last executing test programs: 6m18.429232548s ago: executing program 2 (id=154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x608801, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r3 = getpid() getrlimit(0x2, &(0x7f0000000040)) (async) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) prlimit64(0x0, 0xd, 0x0, 0x0) (rerun: 32) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x24008000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async, rerun: 64) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x1a, 0x20f5) (rerun: 64) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async, rerun: 64) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000640)={r7, r5, 0x7, 0xc2, &(0x7f0000000540)="b2695af0cb5420397af375ce7d5f2a6bd1af99ff410239f330405f9b3dfa4932ed49d3263c6c715798b4776b49dec9825204a2a87cbe72da02e6aa797c05d94552fc0fe30d5d1bc21b5b6dc1dbf2b28edd80c31a028bb35394b1edc2001654209669a927d2400a8ec2f40028417ee46f9844357fbdab98cdd9f773db1372fb77f3cb8b0ca2fd2a2aae59afd6a12be590213a96e0b6f5af5ac0decba9b328ff1136c6eb0222bd7bf530f1442acb89e0366a9a505d80d37c987b53065cbfbbb33a8a23", 0x1, 0x40, 0x80, 0x8, 0x401, 0x2, 0x2, 'syz0\x00'}) (async) clock_gettime(0x4, &(0x7f0000000100)) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000001c0)=0x1000000, &(0x7f0000000380)='%-010d \x00'}, 0x20) 6m17.44626962s ago: executing program 2 (id=156): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) set_mempolicy(0x8000, &(0x7f0000000000)=0x8000000000000000, 0x5) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff1, 0x2}, {0xa, 0xfff1}, {0x3, 0xb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x855}, 0x4000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="4001000010000004feffffbf000100000000100000000000000000000000000000000000000000000000ff944e230005000000003a000000", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb00000000000000000000000000000000000000000900000000000000060000000000000009000000000000001c250800000000000200000000000000f8ffffffffffffffffffffffffffffff0600000000000000feffffffffffffff1f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x140}}, 0x850) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/binder0\x00', 0x0, 0x0) 6m15.316251792s ago: executing program 2 (id=164): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8, 0x401, 0x2]}]}, 0x5c}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m11.737469189s ago: executing program 2 (id=176): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006"], 0x6c}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 6m11.516565601s ago: executing program 2 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc02d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') setsockopt$inet_opts(r6, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x2, 0x2, 0x781, 0x5f, 0x3ff, 0xe1aa0}) 6m9.031559706s ago: executing program 2 (id=183): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 5m53.90221709s ago: executing program 32 (id=183): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 3m11.971138095s ago: executing program 0 (id=849): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) setns(r1, 0x24020000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000080)={0x3, r1, 0x5, {0x6, 0x311e}, 0xff}, 0x1) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x2000000) 3m11.384350091s ago: executing program 0 (id=853): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xcdc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x20, 0x16}, {@in6=@loopback, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x7ff, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xc0}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000000)={0x1, 0x10001, 0x3, 0x55a6, 0xff, 0x0, 0x8}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 3m10.312126316s ago: executing program 0 (id=856): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24048855) 3m9.835101859s ago: executing program 0 (id=862): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f00000001c0)={0x0, r3}) fcntl$getownex(r2, 0x10, &(0x7f00000003c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000200)={0xf0, 0x4d}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r9, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 3m6.295853997s ago: executing program 0 (id=874): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000001100)='.pending_reads\x00', 0x101200, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003500)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000033c0)=[{&(0x7f0000000ac0)={0x11c, 0x5, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@generic="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"]}, 0x11c}, {&(0x7f00000040c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x213c}, {&(0x7f0000003280)={0x10, 0x28, 0x300, 0x70bd28, 0x25dfdbfc}, 0x10}, {&(0x7f0000003c40)=ANY=[@ANYBLOB="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"], 0x458}, {&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x11c}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="10000000f7fe0439000000010000000100000030000000000000000100000001000000", @ANYBLOB="847bd27f0c559d527c2710191a6b1cedc80dcd7491639d2d3872965d98596c2815071bdcc45937e1e84a9f8c5043c6e3b9ef1b580ef91a43392b3749eeecf913df235cb14fc774afb20f8e409454bc692cc4e0105c6414ab676a66b1de8fe785588ef9", @ANYRESHEX=r1, @ANYRES32=r6, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2], 0x40, 0x4000804}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2", 0xa7}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 3m4.069815885s ago: executing program 0 (id=881): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000200)={0x80, 0x1, 0x4, 0x7, 0xd5, 0x4, &(0x7f0000000100)="e7ddba7ee8730806dd905283a7e2b7b0b5fbfa8c3d265ce9f04507190c408feba8428f196af3ca129f12a58abea5f4c9423dcaf7ffed51390bdd150960db74ca4a686cecbb03360af556752b52f6e5378c20081780b9c90093ba8364e0f73e972f79fcc24d4d0fdaece6cbd53306f656f624f05b36a3e575613b5911205426779c9827a01627cfd693eecdb0f7b17cdb2de2b58daeb83d34eeffe3f7a9d366d9cf0a15f01758f5557549bd1d92259640ef5846081164bc4712a30b7e278f7db089676ece9d3e3d56e24645c536782a24b137ea45d0"}) ppoll(&(0x7f00000002c0)=[{r0, 0x1004}, {r0, 0xa402}], 0x2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x45, 0x0) sendmsg$kcm(r3, 0x0, 0x4000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) epoll_create1(0x80000) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x900, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) shmdt(0x0) r5 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@remote, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "c180bb6ad0509d8ee59d591060a178ccc33403aefae8e7fc8f4a7dc576fe1008ff4254027f308bd50aa760023c1c3a0a7c0904d5e724626daa86f200"}}}}, 0x0) 3m3.832724778s ago: executing program 33 (id=881): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000200)={0x80, 0x1, 0x4, 0x7, 0xd5, 0x4, &(0x7f0000000100)="e7ddba7ee8730806dd905283a7e2b7b0b5fbfa8c3d265ce9f04507190c408feba8428f196af3ca129f12a58abea5f4c9423dcaf7ffed51390bdd150960db74ca4a686cecbb03360af556752b52f6e5378c20081780b9c90093ba8364e0f73e972f79fcc24d4d0fdaece6cbd53306f656f624f05b36a3e575613b5911205426779c9827a01627cfd693eecdb0f7b17cdb2de2b58daeb83d34eeffe3f7a9d366d9cf0a15f01758f5557549bd1d92259640ef5846081164bc4712a30b7e278f7db089676ece9d3e3d56e24645c536782a24b137ea45d0"}) ppoll(&(0x7f00000002c0)=[{r0, 0x1004}, {r0, 0xa402}], 0x2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x45, 0x0) sendmsg$kcm(r3, 0x0, 0x4000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) epoll_create1(0x80000) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x900, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) shmdt(0x0) r5 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@remote, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "c180bb6ad0509d8ee59d591060a178ccc33403aefae8e7fc8f4a7dc576fe1008ff4254027f308bd50aa760023c1c3a0a7c0904d5e724626daa86f200"}}}}, 0x0) 2m39.369847227s ago: executing program 4 (id=972): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2m39.34651076s ago: executing program 4 (id=973): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m37.299836943s ago: executing program 4 (id=976): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) setgroups(0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2m36.865089439s ago: executing program 4 (id=977): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x7) 2m35.660324157s ago: executing program 4 (id=982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = fsopen(&(0x7f0000000200)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000280)='silent\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1) dup(0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x4) 2m34.933557319s ago: executing program 4 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m19.770716791s ago: executing program 34 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.012460839s ago: executing program 3 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f00005ed000/0x2000)=nil, 0x2000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001480)=""/4082, 0xff2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000004222f3529"], 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.397687138s ago: executing program 6 (id=1997): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x31}, 0x20048808) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x80044940, &(0x7f00000010c0)) connect$unix(r6, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.103943622s ago: executing program 3 (id=1999): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r6) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$printer(r6, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x0, 0xa, 0xd9, {0xd9, 0x3, "24e6c12cddadbdddd3e8f181a10818aa73a2187f8c51a62695de9ec8e16aa5c00c03dc5cc75559ad3c6ae822ce238947f20d9ca449726fada557811e702d97df403c1ea8944f51e50ac2b4f113997b0bfb03658ab8421ed94c78ccb882c7f0a385ccfd8c0968fdda3595046553d963a189a5e5c40cf629e935c4f593ccfe7dcfb0f95ae4bf0313409081a766f15b72f79ffe6507b179facbf4428b4d83ea2ca8417a0d14e848d64d908e30450effc4b57c694de87cb4fb41e91a15abbb4f106a222c70a5b64aed6dac3a1c68651c468e62b16a580edec9"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000000680)={0x34, &(0x7f0000000380)={0x20, 0x12, 0xeb, "2bf0e377b3eea104da5b0108e2be85d2b6f873cc51f8bfbefe4f727d9fbf28f4cefd8374488f13070b713ec49b2ca6cdf7b080f14744aa5fb1bc1fd3abae4ee0e1e458d128ca11d652d199db819ec9da17701a4c639f972083cb3083ec19b453388000a357416ebc00b3bf8a9026c177139615987277682d1a5f08737e2e61bc52f9ff4c7543925dea194858b686f09abd3a0c136d388574724bec0671157f08ebeb64a087da35920d3210926145cfec1d5d5da0e3997b2120770f7e2bc8649e89c788d944ab6da0798a8e77d4fce8c8efd9c60a6559e81365e679354896c3fe4bb063e7509ec6a89383d4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x0, 0xc9, {0xc7, "927ee08948e6b46fb0c43077469d1e6776b362a24803b5a30251bc80100ebbbe205dd4bee3dbfc9702b839a247f13a37d0176e240b23ada7c08acfbf5d4a3cd14a192877dd744ba55a179748308a5393f78448f1ddb3d2d7ad514d0a3e30687ee13cc7634164445521159e906ce8da4beeed1b9541afb52cb2b47b2830e8dd607c68640eb2f9b59e2e42e61a80aca7b0af99130dff853364a40d81476eb9b16ea105f2f1d9bc8c5d965a5f462218bcbd5bb3166c01265c18fb7fc716543aa18161776c0883de30"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x77}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x20}}) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x60b, 0x0) r9 = eventfd2(0xfffffffc, 0x0) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r10, 0x1, 0x1, &(0x7f0000001dc0)=[{}], 0x0) io_submit(r10, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r9, 0x0, 0x0, 0x4, 0x0, 0x3, r9}]) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dda102c2a35ec25ffde8c94d8014826d5a665ecd5f438a357ed0c54462b8e9c3db050eda74eaf839f16612d19f5a15e6b5a3e12d919c026e3d8dd65e48ab31fda09916e09e0621f55f1005d08459f8eece8a987333ce85d9acf65e32fdfaa3d15872f4a4230600c548d4b36a653f5d9265004", @ANYRESHEX=r4, @ANYBLOB=',\x00']) 3.006363645s ago: executing program 1 (id=2000): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.977952303s ago: executing program 7 (id=2001): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16]) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$pokeuser(0x6, r2, 0x388, 0x10) (async) ptrace$pokeuser(0x6, r2, 0x358, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000070c000/0x400000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r6 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x0, 0x1e4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x400000000000000, 0xc401) (async) syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000200004025a1a440000000010109024f00010100000009040000120206000005240600000524000000dcfcc4fc8fc875384cf2fa420d240f01000000000000000300052401020706241a090002090581030800810001090582020002020000090503020002000000003f7a12c8d0ac1513e3d0743618553b8a"], 0x0) 2.772652265s ago: executing program 1 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = getpid() prlimit64(r5, 0xf, &(0x7f0000000000)={0x10000, 0x3ff}, &(0x7f0000000040)) read$msr(r4, &(0x7f000001f6c0)=""/102400, 