] Dev loop2: unable to read RDB block 7 [ 351.999791][ T9916] loop2: AHDI p1 p2 p3 [ 352.007565][ T9916] loop2: partition table partially beyond EOD, truncated [ 352.027078][ T9916] loop2: p1 start 1601398130 is beyond EOD, truncated [ 352.492698][ T9916] loop2: p2 start 1702059890 is beyond EOD, truncated [ 352.980401][ T9945] tmpfs: Bad value for 'mpol' [ 353.023641][ T9947] xt_socket: unknown flags 0x4c [ 353.433980][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.511979][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.631827][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.639303][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.762775][T10000] random: crng reseeded on system resumption [ 357.367115][T10009] tmpfs: Bad value for 'mpol' [ 357.413397][T10011] xt_hashlimit: max too large, truncated to 1048576 [ 357.420082][T10011] xt_limit: Overflow, try lower: 0/0 [ 357.622112][ T5871] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 357.687048][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1014'. [ 357.782115][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 357.788721][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 357.798902][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.833265][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 357.907702][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 357.948080][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.009625][ T30] audit: type=1400 audit(1766007539.103:516): avc: denied { append } for pid=10037 comm="syz.6.1027" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.125794][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.260329][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.340634][ T30] audit: type=1400 audit(1766007539.133:517): avc: denied { map } for pid=10037 comm="syz.6.1027" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.628226][ T5871] usb 5-1: GET_CAPABILITIES returned 0 [ 358.642178][ T5871] usbtmc 5-1:16.0: can't read capabilities [ 358.928362][ T5871] usb 5-1: USB disconnect, device number 37 [ 359.930777][T10078] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 360.018415][T10084] gretap2: entered allmulticast mode [ 360.460196][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 360.472614][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 360.486209][T10097] ceph: No mds server is up or the cluster is laggy [ 360.681822][ T849] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 360.799521][T10112] ip6t_srh: unknown srh invflags 7F00 [ 361.275508][ T849] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 361.304385][ T849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.350726][ T849] usb 7-1: Product: syz [ 361.365948][ T849] usb 7-1: Manufacturer: syz [ 361.379266][ T849] usb 7-1: SerialNumber: syz [ 361.467070][ T849] usb 7-1: config 0 descriptor?? [ 361.488994][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 361.510886][T10123] random: crng reseeded on system resumption [ 361.518122][ T849] hso 7-1:0.0: Not our interface [ 361.529948][ T849] usb-storage 7-1:0.0: USB Mass Storage device detected [ 361.616584][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 361.620156][T10128] tmpfs: Bad value for 'mpol' [ 361.731997][T10123] netlink: 'syz.4.1046': attribute type 4 has an invalid length. [ 362.022717][T10131] syzkaller0: entered promiscuous mode [ 362.037352][T10131] syzkaller0: entered allmulticast mode [ 363.674589][T10140] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 363.740320][T10140] bond1 (unregistering): Released all slaves [ 364.014841][ T5893] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 364.389030][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.499011][T10165] omfs: Invalid superblock (0) [ 364.583681][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 364.596111][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 364.607447][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 364.621875][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.640447][ T5893] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 364.649805][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 364.699562][ T5893] usb 5-1: Product: syz [ 364.705785][ T5893] usb 5-1: Manufacturer: syz [ 364.710656][ T5893] usb 5-1: SerialNumber: syz [ 364.717283][T10167] ceph: No mds server is up or the cluster is laggy [ 364.724165][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 364.731493][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 364.746191][ T5893] usb 5-1: config 0 descriptor?? [ 364.799284][T10172] No source specified [ 364.875215][ T849] usb 7-1: USB disconnect, device number 4 [ 364.971469][ T5893] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 364.978296][ T5893] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 365.091996][T10183] xt_connbytes: Forcing CT accounting to be enabled [ 365.104668][T10183] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 365.921963][ T5893] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 365.933975][ T5893] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 365.944664][ T5893] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 366.237812][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.246501][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.272062][T10194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.599380][T10198] omfs: Invalid superblock (0) [ 366.959190][ T5893] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 367.082633][T10206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.487983][ T5976] usb 5-1: USB disconnect, device number 38 [ 368.216112][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 368.223253][ T5893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.233479][ T5893] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.247378][ T5893] usb 7-1: config 0 interface 0 has no altsetting 0 [ 368.257845][ T5893] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 368.275119][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.327395][ T5893] usb 7-1: config 0 descriptor?? [ 368.373381][T10218] sctp: [Deprecated]: syz.4.1070 (pid 10218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.373381][T10218] Use struct sctp_sack_info instead [ 368.545694][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.574262][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.410842][T10231] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 369.681028][ T5893] usbhid 7-1:0.0: can't add hid device: -71 [ 369.696541][ T5893] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 369.718622][ T5893] usb 7-1: USB