0x19000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44040) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) socket$unix(0x1, 0x5, 0x0) timer_create(0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 2.772294953s ago: executing program 3 (id=2003): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000001c0)="6f46ad3bc435c9e1762ec21ac8bad7039d61d4e023be14b75bb3ceedd7aeda3527aeef563d2b6a2d8ad7be5ba233e421800a1c50efdf39f4db4ee83e35c2e2e0926cb76f9a63f8dd9083f3b5fae9ee60cfddeb583329f54a1cd0f4fa653c7218", &(0x7f0000000240)="1886be85b935f92e2cf807532888410a8edbc8e91b39a36514c6646033f4f3dc81a8dbece55ab424f4669568c00c86151da02e50e5607254a3f51fb4ca300a75a30a697ff0dbd5bc14bd7d10d76a9e08a032dba2a699b892db22fb26c761f27ae4997495e7f807c009712c0b1117d3b3291b5d1d1e107dda4695f82bc2f2fc6f"}}, &(0x7f0000000100)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x481, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x3, &(0x7f0000000200)="22c7d8"}) (async) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) (async) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x980}, 0x44048011) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8040040) (async) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) 2.539294857s ago: executing program 3 (id=2005): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b", 0xdf}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308433219872eeda0c2", 0xf5}, {&(0x7f00000010c0)}, {&(0x7f00000011c0)}], 0x5, &(0x7f00000014c0)}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlink(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7a80000000000000000001000000000", 0x4}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.44851946s ago: executing program 6 (id=2006): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e24, 0x10, @mcast2}, 0x4a) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x4, 0xc1, 0x1, 0xf}]}}, {{0x0, 0x2c00, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8c8}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 2.206828436s ago: executing program 3 (id=2008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x1411, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000004}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x7, 0x4, r5, 0x0, 0x0, 0x283}]) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x1ec, r6, 0x12, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="76805e8646c5f68acecda39fc974c7132b90c6363efaf9612c89d47bf519ae30"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ebb5c948ff7b417ba4e04e80294bcf9c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f8bf365387fcb0c7f231ec37c41b4119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="04998a19257f91709f4c860196f60987b3975317f95d003bb44ccba70df8566b"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2bdc4ab14bcb683da792aa8a614a631c6d2b46a645ecb3e8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7d7b6f9dd531f74381f90d729933e0a7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="25eff24cfe3e3a7e419758d394c9a373599ffa7c7a912f9b"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8c4bca8f7c701ffc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d4cc8c68d7b7f4e5"}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="37a1bb41b30623b9eed90845c39228bd6b5dc39121336e18"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e6c2fa823a47f83940def10a29c44ed4215e8f69de46b57f40a1059f1c7f5f8a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a2b807ec625e62998c79c2c3739f8173"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2f3474e7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="181056d41e6b625e04c182405b5d59c4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="34f07923a0b97720a62d8b4e0211b213c8319673951d01a89c48aec02ceb0807"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9fd15898c098f467f501e30269fa3893"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7ee64058ad8b6ca4d8239e321ee94a72"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r8, 0xa, 0x0, &(0x7f0000000180)=[{0x7}, {0x5, 0x9}, {0x7fff, 0x8de1}, {0x5, 0x100}, {0x2143dc1c, 0x9}, {0xbd, 0x2}, {0xfee, 0x2}, {0x7, 0x7}, {0xffffffffffffff81, 0xffffffff}, {0x80000000, 0x76cd}]}) 2.155955545s ago: executing program 5 (id=2009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f00005ed000/0x2000)=nil, 0x2000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001480)=""/4082, 0xff2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000004222f3529"], 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2.097256047s ago: executing program 7 (id=2010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000019080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f000093b000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r0, 0x214a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546", 0xf) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1acf3c4713d54dc71c0012800b00010062726964676500000c0002800500240000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4004840) io_uring_setup(0x2f00, &(0x7f0000019100)={0x0, 0x1373, 0x400, 0x20001, 0x2d6}) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) r7 = socket$kcm(0x2, 0x5, 0x106) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r9 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r9, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) socket$inet(0x10, 0x3, 0x0) 1.974831577s ago: executing program 5 (id=2011): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000008c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000001, @remote, 0x5}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="1eb1034666643a1f969d27802c6121763b7107c7def63f2834e3e6c32bc4b4c7e63d04b9473c2571c3c28e51b8867afc96000d1875674269b1314ea5182490a3", 0x40}, {&(0x7f0000000400)="022e59508bcb6beadef884c41a4ee2fcdd8328ed8733bb1608618704ab347f1281fa8f2aef9b626259df6468b02f997b7b8cb3c67a9bd5f9bf32d290e22387bcb67c031702c82de5cef6987447bf3beb4916492f18726cc80bc589de33f3c2d5b7af5d192f9c0c47f24a9cc4688ba2b9afc261634c08c4dd6fc0841ac02de6fdd8f3fd2936f6c5d2d304089ebedb8e15a334dc5e8566ca15efebe0fc7581f236545166a9e9c3125e9cf50e4be54b20457970f63e886786d82ca54e", 0xbb}, {&(0x7f00000004c0)="b6c71debff60e4c382cd11308d5f92e69d4efb37513ae1e4277f2f84ece89fad2967415ad16b5e6ca836a6428c5374a0589a1595670aeb5a2fe249d0a567e1c5985545bc3873afb4f699d0f296fb56dd96aac7f8c9d40651ea1b385b328e96fe5902b96047281212b3bb0cdbd3a6ad0c229d79930b9464e775aaa0d592b06a1ced9beb432837ee70e60f43db6c08de8bb1e2a1a0c81d3a7d", 0x98}, {&(0x7f0000000600)="53dfc036ea1152335230a40edd02700b19aaf0f1018739c6a422860ac245b01779853c6945f942188c40ad85c6558a1168a321769429f9f22b1bfa0caf5c6115becffa20cb2585e985c3aa722605a11950b135d6016f8bcfa284780868ad", 0x5e}, {&(0x7f0000000580)="ddc3b9f27114ff68f30072224a11a3be0d30", 0x12}, {&(0x7f0000000680)="6fdc8b42ed046a529c0f4b265f2e56dca6d5ad03395d741e3b8f6c252adb23a19f0bca94c5e4a72d934d0bf3a8527e9858f3b058c251ed0ea36806c78bce6f6ce9feb755454084c819b37c3cd71908e0dd102b32e86ba4786b48997ca9ca070520e0afa06f5cf5f876e7d1909b8ceb11dbe5b6b97d582775c66326508e466a290610538592e920bf8b27676b0f63b547b310fbf154e9a568db4ae217f90f18e6efd55b3fb8d8c9f30ad2921e56257013083456", 0xb3}], 0x6, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7da92f7c}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}], 0xf0}, 0x20004000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x85) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, r4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0x115, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000a00)={0x0, r6, r7, 0x3, 0x0, 0xfffffffd, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf25810080000000000000c3e331723f0003000000ea5047b11b74d0f1f7bc24a973eefa"], 0x1c}}, 0x884) 1.824588892s ago: executing program 1 (id=2012): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.765322325s ago: executing program 1 (id=2013): r0 = syz_open_dev$loop(&(0x7f0000000340), 0xf87e, 0x6902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x300) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x40045532, &(0x7f0000003f80)=""/4086) 1.74607088s ago: executing program 3 (id=2014): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100"], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x140, 0x40, 0x107, 0xfffffefe, 0x400000, {0x1, 0x7c}, [@typed={0xde, 0x7e, 0x0, 0x0, @binary="ea70b17179f500dcfad645a3819419e79702de6369478636b496c5012d46c83f0284be37045c2681c252b902bae927edf2579bf47bc036bd7396a4a104fa8827e5c55115f26bdd4382d7bc0f01777a992e4c784e62ceb1b56ed85c92d16613f16c007ae2aab430f27b706a46c8836e2ad5ef80b97fcb083a0ea164b66ed00a1180ad6d863ecbb65449e493594135256fb59e9186777c9c91754df4838bd1ef0a0e663fae99d8c2cfe799a028e9abd8fcfc851e31fd88606d514a642409ca644871468248e03047bef457813826358b83711406c2dc83a5a091ec"}, @generic="05caf3de33a0f3c01be265706e73554098f62dab377b69b73d5914eb7737e96cbb6517ab208e28248dcf8a33dd87f49787779ba3f12feb515cf21e29166176e8f85fbb0a556850f0d3d6"]}, 0x140}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40011800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) getdents64(r7, &(0x7f0000000580)=""/166, 0xfe) r8 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000000)=0x398, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x3ac0, 0x4) sendmmsg$inet(r9, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r9, 0x0, 0x0, 0x40002122, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) 1.664481976s ago: executing program 6 (id=2015): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x40, 0x5042) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) r1 = socket(0x1e, 0x4, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9902) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="040e0402030cccb9ef9e271cf1062991c4bc09c2ae45ce327513faf815f74d4930c93b7468b179b22374d9eab28aeaccb1e3c811011372bfd07ab13008d95d3fc9885c3c55dd928735677b97d7176837099e8b6df995ff6670c56f7a30a12031280e794a9a0964d6aaf7a10a8558f1f04c24c66796f8dec8ad02d35a71d5dd1fbd0d3e1a7db8c73b845ebd4f73da3b6a4a530b2fad202a47564674ac3ccf3ae2e7b5abd99ff5df78fe323ba3d14cd4e8e002c950ecf7543df40501392fcfe288d29bbb62ed473386de2121a59c3c9cfb61668dae"], 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8000c0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000004c0)=@req3={0x2, 0x5, 0x700000, 0x7, 0x8, 0x0, 0x7f}, 0x1c) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000340)) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000500), 0x40, 0x5042) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) open_tree(0xffffffffffffff9c, 0x0, 0x9902) (async) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="040e0402030cccb9ef9e271cf1062991c4bc09c2ae45ce327513faf815f74d4930c93b7468b179b22374d9eab28aeaccb1e3c811011372bfd07ab13008d95d3fc9885c3c55dd928735677b97d7176837099e8b6df995ff6670c56f7a30a12031280e794a9a0964d6aaf7a10a8558f1f04c24c66796f8dec8ad02d35a71d5dd1fbd0d3e1a7db8c73b845ebd4f73da3b6a4a530b2fad202a47564674ac3ccf3ae2e7b5abd99ff5df78fe323ba3d14cd4e8e002c950ecf7543df40501392fcfe288d29bbb62ed473386de2121a59c3c9cfb61668dae"], 0x7) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8000c0, 0x0) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000004c0)=@req3={0x2, 0x5, 0x700000, 0x7, 0x8, 0x0, 0x7f}, 0x1c) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000340)) (async) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) (async) 1.65841818s ago: executing program 5 (id=2016): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x1, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() ioprio_set$pid(0x0, r1, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtaction={0x250, 0x30, 0x1, 0x70bd28, 0x200000, {}, [{0x23c, 0x1, [@m_ct={0xd4, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10000, 0x8003, 0x9447cc4309893b66, 0x7ff, 0x3}}]}, {0x94, 0x6, "31fecfce8f55a313b208ff1528e69837a09d19557bbf3c9c76d77c960aeb9fc052e56c2cabf0f990c2494541e5ac78cad3d2173c0493bbb951f92d8b0544bda2c29e242b91f75d6f1e29e336b972b6cebba3707eb3bb6a2db7a820ea31427dfb9c0eeb4528e2b8f186b5eb9bdc1ecc58b8779ce9288227f95bdc70c72643d67ab8b36b2bc70056f28410863a5b3170c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x134, 0x14, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000, 0x10000, 0x10000009, 0x9, 0xfec}, 0x1}}]}, {0xde, 0x6, "01d7d7a7a1d9748fcb04e0aeb6d193c96942452902f0749d956e74b0b6eba206b4c8b44c44164c312791aa1997b471bb30281eb6594a9ee9917cd9caf867a6321a6b9fd29c693e81d65e3dadb8a55186ced78a8b0e2c467b228b069eff40fec8f94e1eeb335b4e37f3ff4097e4bdd8f7a5e299d3216cc843eb56bd7a7ded13d51227add083b415b16211afde23df74d02236cc7e0c9c1f5f917bb0abeb8f378a9472020d2c46eac8adc5d90eed36f3ededd9befc0ab5bc36305a5365192de20015d2536ae6bd1f4260eca89bf50db118f90671eda28e341f747a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x250}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x19, 0x11, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 1.560998324s ago: executing program 1 (id=2017): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') (rerun: 64) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000c"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x63}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x1b, 0x122, 0xfa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = fsmount(r0, 0x0, 0xa) (rerun: 64) fchdir(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$UFFDIO_MOVE(r11, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000e9000/0x2000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x2000, 0x1}) (rerun: 64) connect$inet(r10, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) fcntl$notify(r7, 0x402, 0x25) 1.467226858s ago: executing program 6 (id=2018): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xf000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x13400431, 0x0, 0x1c, 0x1, 0x56, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) pipe(&(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0) 1.465895857s ago: executing program 5 (id=2019): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x1, 0x4, 0x1, 0xffffffffffffffff}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x5, 0x2) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x1}, 0x5, 0x20000000, 0x6, 0x0, 0x4, 0x3, 'syz0\x00', &(0x7f0000000500)=['/dev/vim2m\x00', '-\x14[&$\x00\xe4|\xcf\x84j\a\x14~ \x16\f\xc2\xd6\xa3Q\xc1\x00\xaa]9\xb4\xab\xfc\x1c\x85I\x82D\xe2\"Z\xba\x83u\b\x00\xaa?z\xa8S\x9a\xcfj\xa2', '\x00\x00\x00', '*\x00'], 0x43}) r2 = socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006, 0x5}, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) 1.203954675s ago: executing program 1 (id=2020): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x440a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgrp(0xffffffffffffffff) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) r7 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0xffffffffffffff60, 0x0, 0xfffffffffffffce0, 0x0, 0x0, 0x2663}, 0x40040c1) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRESHEX=r6, @ANYRES16=r5, @ANYRES16=r3], 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000580)}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100", 0x16}], 0x1) sendto$inet(r5, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) 1.192991449s ago: executing program 7 (id=2021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f00005ed000/0x2000)=nil, 0x2000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001480)=""/4082, 0xff2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000004222f3529"], 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1.14807152s ago: executing program 5 (id=2022): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) (async) r3 = getpid() (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001a400)=""/102384, 0x18ff0) (async) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) (async) io_setup(0x30, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) (async) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) (async) io_setup(0x81, &(0x7f0000001440)=0x0) (async) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}) (async) io_submit(r8, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 998.939465ms ago: executing program 7 (id=2023): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 448.570673ms ago: executing program 7 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r4 = dup2(r2, r2) utimensat(r4, 0x0, 0x0, 0x100) read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="030402013a0fe6e11363d70ef67a38d8f7000000bf5d5c5ab400aab81700f903c79539e6685fa5e6fca4765a5d3d9f4d2c20d907806f6712b50352bd44b29da1f13e28e63617318b40f4b1fae1de3d6e51f2a4b2c33d43234a16464b6bfc9f7a5d4ab7fbd9efd665ff9a3305e27fb59669641d4b1fd5f8b6ad64f001182efbb4bee85bc4f8fa4079d021a570066be521b0c0397d50c999f96fe85990c53780f638b41fa9d422ed30ffc3b3b8db775aa2cd7b4384bde7459531f4249324640b1d68858c47f9cee382b804b54cb0da9091b5a75f66c6b1e4d1850218415ea4c0807500", @ANYRES32=0x0, @ANYBLOB="0003000000000000540012800b0001006272696467650000440002800c001f000200000000000000050016000000000005002b00fa00000005002900000000000c001e00a00000000000000008001b00fbffffff05002a0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 356.319399ms ago: executing program 5 (id=2025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYRES32]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 354.685122ms ago: executing program 6 (id=2026): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e24, 0x10, @mcast2}, 0x4a) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x4, 0xc1, 0x1, 0xf}]}}, {{0x0, 0x4000, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8c8}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 10.737086ms ago: executing program 7 (id=2027): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 0s ago: executing program 6 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80"], 0x98}, 0x1, 0x0, 0x0, 0x20048a4}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) write$cgroup_pid(r2, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00"/11, @ANYRES64, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000"], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r1, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x52) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0xe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): board names for pcl724 driver are: [ 311.630550][T10109] pcl724 [ 311.630556][T10109] pcl722 [ 311.630562][T10109] pcl731 [ 311.630568][T10109] acl7122 [ 311.630575][T10109] acl7124 [ 311.630582][T10109] pet48dio [ 311.630588][T10109] pcmio48 [ 311.630595][T10109] onyx-mm-dio [ 311.630605][T10109] comedi: valid board names for pcl711 driver are: [ 311.630613][T10109] pcl711 [ 311.630619][T10109] pcl711b [ 311.630625][T10109] acl8112hg [ 311.630683][T10109] acl8112dg [ 311.630694][T10109] comedi: valid board names for amplc_pc263 driver are: [ 311.630702][T10109] pc263 [ 311.630709][T10109] comedi: valid board names for amplc_pc236 driver are: [ 311.630717][T10109] pc36at [ 311.630724][T10109] comedi: valid board names for amplc_dio200 driver are: [ 311.630736][T10109] pc212e [ 311.630743][T10109] pc214e [ 311.630749][T10109] pc215e [ 311.630755][T10109] pc218e [ 311.630761][T10109] pc272e [ 311.630768][T10109] comedi: valid board names for comedi_parport driver are: [ 311.630777][T10109] comedi_parport [ 311.630787][T10109] comedi: valid board names for comedi_test driver are: [ 311.630796][T10109] comedi_test [ 311.630856][T10109] comedi: valid board names for comedi_bond driver are: [ 311.630864][T10109] comedi_bond [ 312.034671][ T5888] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 312.108944][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.926'. [ 312.110268][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.926'. [ 312.237692][ T29] audit: type=1400 audit(1775411591.226:559): avc: denied { bind } for pid=10151 comm="syz.6.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.245648][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 312.254323][ T5888] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 312.254360][ T5888] usb 7-1: can't read configurations, error -71 [ 312.933052][T10181] bridge1: entered promiscuous mode [ 312.933127][T10181] bridge1: entered allmulticast mode [ 312.959086][ T29] audit: type=1400 audit(1775411591.936:560): avc: denied { setopt } for pid=10177 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 313.341236][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 313.398197][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.398519][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.475148][ T29] audit: type=1400 audit(1775411592.466:561): avc: denied { write } for pid=10190 comm="syz.4.933" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 314.284617][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 314.463457][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 314.806118][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.818263][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.829139][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.844404][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.854550][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.865670][ T9] usb 6-1: config 0 descriptor?? [ 315.077326][ T9] hid_parser_main: 4005 callbacks suppressed [ 315.077349][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.098234][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.107399][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.180491][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.205124][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.212391][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.230081][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.238557][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.244181][T10218] netlink: 72 bytes leftover after parsing attributes in process `syz.6.940'. [ 315.248596][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.255905][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 315.274184][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 315.288940][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 315.316610][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input20 [ 315.461531][ T9] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 315.507163][T10224] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 315.519476][T10224] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 315.538047][ T9] usb 6-1: USB disconnect, device number 33 [ 315.604695][T10225] fido_id[10225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 316.284457][T10231] hub 9-0:1.0: USB hub found [ 316.292010][T10231] hub 9-0:1.0: 1 port detected [ 316.775809][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 316.786789][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.062269][ T3511] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 317.087313][ T3511] Bluetooth: hci6: Frame reassembly failed (-84) [ 317.292497][ T29] audit: type=1400 audit(1775411596.276:562): avc: denied { name_bind } for pid=10242 comm="syz.4.946" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 317.324340][ T29] audit: type=1400 audit(1775411596.316:563): avc: denied { node_bind } for pid=10242 comm="syz.4.946" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 318.011489][T10259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.951'. [ 318.037001][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 318.115122][ T29] audit: type=1400 audit(1775411597.096:564): avc: denied { bind } for pid=10255 comm="syz.3.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.083423][ T5816] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 319.345074][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.954'. [ 319.624166][T10277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10277 comm=syz.1.954 [ 320.849761][T10296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.958'. [ 320.883082][T10296] sit0: Caught tx_queue_len zero misconfig [ 321.152828][ T792] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 321.295341][T10312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.962'. [ 321.312968][ T792] usb 6-1: device descriptor read/64, error -71 [ 321.333724][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 321.385533][ T5927] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 321.505363][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.534317][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.566048][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.578512][T10316] xt_time: unknown flags 0xc [ 321.582906][ T792] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 321.595049][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.624115][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.679894][ T5927] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.707313][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.741144][ T5927] usb 7-1: config 0 descriptor?? [ 321.755293][ T792] usb 6-1: device descriptor read/64, error -71 [ 321.907703][ T792] usb usb6-port1: attempt power cycle [ 322.166099][ T5927] hid_parser_main: 5 callbacks suppressed [ 322.166121][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.214004][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.260156][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.273269][ T792] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 322.293866][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.313533][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.313731][ T792] usb 6-1: device descriptor read/8, error -71 [ 322.320968][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.320997][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.321017][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.321034][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.321054][ T5927] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 322.377737][ T5927] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 322.900129][ T792] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 322.933960][ T792] usb 6-1: device descriptor read/8, error -71 [ 323.155644][ T792] usb usb6-port1: unable to enumerate USB device [ 324.851825][ T792] usb 7-1: USB disconnect, device number 4 [ 324.895635][T10377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.973'. [ 324.966320][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 324.967257][ T29] audit: type=1400 audit(1775411859.952:565): avc: denied { ioctl } for pid=10363 comm="syz.5.971" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26904 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.266640][ T29] audit: type=1400 audit(1775411860.582:566): avc: denied { create } for pid=10378 comm="syz.6.