disconnect, device number 5 [ 370.006494][T10237] team_slave_0: entered promiscuous mode [ 370.012493][T10237] team_slave_1: entered promiscuous mode [ 370.050252][T10237] vlan2: entered promiscuous mode [ 370.157183][T10237] team0: entered promiscuous mode [ 370.165170][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 371.775118][ T30] audit: type=1400 audit(1766007552.913:518): avc: denied { ioctl } for pid=10267 comm="syz.5.1086" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 371.902814][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 372.004836][T10274] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 372.241503][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 372.248638][ T5892] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 372.261901][ T5892] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.274969][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.288447][ T5892] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 372.310735][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.330775][ T5892] usb 7-1: config 0 descriptor?? [ 372.595261][ T30] audit: type=1800 audit(1766007553.733:519): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1091" name="bus" dev="ramfs" ino=27149 res=0 errno=0 [ 372.772399][ T5892] asus 0003:0B05:1ABE.0016: item fetching failed at offset 0/5 [ 372.784098][ T5892] asus 0003:0B05:1ABE.0016: Asus hid parse failed: -22 [ 372.791018][ T5892] asus 0003:0B05:1ABE.0016: probe with driver asus failed with error -22 [ 372.875386][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 372.931294][T10292] input: syz1 as /devices/virtual/input/input58 [ 372.962848][ T5976] usb 7-1: USB disconnect, device number 6 [ 373.181408][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 373.372040][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 373.382280][ T9] usb 2-1: config 1 has an invalid interface number: 96 but max is 0 [ 373.412290][ T9] usb 2-1: config 1 has no interface number 0 [ 373.418588][ T9] usb 2-1: config 1 interface 96 has no altsetting 0 [ 373.501565][T10300] random: crng reseeded on system resumption [ 373.720664][ T9] usb 2-1: New USB device found, idVendor=1e5f, idProduct=a800, bcdDevice=77.d3 [ 374.131268][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.625680][ T9] usb 2-1: Product: syz [ 374.883503][ T9] usb 2-1: Manufacturer: syz [ 375.173891][ T9] usb 2-1: SerialNumber: syz [ 375.347665][T10302] CIFS mount error: No usable UNC path provided in device string! [ 375.347665][T10302] [ 375.397514][T10302] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.547190][T10310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1101'. [ 376.175790][T10315] netlink: 'syz.2.1102': attribute type 4 has an invalid length. [ 376.255660][ T30] audit: type=1400 audit(1766007557.393:520): avc: denied { remount } for pid=10314 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.300358][T10316] netlink: 'syz.2.1102': attribute type 4 has an invalid length. [ 376.312741][T10318] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 377.242582][T10330] netlink: 4224 bytes leftover after parsing attributes in process `syz.4.1107'. [ 377.351280][ T9] usb 2-1: USB disconnect, device number 32 [ 378.033592][T10338] Cannot find del_set index 4 as target [ 378.198372][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.218433][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.257608][ T30] audit: type=1400 audit(1766007559.153:521): avc: denied { write } for pid=10335 comm="syz.4.1109" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 379.106530][T10352] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 379.351367][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1111'. [ 380.604709][T10353] kvm: pic: non byte write [ 380.772254][T10353] kvm: pic: non byte write [ 381.334637][T10394] random: crng reseeded on system resumption [ 381.363319][T10395] xt_hashlimit: max too large, truncated to 1048576 [ 381.370036][T10395] xt_limit: Overflow, try lower: 0/0 [ 381.409825][T10378] NFSD: Failed to start, no listeners configured. [ 382.285820][T10385] NFSD: Failed to start, no listeners configured. [ 382.577423][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 382.614145][ T30] audit: type=1400 audit(1766007563.753:522): avc: denied { accept } for pid=10413 comm="syz.5.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 382.618661][T10414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1130'. [ 382.650253][T10414] veth1_macvtap: left promiscuous mode [ 382.767878][T10420] program syz.1.1133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.788227][ T5892] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 385.094846][ T30] audit: type=1400 audit(1766007566.233:523): avc: denied { accept } for pid=10432 comm="syz.1.1135" lport=50261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.408627][T10440] xt_hashlimit: max too large, truncated to 1048576 [ 385.419073][T10440] xt_limit: Overflow, try lower: 0/0 [ 385.424583][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 385.509420][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 385.535050][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.566195][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 385.575884][T10444] binder_alloc: 10442: binder_alloc_buf size 18544 failed, no address space [ 385.598209][T10444] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 385.615671][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 385.656426][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 385.791282][ T5892] usb 7-1: string descriptor 0 read error: -71 [ 385.811134][ T5892] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 386.117917][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.138202][ T5892] usb 7-1: config 0 descriptor?? [ 386.263454][ T5892] usb 7-1: can't set config #0, error -71 [ 386.289210][ T5892] usb 7-1: USB disconnect, device number 7 [ 386.430760][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1143'. [ 386.757707][T10468] xt_socket: unknown flags 0x4c [ 387.426386][T10474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 388.488961][T10495] input: syz0 as /devices/virtual/input/input59 [ 388.505161][ T30] audit: type=1400 audit(1766007569.603:524): avc: denied { open } for pid=10491 comm="syz.6.1154" path="/dev/ttyr0" dev="devtmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 388.583097][T10493] xt_hashlimit: max too large, truncated to 1048576 [ 388.589801][T10493] xt_limit: Overflow, try lower: 0/0 [ 388.624416][ T30] audit: type=1400 audit(1766007569.763:525): avc: denied { checkpoint_restore } for pid=10496 