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 326.388266][ T29] audit: type=1400 audit(1775411860.582:567): avc: denied { write } for pid=10378 comm="syz.6.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 326.671161][T10390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.976'. [ 327.366399][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.395495][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.723712][ T29] audit: type=1400 audit(1775411862.703:568): avc: denied { read } for pid=10403 comm="syz.3.979" dev="sockfs" ino=27856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.838500][T10409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.859842][ T29] audit: type=1400 audit(1775411862.783:569): avc: denied { ioctl } for pid=10414 comm="syz.5.981" path="socket:[26999]" dev="sockfs" ino=26999 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 328.566228][ T24] iguanair 4-1:0.0: failed to get version [ 328.572835][ T24] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 328.629939][ T29] audit: type=1400 audit(1775411863.553:570): avc: denied { write } for pid=10414 comm="syz.5.981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 328.685373][ T24] usb 4-1: USB disconnect, device number 36 [ 331.373199][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.992'. [ 331.382502][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.724325][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.075324][T10487] comedi comedi0: pcl724: I/O port conflict (0x3,4) [ 332.114435][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 332.572447][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.609036][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.746861][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.910077][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.993330][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.004168][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.059227][ T5888] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 334.167097][ T5927] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 334.250097][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 334.262489][ T5888] usb 4-1: config 2 has an invalid interface number: 140 but max is 0 [ 334.273124][ T5888] usb 4-1: config 2 has no interface number 0 [ 334.385142][ T5888] usb 4-1: config 2 interface 140 has no altsetting 0 [ 334.443153][ T5888] usb 4-1: New USB device found, idVendor=cab3, idProduct=23c1, bcdDevice=ee.84 [ 334.453660][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.462924][ T5888] usb 4-1: Product: syz [ 334.467221][T10545] syz.5.1002 (10545): attempted to duplicate a private mapping with mremap. This is not supported. [ 334.467355][ T5888] usb 4-1: Manufacturer: syz [ 334.575969][ T5888] usb 4-1: SerialNumber: syz [ 334.591432][ T5927] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 334.600709][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.611905][ T5927] usb 7-1: config 0 has no interface number 0 [ 334.618811][ T5927] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 334.629805][ T5927] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 334.644064][ T5927] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 334.654529][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.717070][T10547] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 334.767022][ T5927] usb 7-1: config 0 descriptor?? [ 334.964536][ T5927] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 335.044953][ T5888] usb 4-1: bad CDC descriptors [ 335.059439][ T5888] usb 4-1: USB disconnect, device number 37 [ 335.115345][ T3511] usb 7-1: Failed to submit usb control message: -71 [ 335.115619][ T5928] usb 7-1: USB disconnect, device number 5 [ 335.123246][ T3511] usb 7-1: unable to send the bmi data to the device: -71 [ 335.137736][ T3511] usb 7-1: unable to get target info from device [ 335.144151][ T3511] usb 7-1: could not get target info (-71) [ 335.151066][ T3511] usb 7-1: could not probe fw (-71) [ 335.469807][T10556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.838202][ T5888] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 335.846465][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 335.871754][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 335.905049][T10574] bridge0: entered promiscuous mode [ 336.067855][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 336.195370][T10581] fuse: Unknown parameter '' [ 336.529554][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 336.563805][ T5888] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 336.589783][ T5888] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 336.632689][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.654373][ T5888] usb 6-1: Product: syz [ 336.665763][ T5888] usb 6-1: Manufacturer: syz [ 336.808843][T10584] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1009'. [ 336.857639][ T5888] usb 6-1: SerialNumber: syz [ 337.191916][ T5888] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 337.222510][ T5888] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 337.581556][ T5888] usb 6-1: 2:1 : can't get Cluster Descriptor [ 337.723691][ T29] audit: type=1400 audit(1775411872.718:571): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 337.871383][ T29] audit: type=1400 audit(1775411872.828:572): avc: denied { link } for pid=10595 comm="syz.6.1013" name="#11" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 338.039077][ T29] audit: type=1400 audit(1775411872.828:573): avc: denied { rename } for pid=10595 comm="syz.6.1013" name="#12" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 338.081654][T10607] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1016'. [ 338.094379][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 338.183874][T10610] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1015'. [ 338.380478][T10607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.482706][T10614] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1017'. [ 338.584049][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.603825][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.053188][ T29] audit: type=1400 audit(1775411874.049:574): avc: denied { unmount } for pid=9912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 339.160649][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 339.386746][ T5931] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 339.546393][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 339.552237][ T5931] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 339.561821][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.574472][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.588359][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.600132][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.627171][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.646963][ T5927] usb 6-1: USB disconnect, device number 38 [ 339.661306][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.694485][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.713692][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.727548][ T5931] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 339.730026][T10636] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1023'. [ 339.737832][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 339.746869][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 339.764902][ T5931] usb 7-1: SerialNumber: syz [ 339.777104][ T5931] usb 7-1: config 0 descriptor?? [ 339.792288][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 340.000691][T10633] input: syz1 as /devices/virtual/input/input22 [ 340.020732][ T5167] bcm5974 7-1:0.0: could not read from device [ 340.044872][T10643] C: renamed from team_slave_0 [ 340.114105][T10643] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 340.126696][T10643] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 340.134141][ T5931] usb 7-1: USB disconnect, device number 6 [ 340.164752][ T29] audit: type=1400 audit(1775412131.158:575): avc: denied { ioctl } for pid=10642 comm="syz.3.1025" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.200567][T10643] netlink: 'syz.3.1025': attribute type 2 has an invalid length. [ 340.214853][T10643] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1025'. [ 340.247873][T10643] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 340.831025][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1026'. [ 341.124299][T10658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.596149][T10668] Invalid source name [ 341.670878][T10668] kvm: pic: non byte read [ 341.675630][T10668] kvm: pic: non byte read [ 341.684797][T10668] kvm: pic: non byte read [ 341.708831][T10668] kvm: pic: non byte read [ 341.740022][T10668] kvm: pic: non byte read [ 341.765903][T10668] kvm: pic: non byte read [ 341.846472][T10668] kvm: pic: non byte read [ 341.883144][T10668] kvm: pic: non byte read [ 341.913912][T10668] kvm: pic: non byte read [ 341.946913][T10668] kvm: pic: non byte read [ 343.172469][T10690] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.1035'. [ 343.186199][T10690] SQUASHFS error: Failed to read block 0x0: -5 [ 343.192642][T10690] unable to read squashfs_super_block [ 343.279468][T10688] netlink: 'syz.1.1035': attribute type 2 has an invalid length. [ 343.287744][T10688] netlink: 'syz.1.1035': attribute type 1 has an invalid length. [ 343.327344][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1035'. [ 343.347312][ T29] audit: type=1400 audit(1775412133.908:576): avc: denied { ioctl } for pid=10682 comm="syz.5.1034" path="socket:[28667]" dev="sockfs" ino=28667 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.390025][ T29] audit: type=1400 audit(1775412133.938:577): avc: denied { getopt } for pid=10682 comm="syz.5.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.440008][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.450337][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.459450][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.469210][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.506106][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.513736][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 344.962538][T10716] wlan1 speed is unknown, defaulting to 1000 [ 345.561078][ T29] audit: type=1400 audit(1775412136.548:578): avc: denied { execute } for pid=10741 comm="syz.5.1045" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 345.790258][T10716] chnl_net:caif_netlink_parms(): no params data found [ 345.828150][ T5928] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 346.040159][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 346.049178][ T5928] usb 6-1: config 3 has an invalid interface number: 128 but max is 0 [ 346.058850][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.090406][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.098799][ T5928] usb 6-1: config 3 has no interface number 0 [ 346.104899][ T5928] usb 6-1: config 3 interface 128 has no altsetting 0 [ 346.112033][T10716] bridge_slave_0: entered allmulticast mode [ 346.132203][ T5928] usb 6-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=59.78 [ 346.143504][T10716] bridge_slave_0: entered promiscuous mode [ 346.143839][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.160443][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.799624][ T5816] Bluetooth: hci6: command tx timeout [ 347.815180][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.820950][ T5928] usb 6-1: Product: syz [ 347.830533][T10716] bridge_slave_1: entered allmulticast mode [ 347.840818][ T5928] usb 6-1: Manufacturer: syz [ 347.846392][ T5928] usb 6-1: SerialNumber: syz [ 347.846794][ T29] audit: type=1400 audit(1775412138.838:579): avc: denied { getattr } for pid=10766 comm="syz.1.1051" path="socket:[28923]" dev="sockfs" ino=28923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 347.888119][T10716] bridge_slave_1: entered promiscuous mode [ 347.896709][ T5928] r8152-cfgselector 6-1: Unknown version 0x0000 [ 348.037658][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.071412][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.125970][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 348.343201][T10716] team0: Port device team_slave_0 added [ 348.360055][T10716] team0: Port device team_slave_1 added [ 348.526120][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.553487][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.671977][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.697749][ T5928] r8152-cfgselector 6-1: USB disconnect, device number 39 [ 