comm="syz.4.1155" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 388.625560][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1155'. [ 388.659390][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1155'. [ 388.661558][T10499] tmpfs: Bad value for 'mpol' [ 388.725180][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.749804][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.776612][ T30] audit: type=1400 audit(1766007569.913:526): avc: denied { setopt } for pid=10501 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.805896][ T30] audit: type=1400 audit(1766007569.913:527): avc: denied { listen } for pid=10501 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.805947][T10504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1158'. [ 388.841189][ T30] audit: type=1400 audit(1766007569.913:528): avc: denied { accept } for pid=10501 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.882405][ T30] audit: type=1400 audit(1766007570.023:529): avc: denied { create } for pid=10506 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 388.902777][ T30] audit: type=1400 audit(1766007570.043:530): avc: denied { ioctl } for pid=10506 comm="syz.4.1159" path="socket:[27529]" dev="sockfs" ino=27529 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 388.933923][T10507] netlink: 'syz.4.1159': attribute type 83 has an invalid length. [ 388.968516][T10512] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1160'. [ 388.977785][T10512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 389.540835][T10518] vlan2: entered promiscuous mode [ 389.592989][T10525] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1164'. [ 389.602124][T10525] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1164'. [ 390.309521][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.318579][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.328747][T10545] IPVS: length: 100 != 24 [ 390.786243][T10548] xt_hashlimit: max too large, truncated to 1048576 [ 390.793048][T10548] xt_limit: Overflow, try lower: 0/0 [ 390.991848][T10556] ip6t_srh: unknown srh invflags 7F00 [ 391.493579][T10565] tipc: Started in network mode [ 391.498473][T10565] tipc: Node identity be587a73ab01, cluster identity 4711 [ 391.540233][T10565] tipc: Enabled bearer , priority 0 [ 391.590756][T10565] syzkaller0: entered promiscuous mode [ 391.633623][T10565] syzkaller0: entered allmulticast mode [ 391.686937][ T30] audit: type=1400 audit(1766007572.823:531): avc: denied { shutdown } for pid=10568 comm="syz.4.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 391.724881][T10573] input: syz0 as /devices/virtual/input/input60 [ 391.936809][T10574] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1175'. [ 391.937412][T10571] tipc: Resetting bearer [ 392.000535][T10564] tipc: Resetting bearer [ 392.023259][ T30] audit: type=1400 audit(1766007573.163:532): avc: denied { watch watch_reads } for pid=10576 comm="syz.1.1181" path="/250/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 392.174980][T10564] tipc: Disabling bearer [ 393.091125][T10592] No control pipe specified [ 393.097284][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1184'. [ 394.456425][ T30] audit: type=1400 audit(1766007575.293:533): avc: denied { name_bind } for pid=10595 comm="syz.4.1187" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 394.536473][T10603] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1190'. [ 394.571735][T10603] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1190'. [ 394.701228][T10611] xt_hashlimit: max too large, truncated to 1048576 [ 394.714327][T10611] xt_limit: Overflow, try lower: 0/0 [ 394.721431][T10610] random: crng reseeded on system resumption [ 395.492041][ T5878] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 395.630033][T10615] xt_hashlimit: max too large, truncated to 1048576 [ 395.636766][T10615] xt_limit: Overflow, try lower: 0/0 [ 395.698375][T10619] tipc: Enabled bearer , priority 0 [ 395.705805][T10619] syzkaller0: entered promiscuous mode [ 395.711269][T10619] syzkaller0: entered allmulticast mode [ 395.712769][ T5878] usb 5-1: config index 0 descriptor too short (expected 41, got 33) [ 395.725955][T10619] tipc: Resetting bearer [ 395.733136][T10618] tipc: Resetting bearer [ 395.741150][ T5878] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 395.774186][ T5878] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 395.792833][T10618] tipc: Disabling bearer [ 395.801803][ T5878] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 395.827950][ T5878] usb 5-1: config 1 interface 0 has no altsetting 0 [ 395.836686][ T5878] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 395.845943][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.854043][ T5878] usb 5-1: Product: syz [ 395.858268][ T5878] usb 5-1: Manufacturer: syz [ 395.862933][ T5878] usb 5-1: SerialNumber: syz [ 395.870304][T10598] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 395.956273][ T30] audit: type=1400 audit(1766007577.093:534): avc: denied { ioctl } for pid=10633 comm="syz.6.1200" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 396.103348][ T5878] rtl8150 5-1:1.0: couldn't find required endpoints [ 396.137358][ T5878] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 396.173210][ T5878] usb 5-1: USB disconnect, device number 39 [ 396.292701][ T30] audit: type=1326 audit(1766007577.433:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.6.1203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ba8f8f749 code=0x0 [ 396.461493][ T90] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 396.639808][ T90] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 396.648292][ T90] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.658653][ T90] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.671037][ T90] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 396.683162][ T90] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 396.691239][ T90] usb 2-1: Manufacturer: syz [ 396.698149][ T90] usb 2-1: config 0 descriptor?? [ 397.098408][ T5892] usb 2-1: USB disconnect, device number 33 [ 398.057137][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 398.066139][T10673] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1209'. [ 398.077042][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 398.086523][T10673] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1209'. [ 398.095657][T10673] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1209'. [ 398.685779][ T30] audit: type=1400 audit(1766007579.823:536): avc: denied { mounton } for pid=10692 comm="syz.6.1216" path="/48/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 