348.708663][ T24] usb 7-1: config 8 has an invalid interface number: 7 but max is 0 [ 348.719459][ T24] usb 7-1: config 8 has no interface number 0 [ 348.727924][ T24] usb 7-1: config 8 interface 7 has no altsetting 0 [ 348.736465][ T24] usb 7-1: New USB device found, idVendor=1614, idProduct=0800, bcdDevice=9a.6e [ 348.746066][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.754187][ T24] usb 7-1: Product: syz [ 348.758491][ T24] usb 7-1: Manufacturer: syz [ 348.763106][ T24] usb 7-1: SerialNumber: syz [ 348.764857][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.797355][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.870704][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.997563][T10716] hsr_slave_0: entered promiscuous mode [ 349.007561][T10716] hsr_slave_1: entered promiscuous mode [ 349.007732][ T24] hub 7-1:8.7: bad descriptor, ignoring hub [ 349.023930][T10716] debugfs: 'hsr0' already exists in 'hsr' [ 349.038637][ T24] hub 7-1:8.7: probe with driver hub failed with error -5 [ 349.040959][T10716] Cannot create hsr debugfs directory [ 349.056830][ T24] option 7-1:8.7: GSM modem (1-port) converter detected [ 349.098513][ T24] usb 7-1: USB disconnect, device number 7 [ 349.128460][ T24] option 7-1:8.7: device disconnected [ 349.160714][ T5816] Bluetooth: hci2: link tx timeout [ 349.168162][ T5816] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 349.203446][ T5812] Bluetooth: hci2: link tx timeout [ 349.209408][ T5812] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 349.220386][ T5812] Bluetooth: hci2: link tx timeout [ 349.226311][ T5812] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 349.569642][T10716] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 349.580706][T10716] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 349.596529][ T5931] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 349.607106][T10716] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 349.620657][T10716] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 349.757927][T10819] wlan1 speed is unknown, defaulting to 1000 [ 349.767035][ T5931] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 349.793533][ T5931] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 349.816582][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 349.848515][ T5931] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 349.878386][ T5812] Bluetooth: hci6: command tx timeout [ 349.886814][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 349.906674][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 349.944496][ T5931] usb 4-1: string descriptor 0 read error: -22 [ 349.962605][ T5931] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 349.976548][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.998635][ T5931] usb 4-1: config 0 descriptor?? [ 350.004186][T10804] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.028599][ T5931] hub 4-1:0.0: bad descriptor, ignoring hub [ 350.034639][ T5931] hub 4-1:0.0: probe with driver hub failed with error -5 [ 350.040139][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.049294][ T5931] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 350.165267][T10716] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.203879][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.211097][ T6509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.247852][ T5927] usb 4-1: USB disconnect, device number 38 [ 350.302144][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.309332][ T6509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.415001][T10819] hpfs: hpfs_map_sector(): read error [ 350.753452][ T5887] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 350.914284][T10716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.921711][ T5887] usb 6-1: device descriptor read/64, error -71 [ 351.215005][ T5887] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 351.247897][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 351.419832][T10859] pim6reg1: entered promiscuous mode [ 351.425199][T10859] pim6reg1: entered allmulticast mode [ 351.431408][ T5887] usb 6-1: device descriptor read/64, error -71 [ 351.530977][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.539322][T10716] veth0_vlan: entered promiscuous mode [ 351.543896][T10716] veth1_vlan: entered promiscuous mode [ 351.563540][ T5887] usb usb6-port1: attempt power cycle [ 351.569007][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.619940][T10716] veth0_macvtap: entered promiscuous mode [ 351.630856][T10716] veth1_macvtap: entered promiscuous mode [ 351.820598][T10716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.889247][T10716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.945922][ T5887] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 351.957981][ T5816] Bluetooth: hci6: command tx timeout [ 351.990201][T10873] netlink: 296 bytes leftover after parsing attributes in process `syz.6.1069'. [ 351.999536][T10873] openvswitch: netlink: Flow key attr not present in new flow. [ 352.046584][ T5887] usb 6-1: device descriptor read/8, error -71 [ 352.331122][ T5887] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 352.346551][ T7958] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.356092][ T7958] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.367414][ T5887] usb 6-1: device descriptor read/8, error -71 [ 352.400744][ T7958] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.419374][ T7958] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.479863][ T5887] usb usb6-port1: unable to enumerate USB device [ 352.519025][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.528316][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.667974][ T7958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.678418][ T7958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.295942][ T792] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 353.483473][ T792] usb 8-1: Using ep0 maxpacket: 32 [ 353.501424][ T792] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 353.536879][ T792] usb 8-1: config 0 interface 0 has no altsetting 0 [ 353.559320][ T792] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 353.582046][ T792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.616975][ T792] usb 8-1: config 0 descriptor?? [ 353.778016][T10890] nbd0: detected capacity change from 0 to 63 [ 353.829126][ T5812] block nbd0: Receive control failed (result -32) [ 353.829126][ T5816] block nbd0: Receive control failed (result -104) [ 354.037415][ T5816] Bluetooth: hci6: command tx timeout [ 354.404999][ T792] hid_parser_main: 5 callbacks suppressed [ 354.405024][ T792] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 354.422771][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1076'. [ 354.439841][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1076'. [ 354.450489][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1076'. [ 354.540279][ T792] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 354.548126][ T792] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 354.556346][ T792] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 354.567732][ T792] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 354.629267][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1077'. [ 354.702201][ T792] corsair-cpro 0003:1B1C:0C10.0011: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0 [ 354.932289][ T29] audit: type=1400 audit(1775412145.928:580): avc: denied { set_context_mgr } for pid=10907 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 354.954122][T10908] binder: 10907:10908 ioctl c0306201 200000000640 returned -14 [ 354.981707][T10908] binder: 10907:10908 ioctl 5402 200000000100 returned -22 [ 355.044729][T10916] wlan1 speed is unknown, defaulting to 1000 [ 355.091253][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.105090][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.119679][T10916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=10916 comm=syz.1.1082 [ 355.177345][ T792] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -110 [ 355.188055][ T5928] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 355.205614][ T792] usb 8-1: USB disconnect, device number 2 [ 355.236784][ T5931] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 355.365719][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 355.366458][ T5931] usb 7-1: device descriptor read/64, error -71 [ 355.371409][ T5928] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 355.397461][ T5928] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 355.406371][ T5928] usb 6-1: can't read configurations, error -61 [ 355.536317][ T5928] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 355.626187][ T5931] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 355.657737][T10928] comedi comedi4: comedi_config --init_data is deprecated [ 355.725864][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 355.733227][ T5928] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 355.757457][ T5931] usb 7-1: device descriptor read/64, error -71 [ 355.771363][ T5928] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 355.788222][ T5928] usb 6-1: can't read configurations, error -61 [ 355.794797][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.795038][ T5928] usb usb6-port1: attempt power cycle [ 355.814715][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.866811][ T5931] usb usb7-port1: attempt power cycle [ 356.146203][ T5928] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 356.216618][ T5931] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 356.246587][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 356.256821][ T5931] usb 7-1: device descriptor read/8, error -71 [ 356.256911][ T5928] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 356.314990][ T5928] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 356.329041][ T5928] usb 6-1: can't read configurations, error -61 [ 356.347214][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 356.358879][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 356.368959][T10937] IPVS: length: 2048 != 24 [ 356.486626][ T5928] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 356.496436][ T5931] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 356.547122][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.552718][ T5931] usb 7-1: device descriptor read/8, error -71 [ 356.566736][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.580103][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 356.686783][ T5931] usb usb7-port1: unable to enumerate USB device [ 356.697552][ T5928] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 356.738898][ T5928] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 356.765428][ T5928] usb 6-1: can't read configurations, error -61 [ 357.237179][ T5928] usb usb6-port1: unable to enumerate USB device [ 357.733546][T10963] overlay: ./file1 is not a directory [ 357.743268][ T29] audit: type=1400 audit(1775412148.738:581): avc: denied { getopt } for pid=10960 comm="syz.7.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 358.046611][ T5927] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 358.590448][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.603679][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 358.706113][ T5928] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 358.907634][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 358.919252][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.937528][ T5927] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 358.970086][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.002952][ T5927] usb 4-1: Product: syz [ 359.014625][ T5927] usb 4-1: Manufacturer: syz [ 359.024006][ T5927] usb 4-1: SerialNumber: syz [ 359.045532][ T5927] usb 4-1: config 0 descriptor?? [ 359.269978][ T5927] usb 4-1: USB disconnect, device number 39 [ 359.598645][ T5928] usb 7-1: config 0 has no interfaces? [ 359.604154][ T5928] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 359.625562][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.648136][ T5928] usb 7-1: config 0 descriptor?? [ 359.667046][ T5927] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 359.790887][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1100'. [ 359.946966][T10972] overlayfs: workdir and upperdir must reside under the same mount [ 359.972794][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.003508][ T5927] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 360.013992][ T29] audit: type=1400 audit(1775412150.998:582): avc: denied { link } for pid=10970 comm="syz.6.1096" name="file1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.039031][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.048319][ T5928] usb 7-1: USB disconnect, device number 12 [ 360.049904][ T5927] usb 6-1: Product: syz [ 360.061482][ T5927] usb 6-1: Manufacturer: syz [ 360.073630][ T5927] usb 6-1: SerialNumber: syz [ 360.099590][ T5927] usb 6-1: config 0 descriptor?? [ 360.118687][ T5927] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 