398.724265][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1216'. [ 399.158185][T10699] omfs: Invalid superblock (0) [ 399.598313][T10703] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1221'. [ 399.915954][T10722] tmpfs: Bad value for 'mpol' [ 400.002046][ T5892] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 400.176449][ T5892] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.214637][ T5892] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.228129][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.235045][ T5892] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 400.248032][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.287051][ T5892] usb 2-1: config 0 descriptor?? [ 400.452722][ T90] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 400.691691][ T90] usb 5-1: Using ep0 maxpacket: 8 [ 400.698435][ T90] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.710471][ T90] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.720226][ T90] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 400.732028][ T90] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 400.902518][ T5892] holtek 0003:1241:5015.0017: report_id 3403305863 is invalid [ 400.929316][ T5892] holtek 0003:1241:5015.0017: item 0 4 1 8 parsing failed [ 401.014288][ T90] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.027395][ T90] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.036442][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.071212][ T5892] holtek 0003:1241:5015.0017: parse failed [ 401.077406][ T5892] holtek 0003:1241:5015.0017: probe with driver holtek failed with error -22 [ 401.110401][ T5892] usb 2-1: USB disconnect, device number 34 [ 401.289832][ T90] usb 5-1: GET_CAPABILITIES returned 0 [ 401.295540][ T90] usbtmc 5-1:16.0: can't read capabilities [ 401.494999][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.504078][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.513141][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.522197][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.531225][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.540251][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.549281][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.558318][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.567346][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.576377][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.586102][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.595162][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.604196][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.613229][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.622259][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.631739][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 401.646936][ T90] usb 5-1: USB disconnect, device number 40 [ 401.800517][ T30] audit: type=1400 audit(1766007582.933:537): avc: denied { load_policy } for pid=10743 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 401.850927][ T30] audit: type=1400 audit(1766007582.983:538): avc: denied { map } for pid=10743 comm="syz.1.1236" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.874960][ T30] audit: type=1400 audit(1766007582.983:539): avc: denied { execute } for pid=10743 comm="syz.1.1236" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 402.124776][T10744] SELinux: failed to load policy [ 402.900171][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 402.921108][T10754] No such timeout policy "syz1" [ 402.931948][T10754] No control pipe specified [ 402.937360][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 403.225344][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 403.234526][T10761] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1240'. [ 403.246953][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 403.257240][T10761] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1240'. [ 403.266378][T10761] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1240'. [ 403.728015][T10771] xt_socket: unknown flags 0x4c [ 404.203423][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 404.358065][T10780] omfs: Invalid superblock (0) [ 404.771583][ T30] audit: type=1400 audit(1766007585.913:540): avc: denied { ioctl } for pid=10785 comm="syz.4.1248" path="/dev/ttyqc" dev="devtmpfs" ino=387 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 404.836182][ T30] audit: type=1400 audit(1766007585.913:541): avc: denied { append } for pid=10785 comm="syz.4.1248" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 405.101421][ T5871] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 405.775275][T10804] random: crng reseeded on system resumption [ 405.897849][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.932950][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.024331][ T5871] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 406.054367][ T5871] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 406.089524][ T5871] usb 7-1: Manufacturer: syz [ 406.155776][ T5871] usb 7-1: config 0 descriptor?? [ 406.422778][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.441664][ T849] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 406.462103][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.386868][ T849] usb 2-1: Using ep0 maxpacket: 16 [ 407.515003][ T849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.528959][ T849] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.562630][ T849] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 407.581832][ T849] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 407.600233][ T849] usb 2-1: Product: syz [ 407.608326][ T5871] usbhid 7-1:0.0: can't add hid device: -71 [ 407.621941][ T5871] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 407.632153][ T849] usb 2-1: Manufacturer: syz [ 407.639794][ T849] usb 2-1: SerialNumber: syz [ 407.657493][ T5871] usb 7-1: USB disconnect, device number 8 [ 407.665968][ T849] usb 2-1: config 0 descriptor?? [ 407.695489][T10818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'. [ 407.705821][T10818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'. [ 407.772480][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 408.898911][ T30] audit: type=1400 audit(1766007590.033:542): avc: denied { getopt } for pid=10822 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 409.813376][ T9] usb 2-1: USB disconnect, device number 35 [ 409.997666][T10841] xt_hashlimit: max too large, truncated to 1048576 [ 410.012191][T10841] xt_limit: Overflow, try lower: 0/0 [ 410.928493][T10854] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1270'. [ 410.942431][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1270'. [ 411.132302][ T30] audit: type=1400 audit(1766007592.213:543): avc: denied { read write } for pid=10848 comm="syz.4.1268" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 411.364033][ T30] audit: type=1400 audit(1766007592.223:544): avc: denied { open } for pid=10848 comm="syz.4.1268" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 411.429503][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1262'. [ 411.460055][T10864] tmpfs: Bad value for 'mpol' [ 411.471116][ T5871] usb 6-1: USB disconnect, device number 6 [ 411.495328][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 411.538233][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 411.551843][ T5892] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 411.603107][ T30] audit: type=1400 audit(1766007592.743:545): avc: denied { write } for pid=10863 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 411.712598][ T5892] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 411.720823][ T5892] usb 5-1: config 0 has no interface number 0 [ 411.721383][ T5989] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 411.727705][ T5892] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 411.746104][ T5892] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 411.757947][ T5892] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 411.766989][ T5892] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 411.775840][ T5892] usb 5-1: Product: syz [ 411.779978][ T5892] usb 5-1: Manufacturer: syz [ 411.784644][ T849] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 411.792395][ T5892] usb 5-1: SerialNumber: syz [ 411.801023][ T5892] usb 5-1: config 0 descriptor?? [ 411.807418][ T5892] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 411.815139][ T5892] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 411.824190][ T5892] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 411.832757][ T5892] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 411.841829][ T5892] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 411.852428][ T5892] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 411.861751][ T5892] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 411.870466][ T5892] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 411.879758][ T5892] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 411.888304][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 411.894035][ T5892] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 411.897725][ T5989] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.912206][ T5989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.932064][ T5989] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 411.965692][ T5989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 411.976627][ T5989] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.982338][ T849] usb 7-1: Using ep0 maxpacket: 16 [ 411.990278][ T5989] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.997041][ T849] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 412.017258][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.076096][ T849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.085902][ T849] usb 7-1: config 0 descriptor?? [ 412.230643][ T5989] usb 2-1: GET_CAPABILITIES returned 0 [ 412.237886][ T5989] usbtmc 2-1:16.0: can't read capabilities [ 412.300405][ T849] usbhid 7-1:0.0: can't add hid device: -71 [ 412.323717][ T849] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 412.334857][T10867] bond1: entered promiscuous mode [ 412.347291][T10867] bond1: entered allmulticast mode [ 412.352898][ T849] usb 7-1: USB disconnect, device number 9 [ 412.364320][T10874] cgroup: subsys name conflicts with all [ 412.377871][T10867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.459980][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.469082][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.478107][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.487129][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.496147][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.506067][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.515109][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.524129][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.533157][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.542173][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.551191][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.560213][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.569230][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.619654][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.628911][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.630876][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 412.637986][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 412.764643][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1276'. [ 413.008580][ T849] usb 2-1: USB disconnect, device number 36 [ 413.423616][T10882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 413.437013][ T5989] usb 5-1: USB disconnect, device number 41 [ 413.455152][ T5989] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 413.734740][ T5989] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 413.757749][ T5989] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 413.780132][ T5989] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 413.817159][ T5989] keyspan 5-1:0.107: device disconnected [ 413.850445][T10887] tmpfs: Bad value for 'mpol' [ 414.195300][T10900] ip6t_srh: unknown srh invflags 7F00 [ 414.708519][T10907] No such timeout policy "syz1" [ 414.717721][T10907] No control pipe specified [ 414.724057][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 415.074722][T10909] binder: BINDER_SET_CONTEXT_MGR already set [ 415.089030][T10909] binder: 10908:10909 ioctl 4018620d 2000000002c0 returned -16 [ 415.261594][T10916] NFSD: Failed to start, no listeners configured. [ 415.486567][T10925] ip6t_srh: unknown srh match flags FF3F [ 416.082024][T10934] NFSD: Failed to start, no listeners configured. [ 418.281568][ T30] audit: type=1400 audit(1766007599.383:546): avc: denied { bind } for pid=10957 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 421.150690][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1307'. [ 421.467321][T10977] ip6t_srh: unknown srh invflags 7F00 [ 422.224957][ T30] audit: type=1400 audit(1766007603.363:547): avc: denied { read } for pid=10984 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 422.276957][ T30] audit: type=1400 