360.142535][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 360.170642][ T29] audit: type=1400 audit(1775412151.168:583): avc: denied { read } for pid=10991 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 360.191733][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 360.224220][ T5927] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 360.283681][ T29] audit: type=1400 audit(1775412151.268:584): avc: denied { name_connect } for pid=10991 comm="syz.1.1103" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 360.330493][ T5927] usb 6-1: media controller created [ 360.335846][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.336163][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.369899][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.446797][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1104'. [ 360.462943][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 360.470542][ T5927] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 360.483262][ T29] audit: type=1400 audit(1775412151.448:585): avc: denied { nlmsg_read } for pid=10992 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.516182][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 360.546965][ T29] audit: type=1400 audit(1775412151.508:586): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.573672][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 360.586983][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 360.616750][ T5927] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 360.636697][ T29] audit: type=1400 audit(1775412151.508:587): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.703718][ T5927] usb 6-1: USB disconnect, device number 48 [ 360.749026][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 360.757551][ T5931] dvb-usb: error while querying for an remote control event. [ 360.893992][T11008] netlink: 'syz.1.1106': attribute type 9 has an invalid length. [ 360.904844][T11008] netlink: 'syz.1.1106': attribute type 11 has an invalid length. [ 360.918347][T11008] netlink: 'syz.1.1106': attribute type 12 has an invalid length. [ 360.928444][T11008] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1106'. [ 360.941541][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 360.946411][ T29] audit: type=1400 audit(1775412151.508:588): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.613078][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.630467][ T5927] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 361.652482][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.668743][ T29] audit: type=1400 audit(1775412152.668:589): avc: denied { read } for pid=11014 comm="syz.6.1107" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.901479][T11017] netlink: 'syz.7.1109': attribute type 1 has an invalid length. [ 361.929364][ T5887] hid-generic 0005:9C3F:0006.0012: item fetching failed at offset 0/3 [ 361.972441][ T5887] hid-generic 0005:9C3F:0006.0012: probe with driver hid-generic failed with error -22 [ 363.664770][T11060] ptrace attach of "./syz-executor exec"[9912] was attempted by " [ 363.668183][ T29] audit: type=1400 audit(1775412154.668:590): avc: denied { write } for pid=11054 comm="syz.6.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.864069][T11067] tmpfs: Too small a size for current use [ 363.875858][ T29] audit: type=1400 audit(1775412154.858:591): avc: denied { bpf } for pid=11063 comm="syz.3.1119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 363.930863][T11067] wlan1 speed is unknown, defaulting to 1000 [ 363.955450][ T5887] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 364.086306][ T5887] usb 8-1: device descriptor read/64, error -71 [ 364.217866][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 364.294862][T11072] netlink: 'syz.3.1120': attribute type 29 has an invalid length. [ 364.337914][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 364.365964][ T5887] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 364.525713][ T5887] usb 8-1: device descriptor read/64, error -71 [ 364.604870][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 364.646113][ T5887] usb usb8-port1: attempt power cycle [ 364.658013][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 364.688635][T11085] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1124'. [ 364.699946][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1123'. [ 364.792286][T11088] bridge0: port 3(vlan2) entered blocking state [ 364.798802][T11088] bridge0: port 3(vlan2) entered disabled state [ 364.805186][T11088] vlan2: entered allmulticast mode [ 364.827652][T11088] dummy0: entered allmulticast mode [ 364.841090][T11088] vlan2: entered promiscuous mode [ 364.857345][T11088] dummy0: entered promiscuous mode [ 364.868929][T11076] overlayfs: missing 'lowerdir' [ 364.926902][T11086] netlink: 'syz.5.1114': attribute type 1 has an invalid length. [ 364.934973][T11086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.035681][ T5887] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 365.073790][ T5887] usb 8-1: device descriptor read/8, error -71 [ 365.246721][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 365.246754][ T29] audit: type=1400 audit(1775412156.218:593): avc: denied { connect } for pid=11094 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 365.315614][ T5928] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 365.406213][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 365.506833][ T5887] usb 8-1: device descriptor read/8, error -71 [ 365.635343][T11110] __nla_validate_parse: 1 callbacks suppressed [ 365.642466][ T5887] usb usb8-port1: unable to enumerate USB device [ 365.646401][T11110] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1130'. [ 365.667543][ T5928] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 365.717447][ T5928] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 365.729853][ T5928] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 365.738973][ T5928] usb 6-1: config 3 has no interface number 0 [ 365.746240][ T5928] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 365.784623][ T5928] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 365.862507][ T5928] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 365.872440][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.877178][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.893774][ T5928] usb 6-1: Product: syz [ 365.894600][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.907360][ T5928] usb 6-1: Manufacturer: syz [ 365.911986][ T5928] usb 6-1: SerialNumber: syz [ 365.919813][T11097] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 366.022938][T11116] loop6: detected capacity change from 0 to 2640 [ 366.030038][T11116] buffer_io_error: 30 callbacks suppressed [ 366.030053][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.045161][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.053421][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.061339][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.069310][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.077757][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.085691][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.093588][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.101566][T11116] ldm_validate_partition_table(): Disk read failed. [ 366.108849][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.117021][T11116] Buffer I/O error on dev loop6, logical block 0, async page read [ 366.124916][T11116] Dev loop6: unable to read RDB block 0 [ 366.130799][T11116] loop6: unable to read partition table [ 366.137070][T11116] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 366.153866][T11116] blk_print_req_error: 30 callbacks suppressed [ 366.153906][T11116] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 366.170181][T11116] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 366.180722][T11116] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 366.190712][T11116] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 366.202602][T11116] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 366.212499][T11116] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 366.222403][T11116] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 366.232779][T11116] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 366.332351][ T29] audit: type=1400 audit(1775412157.018:594): avc: denied { append } for pid=11113 comm="syz.1.1132" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 366.403646][T11076] qnx4: unable to read the superblock [ 366.707361][T11086] fuse: Bad value for 'fd' [ 366.730993][ T5928] usb-storage 6-1:3.20: USB Mass Storage device detected [ 366.767202][ T5928] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 366.792232][ T5928] scsi host1: usb-storage 6-1:3.20 [ 366.893661][ T5928] usb 6-1: USB disconnect, device number 49 [ 366.918512][ T29] audit: type=1400 audit(1775412157.918:595): avc: denied { write } for pid=11127 comm="syz.3.1135" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 367.046424][T11132] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1136'. [ 367.092641][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1136'. [ 367.202059][T11135] wlan1 speed is unknown, defaulting to 1000 [ 367.413520][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1140'. [ 367.429751][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1140'. [ 368.987965][ T5888] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 369.381189][ T5888] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.772242][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.934501][ T29] audit: type=1400 audit(1775412160.928:596): avc: denied { listen } for pid=11146 comm="syz.6.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.964131][ T5888] usb 8-1: config 0 descriptor?? [ 370.111368][ T5888] cp210x 8-1:0.0: cp210x converter detected [ 370.366834][ T5888] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 370.378282][ T5888] cp210x 8-1:0.0: querying part number failed [ 370.435940][ T5888] usb 8-1: cp210x converter now attached to ttyUSB0 [ 370.471728][ T5888] usb 8-1: USB disconnect, device number 7 [ 370.526621][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 371.226721][ T5888] cp210x 8-1:0.0: device disconnected [ 371.951559][T11174] sp0: Synchronizing with TNC [ 371.961517][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 371.970793][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 371.980014][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 371.989075][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 371.998276][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 372.007139][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 372.016697][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 372.025607][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 372.034801][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 372.043686][T11174] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1146'. [ 372.129869][T11176] wlan1 speed is unknown, defaulting to 1000 [ 373.934468][T11208] evm: overlay not supported [ 374.071691][T11211] netlink: 'syz.3.1155': attribute type 2 has an invalid length. [ 374.082015][T11211] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 374.091020][T11211] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 374.795819][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.812172][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.857792][ T29] audit: type=1400 audit(1775412165.858:597): avc: denied { map } for pid=11231 comm="syz.3.1160" path="/proc/sys/net/ipv4/vs/sync_persist_mode" dev="proc" ino=31869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 374.962128][ T29] audit: type=1400 audit(1775412165.858:598): avc: denied { create } for pid=11231 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 375.366528][T11250] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 375.374701][T11250] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 375.384085][T11250] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 375.391914][T11250] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 375.984377][T11251] trusted_key: encrypted_key: insufficient parameters specified [ 376.059346][T11255] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 376.677352][ T5816] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 377.236734][T11272] __nla_validate_parse: 136 callbacks suppressed [ 377.236755][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'. [ 377.290007][T11274] netlink: 'syz.6.1170': attribute type 1 has an invalid length. [ 377.299254][T11274] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1170'. [ 377.655828][T11285] max out of range [ 377.829460][ T29] audit: type=1400 audit(1775412168.648:599): avc: denied { mount } for pid=11276 comm="syz.5.1171" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 378.050351][ T29] audit: type=1400 audit(1775412168.658:600): avc: denied { remount } for pid=11276 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 378.210763][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.413862][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.626730][ T29] audit: type=1400 audit(1775412169.488:601): avc: denied { unmount } for pid=6999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 378.742740][T11293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.848549][T11293] 9p: Bad value for 'rfdno' [ 379.545098][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1181'. [ 379.648175][ T29] audit: type=1400 audit(1775412170.648:602): avc: denied { setopt } for pid=11313 comm="syz.7.