audit(1766007603.413:548): avc: denied { shutdown } for pid=10984 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 422.824866][T10988] CIFS mount error: No usable UNC path provided in device string! [ 422.824866][T10988] [ 422.834917][T10988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 424.465034][T11006] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1321'. [ 426.075867][T11020] CIFS mount error: No usable UNC path provided in device string! [ 426.075867][T11020] [ 426.088193][T11020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 426.153669][T11023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.582570][ T30] audit: type=1400 audit(1766007608.723:549): avc: denied { shutdown } for pid=11030 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.176416][ T9] libceph: connect (1)[c::]:6789 error -101 [ 428.182610][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 428.189500][ T9] libceph: connect (1)[c::]:6789 error -101 [ 428.195998][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 428.221164][T11037] ceph: No mds server is up or the cluster is laggy [ 431.361699][T11054] overlayfs: failed to clone upperpath [ 435.873987][T11076] ip6t_srh: unknown srh invflags 7F00 [ 437.458237][T11084] CIFS mount error: No usable UNC path provided in device string! [ 437.458237][T11084] [ 437.468360][T11084] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 437.576610][T11096] overlayfs: missing 'lowerdir' [ 437.636712][T11103] overlayfs: failed to resolve './file1': -2 [ 439.504733][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.512081][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.856852][ T30] audit: type=1400 audit(1766007620.993:550): avc: denied { getopt } for pid=11124 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 441.295009][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 441.303900][T11134] netlink: 'syz.2.1360': attribute type 11 has an invalid length. [ 441.316804][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 441.325689][T11134] netlink: 'syz.2.1360': attribute type 11 has an invalid length. [ 441.334708][ T363] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.344529][ T363] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.353797][ T363] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.370174][ T363] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.483454][T11144] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 444.723543][T11148] No such timeout policy "syz1" [ 444.734710][T11148] No control pipe specified [ 444.741940][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 445.448110][T11152] xt_hashlimit: max too large, truncated to 1048576 [ 445.455348][T11152] xt_limit: Overflow, try lower: 0/0 [ 446.984943][T11162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1369'. [ 446.994428][T11162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 447.228820][T11166] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 447.252208][T11166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.265948][T11166] team0: Port device bond0 added [ 449.470566][T11186] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 450.422720][T11194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1382'. [ 450.432960][T11194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1382'. [ 452.997071][T11208] No such timeout policy "syz1" [ 453.011136][T11208] No control pipe specified [ 453.017464][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 453.677646][T11210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35596 sclass=netlink_route_socket pid=11210 comm=syz.2.1387 [ 457.545208][T11232] overlayfs: failed to clone lowerpath [ 466.543719][T11258] netlink: 'syz.2.1401': attribute type 1 has an invalid length. [ 466.585503][T11261] veth0_vlan: entered allmulticast mode [ 476.304262][T11305] tipc: Enabling of bearer rejected, failed to enable media [ 479.480822][T11319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'. [ 483.438920][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'. [ 483.622669][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 484.989710][T11344] x_tables: unsorted entry at hook 2 [ 485.885939][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 485.895942][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 485.918810][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 485.927846][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 500.943587][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.949915][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 550.221434][ T31] INFO: task kworker/1:11:6582 blocked for more than 143 seconds. [ 550.229271][ T31] Tainted: G L syzkaller #0 [ 550.239965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.248743][ T31] task:kworker/1:11 state:D stack:22648 pid:6582 tgid:6582 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 550.260791][ T31] Workqueue: events rfkill_sync_work [ 550.266130][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 550.269399][ T31] [ 550.272383][ T31] ? __schedule+0x10b9/0x6150 [ 550.291731][ T31] __schedule+0x1139/0x6150 [ 550.296257][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 550.321364][ T31] ? __pfx___schedule+0x10/0x10 [ 550.326230][ T31] ? find_held_lock+0x2b/0x80 [ 550.330908][ T31] ? schedule+0x2d7/0x3a0 [ 550.344652][ T31] schedule+0xe7/0x3a0 [ 550.348737][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.354316][ T31] __mutex_lock+0xc69/0x1ca0 [ 550.358914][ T31] ? nfc_dev_down+0x2d/0x310 [ 550.364396][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.369428][ T31] ? __lock_acquire+0x436/0x2890 [ 550.374650][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 550.379684][ T31] ? nfc_dev_down+0x2d/0x310 [ 550.384706][ T31] ? mark_held_locks+0x49/0x80 [ 550.389470][ T31] nfc_dev_down+0x2d/0x310 [ 550.393955][ T31] nfc_rfkill_set_block+0x39/0x110 [ 550.399071][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 550.404796][ T31] rfkill_set_block+0x1fe/0x550 [ 550.409647][ T31] rfkill_sync+0x10a/0x1c0 [ 550.414084][ T31] rfkill_sync_work+0x27/0x40 [ 550.418752][ T31] process_one_work+0x9ba/0x1b20 [ 550.423728][ T31] ? __pfx_process_one_work+0x10/0x10 [ 550.429096][ T31] ? assign_work+0x1a0/0x250 [ 550.433736][ T31] worker_thread+0x6c8/0xf10 [ 550.438323][ T31] ? __kthread_parkme+0x19e/0x250 [ 550.443360][ T31] ? __pfx_worker_thread+0x10/0x10 [ 550.448460][ T31] kthread+0x3c5/0x780 [ 550.452635][ T31] ? __pfx_kthread+0x10/0x10 [ 550.457228][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.462037][ T31] ? __pfx_kthread+0x10/0x10 [ 550.466621][ T31] ret_from_fork+0x983/0xb10 [ 