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 381.446823][T11326] netlink: 'syz.5.1184': attribute type 1 has an invalid length. [ 381.474745][T11326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.506354][T11326] bond2: (slave geneve2): making interface the new active one [ 381.521746][T11326] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 381.696552][ T5931] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 381.866778][ T5931] usb 7-1: Using ep0 maxpacket: 8 [ 381.875862][T11101] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 381.889914][ T5931] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 381.913565][ T5931] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 381.933452][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.968762][ T5931] usb 7-1: Product: syz [ 381.981340][ T5931] usb 7-1: Manufacturer: syz [ 382.016722][ T5931] usb 7-1: SerialNumber: syz [ 382.053255][ T5931] usb 7-1: config 0 descriptor?? [ 382.093218][ T5931] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 382.311799][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.606039][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.428372][ T5931] gspca_zc3xx: reg_w_i err -110 [ 383.633446][T11352] sctp: [Deprecated]: syz.7.1192 (pid 11352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.633446][T11352] Use struct sctp_sack_info instead [ 383.744345][T11354] binder: BC_ACQUIRE_RESULT not supported [ 384.083409][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 384.119057][T11358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1191'. [ 384.960298][ T7957] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.967673][T11354] binder: 11351:11354 ioctl c0306201 200000000500 returned -22 [ 384.969393][ T5931] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 384.993536][ T5931] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 385.003556][ T7957] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.065047][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.078349][ T5931] usb 7-1: USB disconnect, device number 13 [ 385.090822][ T5165] block nbd0: Connection timed out, retrying (0/2 alive) [ 385.102367][ T5165] block nbd0: Connection timed out, retrying (0/2 alive) [ 385.114661][T11361] block nbd0: Dead connection, failed to find a fallback [ 385.131413][T11361] block nbd0: shutting down sockets [ 385.131813][ T5165] block nbd0: Connection timed out, retrying (0/2 alive) [ 385.147739][T11361] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.161011][ T5165] block nbd0: Connection timed out, retrying (0/2 alive) [ 385.169189][T11361] buffer_io_error: 6 callbacks suppressed [ 385.169205][T11361] Buffer I/O error on dev nbd0, logical block 0, async page read [ 385.184866][T11361] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.195194][T11361] Buffer I/O error on dev nbd0, logical block 3, async page read [ 385.204124][T11361] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.214573][T11361] Buffer I/O error on dev nbd0, logical block 2, async page read [ 385.227107][T11361] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.235488][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 385.238087][T11361] Buffer I/O error on dev nbd0, logical block 1, async page read [ 385.260804][ T5798] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.286902][ T5798] Buffer I/O error on dev nbd0, logical block 0, async page read [ 385.304369][ T5798] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.395030][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.470962][ T5798] Buffer I/O error on dev nbd0, logical block 1, async page read [ 385.494998][ T5798] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.525016][ T5798] Buffer I/O error on dev nbd0, logical block 2, async page read [ 385.565466][ T29] audit: type=1400 audit(1775412176.548:603): avc: denied { wake_alarm } for pid=11368 comm="syz.6.1194" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.611521][ T5798] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.677829][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 385.696614][ T5798] Buffer I/O error on dev nbd0, logical block 3, async page read [ 385.714854][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.725129][ T5798] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.768801][ T24] usb 4-1: config 0 descriptor?? [ 385.811683][ T5798] Buffer I/O error on dev nbd0, logical block 0, async page read [ 385.941884][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.960242][ T5798] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 386.004643][ T5798] Buffer I/O error on dev nbd0, logical block 1, async page read [ 386.005621][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 386.025021][ T5798] ldm_validate_partition_table(): Disk read failed. [ 386.896298][ T5798] Dev nbd0: unable to read RDB block 0 [ 386.901863][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 386.927299][ T5798] nbd0: unable to read partition table [ 386.953620][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 386.972546][ T24] [drm] Initialized udl on minor 2 [ 386.986694][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 387.035873][ T5798] ldm_validate_partition_table(): Disk read failed. [ 387.172240][ T5798] Dev nbd0: unable to read RDB block 0 [ 387.210082][ T5798] nbd0: unable to read partition table [ 387.305802][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 387.313964][ T5887] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 387.346722][ T24] usb 4-1: USB disconnect, device number 40 [ 387.352862][ T5887] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 387.922102][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 388.166157][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 388.716560][ T5888] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 388.891862][T11439] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1207'. [ 388.936747][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 388.956634][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 389.006680][ T5888] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 389.025009][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.054977][ T5888] usb 6-1: Product: syz [ 389.065710][ T5888] usb 6-1: Manufacturer: syz [ 389.070340][ T5888] usb 6-1: SerialNumber: syz [ 389.098126][ T5888] usb 6-1: config 0 descriptor?? [ 389.098758][ T29] audit: type=1400 audit(1775412180.098:604): avc: denied { write } for pid=11445 comm="syz.7.1208" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 389.117319][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.140320][ T5888] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 389.186106][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.198280][ T29] audit: type=1400 audit(1775412180.128:605): avc: denied { write } for pid=11445 comm="syz.7.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 389.260144][ T29] audit: type=1400 audit(1775412180.128:606): avc: denied { ioctl } for pid=11445 comm="syz.7.1208" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 389.289696][ T29] audit: type=1400 audit(1775412180.138:607): avc: denied { read } for pid=11445 comm="syz.7.1208" path="socket:[31704]" dev="sockfs" ino=31704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 389.375093][ T29] audit: type=1400 audit(1775412180.238:608): avc: denied { getopt } for pid=11444 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.375139][ T29] audit: type=1404 audit(1775412180.238:609): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 389.375169][ T29] audit: type=1400 audit(1775412180.248:610): avc: denied { execmem } for pid=11449 comm="syz.7.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 389.375202][ T29] audit: type=1400 audit(1775412180.248:611): avc: denied { execmem } for pid=11449 comm="syz.7.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 389.375235][ T29] audit: type=1400 audit(1775412180.248:612): avc: denied { execmem } for pid=11449 comm="syz.7.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 389.475662][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.666199][ T5888] gspca_zc3xx: reg_w_i err -110 [ 390.085331][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1221'. [ 390.123116][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1221'. [ 390.183896][ T3511] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.208127][ T3511] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.243222][ T3511] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.248953][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1222'. [ 390.256612][ T5888] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 390.288771][ T5888] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 390.297522][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1222'. [ 390.318867][ T3511] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.343894][ T5816] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 390.353223][ T5816] Bluetooth: Wrong link type (-22) [ 390.360319][ T5816] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 390.367628][ T5816] Bluetooth: Wrong link type (-22) [ 390.372939][ T5816] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 390.380107][ T5816] Bluetooth: Wrong link type (-22) [ 390.385397][ T5816] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 390.403820][ T5816] Bluetooth: Wrong link type (-22) [ 390.410452][ T5816] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 390.417398][ T5816] Bluetooth: Wrong link type (-22) [ 390.423005][ T5816] Bluetooth: hci6: link tx timeout [ 390.429125][T11491] wlan1 speed is unknown, defaulting to 1000 [ 390.439069][ T5816] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.600236][T11499] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 390.625249][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 390.625267][ T29] audit: type=1400 audit(1775412181.618:743): avc: denied { map_create } for pid=11498 comm="syz.7.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 390.695458][ T29] audit: type=1400 audit(1775412181.668:744): avc: denied { read write } for pid=10716 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 390.888188][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 391.044363][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11508 comm=syz.3.1230 [ 391.058089][ T29] audit: type=1400 audit(1775412181.698:745): avc: denied { read write } for pid=9912 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 391.111758][ T29] audit: type=1400 audit(1775412181.708:746): avc: denied { create } for pid=11501 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 391.261676][ T29] audit: type=1400 audit(1775412181.718:747): avc: denied { execmem } for pid=11500 comm="syz.7.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 391.545216][ T5888] usb 6-1: USB disconnect, device number 51 [ 391.571913][ T29] audit: type=1400 audit(1775412181.808:748): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 391.697263][ T29] audit: type=1400 audit(1775412181.818:749): avc: denied { create } for pid=11504 comm="syz.6.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 391.729612][ T29] audit: type=1400 audit(1775412181.828:750): avc: denied { create } for pid=11504 comm="syz.6.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 391.751496][ T29] audit: type=1400 audit(1775412181.828:751): avc: denied { mount } for pid=11504 comm="syz.6.1229" name="/" dev="ramfs" ino=32518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 391.784362][ T29] audit: type=1400 audit(1775412181.838:752): avc: denied { mounton } for pid=11504 comm="syz.6.1229" path="/65/file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 392.632992][T11492] Bluetooth: hci6: command 0x0406 tx timeout [ 393.650222][T11573] netlink: 'syz.5.1249': attribute type 10 has an invalid length. [ 393.809859][T11573] netlink: 'syz.5.1249': attribute type 10 has an invalid length. [ 393.847984][T11576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11576 comm=syz.6.1251 [ 393.902861][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1249'. [ 394.019277][T11573] batadv0: entered promiscuous mode [ 394.084068][T11573] batadv0: entered allmulticast mode [ 394.160537][T11573] bond0: (slave batadv0): Releasing backup interface [ 394.228970][T11573] bridge0: port 3(batadv0) entered blocking state [ 394.248550][T11573] bridge0: port 3(batadv0) entered disabled state [ 394.687049][ T7954] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 394.698428][ T7954] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 394.983649][T11616] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 395.112544][T11619] wlan1 speed is unknown, defaulting to 1000 [ 395.248767][T11627] wlan1 speed is unknown, defaulting to 1000 [ 395.642552][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 395.642739][ T29] audit: type=1400 audit(1775412186.638:1059): avc: denied { execmem } for pid=11647 comm="syz.6.