550.471208][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.476392][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.481153][ T31] ? __switch_to+0x7af/0x10d0 [ 550.485842][ T31] ? __pfx_kthread+0x10/0x10 [ 550.490421][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.495220][ T31] [ 550.498257][ T31] INFO: task kworker/1:12:8569 blocked for more than 143 seconds. [ 550.506131][ T31] Tainted: G L syzkaller #0 [ 550.512639][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.521328][ T31] task:kworker/1:12 state:D stack:22472 pid:8569 tgid:8569 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 550.533335][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 550.539993][ T31] Call Trace: [ 550.543283][ T31] [ 550.546200][ T31] ? __schedule+0x10b9/0x6150 [ 550.550852][ T31] __schedule+0x1139/0x6150 [ 550.555366][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 550.560731][ T31] ? __pfx___schedule+0x10/0x10 [ 550.565599][ T31] ? find_held_lock+0x2b/0x80 [ 550.570271][ T31] ? schedule+0x2d7/0x3a0 [ 550.574607][ T31] schedule+0xe7/0x3a0 [ 550.578670][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.584157][ T31] __mutex_lock+0xc69/0x1ca0 [ 550.588743][ T31] ? register_lock_class+0x41/0x4b0 [ 550.593951][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 550.600266][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.605293][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 550.610484][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 550.616289][ T31] ? finish_task_switch.isra.0+0x202/0xbd0 [ 550.622518][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 550.628845][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 550.635006][ T31] process_one_work+0x9ba/0x1b20 [ 550.639941][ T31] ? __pfx_process_one_work+0x10/0x10 [ 550.645330][ T31] ? assign_work+0x1a0/0x250 [ 550.649927][ T31] worker_thread+0x6c8/0xf10 [ 550.654522][ T31] ? __kthread_parkme+0x19e/0x250 [ 550.659536][ T31] ? __pfx_worker_thread+0x10/0x10 [ 550.664674][ T31] kthread+0x3c5/0x780 [ 550.668733][ T31] ? __pfx_kthread+0x10/0x10 [ 550.673318][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.678068][ T31] ? __pfx_kthread+0x10/0x10 [ 550.682668][ T31] ret_from_fork+0x983/0xb10 [ 550.687248][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.692366][ T31] ? __switch_to+0x7af/0x10d0 [ 550.697038][ T31] ? __pfx_kthread+0x10/0x10 [ 550.701666][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.706440][ T31] [ 550.709463][ T31] INFO: task syz.5.1202:10643 blocked for more than 143 seconds. [ 550.718975][ T31] Tainted: G L syzkaller #0 [ 550.725481][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.734137][ T31] task:syz.5.1202 state:D stack:28408 pid:10643 tgid:10643 ppid:7919 task_flags:0x400040 flags:0x00080002 [ 550.746065][ T31] Call Trace: [ 550.749317][ T31] [ 550.752240][ T31] ? __schedule+0x10b9/0x6150 [ 550.756907][ T31] __schedule+0x1139/0x6150 [ 550.761416][ T31] ? __lock_acquire+0x436/0x2890 [ 550.766348][ T31] ? kmem_cache_free+0x2d8/0x770 [ 550.771262][ T31] ? __pfx___schedule+0x10/0x10 [ 550.776121][ T31] ? find_held_lock+0x2b/0x80 [ 550.780784][ T31] ? schedule+0x2d7/0x3a0 [ 550.785138][ T31] schedule+0xe7/0x3a0 [ 550.789194][ T31] schedule_timeout+0x257/0x290 [ 550.794061][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 550.799424][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.804640][ T31] __wait_for_common+0x2fc/0x4e0 [ 550.809569][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 550.814956][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 550.820417][ T31] ? find_held_lock+0x2b/0x80 [ 550.825131][ T31] ? __flush_work+0x938/0xcc0 [ 550.829811][ T31] ? __flush_work+0x4d0/0xcc0 [ 550.834504][ T31] __flush_work+0x7d7/0xcc0 [ 550.839000][ T31] ? __pfx___flush_work+0x10/0x10 [ 550.844052][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 550.849340][ T31] ? __pfx___might_resched+0x10/0x10 [ 550.854636][ T31] cancel_work_sync+0xd1/0xf0 [ 550.859306][ T31] rfkill_unregister+0x95/0x2c0 [ 550.864172][ T31] nfc_unregister_device+0x94/0x390 [ 550.869376][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 550.875093][ T31] virtual_ncidev_close+0x4b/0xa0 [ 550.880116][ T31] __fput+0x402/0xb70 [ 550.884106][ T31] task_work_run+0x150/0x240 [ 550.888694][ T31] ? __pfx_task_work_run+0x10/0x10 [ 550.893809][ T31] ? __do_sys_close_range+0x278/0x730 [ 550.899187][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 550.904482][ T31] do_syscall_64+0x4ee/0xf80 [ 550.909064][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.914950][ T31] RIP: 0033:0x7f3abe58f749 [ 550.919353][ T31] RSP: 002b:00007ffc193e07d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 550.927782][ T31] RAX: 0000000000000000 RBX: 0000000000060b5f RCX: 00007f3abe58f749 [ 550.935758][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 550.943876][ T31] RBP: 00007f3abe7e7da0 R08: 0000000000000001 R09: 0000000c193e0acf [ 550.951858][ T31] R10: 0000001b32b20000 R11: 0000000000000246 R12: 00007f3abe7e5fac [ 550.959815][ T31] R13: 00007f3abe7e5fa0 R14: ffffffffffffffff R15: 00007ffc193e08f0 [ 550.967845][ T31] [ 550.970866][ T31] [ 550.970866][ T31] Showing all locks held in the system: [ 550.979819][ T31] 1 lock held by khungtaskd/31: [ 550.984686][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 550.994552][ T31] 2 locks held by getty/5575: [ 550.999194][ T31] #0: ffff88814dc3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 551.008945][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 551.019057][ T31] 4 locks held by kworker/1:11/6582: [ 551.024372][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 551.034821][ T31] #1: ffffc9001b197c90 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 551.046560][ T31] #2: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 551.056483][ T31] #3: ffff88804c6f0100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x310 [ 551.065443][ T31] 3 locks held by kworker/1:12/8569: [ 551.070704][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 551.081170][ T31] #1: ffffc9000b537c90 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 551.094092][ T31] #2: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 551.105534][ T31] 1 lock held by syz.5.1202/10643: [ 551.110633][ T31] #0: ffff88804c6f0100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x390 [ 551.120433][ T31] 2 locks held by syz-executor/10868: [ 551.125801][ T31] #0: ffff888029139918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 551.135205][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 551.145146][ T31] 3 locks held by syz.4.1288/10911: [ 551.150314][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.158754][ T31] #1: ffff8880351f2100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x410 [ 551.168351][ T31] #2: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 551.178380][ T31] 1 lock held by syz.6.1289/10918: [ 551.183556][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.192002][ T31] 1 lock held by syz.1.1295/10933: [ 551.197094][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.205552][ T31] 1 lock held by syz-executor/11049: [ 551.210819][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.219281][ T31] 1 lock held by syz-executor/11050: [ 551.224589][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.233067][ T31] 1 lock held by syz-executor/11052: [ 551.238336][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.246814][ T31] 1 lock held by syz-executor/11286: [ 551.252099][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.260508][ T31] 3 locks held by syz.2.1433/11353: [ 551.265715][ T31] #0: ffffffff901e7f50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 551.273908][ T31] #1: ffffffff901e8008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 551.282870][ T31] #2: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 551.292796][ T31] 1 lock held by syz-executor/11361: [ 551.298048][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.306479][ T31] 1 lock held by syz-executor/11362: [ 551.311763][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.320172][ T31] 1 lock held by syz-executor/11364: [ 551.325454][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.333937][ T31] 1 lock held by syz-executor/11366: [ 551.339192][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.347765][ T31] 1 lock held by syz-executor/11368: [ 551.353151][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 551.361635][ T31] [ 551.363948][ T31] ============================================= [ 551.363948][ T31] [ 551.372378][ T31] NMI backtrace for cpu 1 [ 551.372392][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 551.372414][ T31] Tainted: [L]=SOFTLOCKUP [ 551.372419][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.372429][ T31] Call Trace: [ 551.372434][ T31] [ 551.372440][ T31] dump_stack_lvl+0x116/0x1f0 [ 551.372463][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 551.372491][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.372511][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 551.372539][ T31] sys_info+0x133/0x180 [ 551.372561][ T31] watchdog+0xe66/0x1180 [ 551.372584][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.372600][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.372615][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.372638][ T31] ? __kthread_parkme+0x19e/0x250 [ 551.372656][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.372673][ T31] kthread+0x3c5/0x780 [ 551.372692][ T31] ? __pfx_kthread+0x10/0x10 [ 551.372713][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.372729][ T31] ? __pfx_kthread+0x10/0x10 [ 551.372749][ T31] ret_from_fork+0x983/0xb10 [ 551.372769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.372790][ T31] ? __switch_to+0x7af/0x10d0 [ 551.372820][ T31] ? __pfx_kthread+0x10/0x10 [ 551.372841][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.372876][ T31] [ 551.372882][ T31] Sending NMI from CPU 1 to CPUs 0: [ 551.512437][ C0] NMI backtrace for cpu 0 [ 551.512452][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.512471][ C0] Tainted: [L]=SOFTLOCKUP [ 551.512475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.512482][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 551.512502][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 551.512514][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 551.512525][ C0] RAX: 00000000020fa5c9 RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 551.512533][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: ffffffff8bf2b380 [ 551.512540][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 551.512549][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 551.512557][ C0] R13: ffffffff8e097b40 R14: ffffffff9088afd0 R15: 0000000000000000 [ 551.512565][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 551.512578][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.512586][ C0] CR2: 00007ffdd1e6effc CR3: 000000000e184000 CR4: 00000000003526f0 [ 551.512594][ C0] Call Trace: [ 551.512598][ C0] [ 551.512603][ C0] default_idle+0x13/0x20 [ 551.512620][ C0] default_idle_call+0x6c/0xb0 [ 551.512636][ C0] do_idle+0x38d/0x510 [ 551.512655][ C0] ? __pfx_do_idle+0x10/0x10 [ 551.512675][ C0] cpu_startup_entry+0x4f/0x60 [ 551.512692][ C0] rest_init+0x16b/0x2b0 [ 551.512709][ C0] ? acpi_subsystem_init+0x133/0x180 [ 551.512721][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 551.512734][ C0] start_kernel+0x3ef/0x4d0 [ 551.512751][ C0] x86_64_start_reservations+0x18/0x30 [ 551.512769][ C0] x86_64_start_kernel+0x130/0x190 [ 551.512787][ C0] common_startup_64+0x13e/0x148 [ 551.512806][ C0] [ 551.703980][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 551.710827][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 551.721469][ T31] Tainted: [L]=SOFTLOCKUP [ 551.725861][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.735885][ T31] Call Trace: [ 551.739148][ T31] [ 551.742052][ T31] dump_stack_lvl+0x3d/0x1f0 [ 551.746621][ T31] vpanic+0x640/0x6f0 [ 551.750574][ T31] panic+0xca/0xd0 [ 551.754267][ T31] ? __pfx_panic+0x10/0x10 [ 551.758653][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.764604][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 551.770731][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 551.776859][ T31] ? watchdog+0xe83/0x1180 [ 551.781246][ T31] ? watchdog+0xe76/0x1180 [ 551.785647][ T31] watchdog+0xe94/0x1180 [ 551.789874][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.794606][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.799252][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.804436][ T31] ? __kthread_parkme+0x19e/0x250 [ 551.809436][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.814092][ T31] kthread+0x3c5/0x780 [ 551.818133][ T31] ? __pfx_kthread+0x10/0x10 [ 551.822696][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.827438][ T31] ? __pfx_kthread+0x10/0x10 [ 551.831999][ T31] ret_from_fork+0x983/0xb10 [ 551.836560][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.841641][ T31] ? __switch_to+0x7af/0x10d0 [ 551.846289][ T31] ? __pfx_kthread+0x10/0x10 [ 551.850849][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.855594][ T31] [ 551.858878][ T31] Kernel Offset: disabled [ 551.863177][ T31] Rebooting in 86400 seconds..