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 395.718945][ T29] audit: type=1400 audit(1775412186.718:1060): avc: denied { read } for pid=11647 comm="syz.6.1276" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 395.750598][ T29] audit: type=1400 audit(1775412186.748:1061): avc: denied { create } for pid=11647 comm="syz.6.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 395.772144][ T29] audit: type=1400 audit(1775412186.768:1062): avc: denied { name_bind } for pid=11647 comm="syz.6.1276" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 395.800072][ T29] audit: type=1400 audit(1775412186.798:1063): avc: denied { create } for pid=11647 comm="syz.6.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 395.821110][ T29] audit: type=1400 audit(1775412186.818:1064): avc: denied { read } for pid=11647 comm="syz.6.1276" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 395.873942][ T29] audit: type=1400 audit(1775412186.858:1065): avc: denied { read write } for pid=10716 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 395.901170][ T29] audit: type=1400 audit(1775412186.868:1066): avc: denied { create } for pid=11650 comm="syz.7.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 395.921948][ T29] audit: type=1400 audit(1775412186.898:1067): avc: denied { read write } for pid=11650 comm="syz.7.1277" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 395.984329][ T29] audit: type=1400 audit(1775412186.968:1068): avc: denied { read write } for pid=9912 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 396.071296][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1278'. [ 396.082258][T11655] netlink: 'syz.7.1278': attribute type 5 has an invalid length. [ 396.129388][T11655] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1278'. [ 397.500940][T11711] kAFS: unable to lookup cell 'ÿ' [ 397.549564][T11714] netlink: 'syz.5.1298': attribute type 1 has an invalid length. [ 397.629838][T11714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.942431][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1301'. [ 397.964179][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1301'. [ 398.526663][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1301'. [ 398.598353][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.612200][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.623320][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.676978][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.728087][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.999829][T11747] Cannot find del_set index 2 as target [ 399.143071][T11758] wlan1 speed is unknown, defaulting to 1000 [ 399.932726][T11793] netlink: 'syz.3.1321': attribute type 4 has an invalid length. [ 400.573093][T11804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.656631][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 400.656650][ T29] audit: type=1400 audit(1775412191.648:1318): avc: denied { read write } for pid=9912 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 400.697898][ T29] audit: type=1400 audit(1775412191.658:1319): avc: denied { prog_load } for pid=11807 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 400.729224][ T29] audit: type=1400 audit(1775412191.658:1320): avc: denied { read write } for pid=11801 comm="syz.5.1326" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 400.754667][ T29] audit: type=1400 audit(1775412191.688:1321): avc: denied { execmem } for pid=11807 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 400.804695][ T29] audit: type=1400 audit(1775412191.698:1322): avc: denied { read } for pid=11810 comm="syz.6.1330" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 400.907257][ T29] audit: type=1400 audit(1775412191.698:1323): avc: denied { read } for pid=11810 comm="syz.6.1330" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=0 [ 400.957499][ T29] audit: type=1400 audit(1775412191.728:1324): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 401.026696][ T29] audit: type=1400 audit(1775412191.728:1325): avc: denied { allowed } for pid=11807 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 401.070135][ T29] audit: type=1400 audit(1775412191.728:1326): avc: denied { map_create } for pid=11807 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 401.104044][ T29] audit: type=1400 audit(1775412191.728:1327): avc: denied { map_create } for pid=11807 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 402.684084][T11873] netlink: 'syz.7.1350': attribute type 10 has an invalid length. [ 402.721467][T11873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.750655][T11873] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 402.822526][T11878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11878 comm=syz.3.1353 [ 402.837722][T11873] netlink: 'syz.7.1350': attribute type 10 has an invalid length. [ 402.869316][T11873] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1350'. [ 402.932039][T11873] batadv0: entered promiscuous mode [ 402.986680][T11873] batadv0: entered allmulticast mode [ 403.038573][T11873] bond0: (slave batadv0): Releasing backup interface [ 403.070412][T11873] bridge0: port 3(batadv0) entered blocking state [ 403.085111][T11873] bridge0: port 3(batadv0) entered disabled state [ 403.146592][ T7954] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 403.157078][ T7954] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 403.271073][T11894] FAULT_INJECTION: forcing a failure. [ 403.271073][T11894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.309169][T11894] CPU: 1 UID: 0 PID: 11894 Comm: syz.3.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.309197][T11894] Tainted: [L]=SOFTLOCKUP [ 403.309208][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.309216][T11894] Call Trace: [ 403.309222][T11894] [ 403.309228][T11894] dump_stack_lvl+0x100/0x190 [ 403.309260][T11894] should_fail_ex.cold+0x5/0xa [ 403.309281][T11894] _copy_to_user+0x32/0xd0 [ 403.309300][T11894] simple_read_from_buffer+0xcb/0x170 [ 403.309319][T11894] proc_fail_nth_read+0x1af/0x230 [ 403.309344][T11894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.309367][T11894] ? rw_verify_area+0xce/0x6d0 [ 403.309387][T11894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.309407][T11894] vfs_read+0x1e4/0xb30 [ 403.309424][T11894] ? __pfx_vfs_read+0x10/0x10 [ 403.309436][T11894] ? __fget_files+0x215/0x3d0 [ 403.309462][T11894] ? __fget_files+0x21f/0x3d0 [ 403.309484][T11894] ksys_read+0x12a/0x250 [ 403.309496][T11894] ? __pfx_ksys_read+0x10/0x10 [ 403.309515][T11894] do_syscall_64+0x106/0xf80 [ 403.309545][T11894] ? clear_bhb_loop+0x40/0x90 [ 403.309563][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.309580][T11894] RIP: 0033:0x7fc2c695d04e [ 403.309594][T11894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.309610][T11894] RSP: 002b:00007fc2c77c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.309626][T11894] RAX: ffffffffffffffda RBX: 00007fc2c77ca6c0 RCX: 00007fc2c695d04e [ 403.309636][T11894] RDX: 000000000000000f RSI: 00007fc2c77ca0a0 RDI: 0000000000000003 [ 403.309645][T11894] RBP: 00007fc2c77ca090 R08: 0000000000000000 R09: 0000000000000000 [ 403.309654][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.309663][T11894] R13: 00007fc2c6c16038 R14: 00007fc2c6c15fa0 R15: 00007ffee7462718 [ 403.309684][T11894] [ 404.078604][T11917] syzkaller0: entered promiscuous mode [ 404.097481][T11917] syzkaller0: entered allmulticast mode [ 404.982273][T11946] bridge2: entered promiscuous mode [ 404.999299][T11946] bridge2: entered allmulticast mode [ 405.383402][T11975] netlink: 'syz.6.1385': attribute type 10 has an invalid length. [ 405.432668][T11975] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 405.503638][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1388'. [ 405.684147][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 405.684164][ T29] audit: type=1400 audit(1775412196.678:1759): avc: denied { module_request } for pid=11986 comm="syz.6.1391" kmod="fs-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 405.727303][ T29] audit: type=1400 audit(1775412196.718:1760): avc: denied { create } for pid=11986 comm="syz.6.1391" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 405.789800][ T29] audit: type=1400 audit(1775412196.788:1761): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 405.848505][ T29] audit: type=1400 audit(1775412196.848:1762): avc: denied { read write } for pid=9912 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 405.895241][ T29] audit: type=1400 audit(1775412196.878:1763): avc: denied { read append } for pid=11990 comm="syz.3.1392" name="demux0" dev="devtmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 405.924361][ T29] audit: type=1400 audit(1775412196.878:1764): avc: denied { write } for pid=11990 comm="syz.3.1392" name="ip_vs_stats_percpu" dev="proc" ino=4026533175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 405.955121][ T29] audit: type=1400 audit(1775412196.878:1765): avc: denied { read } for pid=11990 comm="syz.3.1392" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 405.981776][ T29] audit: type=1400 audit(1775412196.878:1766): avc: denied { create } for pid=11990 comm="syz.3.1392" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 406.010809][ T29] audit: type=1400 audit(1775412196.888:1767): avc: denied { read write } for pid=6999 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.121840][ T29] audit: type=1400 audit(1775412196.888:1768): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 407.311105][T12032] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1405'. [ 410.691444][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 410.691462][ T29] audit: type=1400 audit(1775412201.688:1950): avc: denied { read write } for pid=10716 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 410.709570][ T29] audit: type=1400 audit(1775412201.708:1951): avc: denied { create } for pid=12099 comm="syz.7.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 410.710720][ T29] audit: type=1400 audit(1775412201.708:1952): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 410.715746][ T29] audit: type=1400 audit(1775412201.708:1953): avc: denied { read write } for pid=12099 comm="syz.7.1429" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 410.749239][ T29] audit: type=1400 audit(1775412201.748:1954): avc: denied { read write } for pid=10716 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 410.758267][ T29] audit: type=1400 audit(1775412201.758:1955): avc: denied { create } for pid=12101 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 410.759911][ T29] audit: type=1400 audit(1775412201.758:1956): avc: denied { create } for pid=12101 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 410.760950][ T29] audit: type=1400 audit(1775412201.758:1957): avc: denied { mounton } for pid=12101 comm="syz.1.1430" path="/299" dev="tmpfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 410.761455][ T29] audit: type=1400 audit(1775412201.758:1958): avc: denied { execmem } for pid=12101 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 410.763354][ T29] audit: type=1400 audit(1775412201.758:1959): avc: denied { execute } for pid=12101 comm="syz.1.1430" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 411.294022][T12118] netlink: 'syz.5.1435': attribute type 10 has an invalid length. [ 413.697081][T12191] bond2: entered allmulticast mode [ 413.921250][T12191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.381586][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 414.397398][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 415.013206][T12229] FAULT_INJECTION: forcing a failure. [ 415.013206][T12229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.026619][T12229] CPU: 1 UID: 0 PID: 12229 Comm: syz.1.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.026639][T12229] Tainted: [L]=SOFTLOCKUP [ 415.026643][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.026650][T12229] Call Trace: [ 415.026656][T12229] [ 415.026662][T12229] dump_stack_lvl+0x100/0x190 [ 415.026691][T12229] should_fail_ex.cold+0x5/0xa [ 415.026707][T12229] _copy_from_user+0x2e/0xd0 [ 415.026720][T12229] kstrtouint_from_user+0xd6/0x1d0 [ 415.026737][T12229] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 415.026751][T12229] ? __lock_acquire+0x4a5/0x2630 [ 415.026765][T12229] ? lock_acquire+0x1cf/0x380 [ 415.026778][T12229] proc_fail_nth_write+0x83/0x220 [ 415.026797][T12229] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.026816][T12229] vfs_write+0x2aa/0x1070 [ 415.026828][T12229] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.026844][T12229] ? __pfx_vfs_write+0x10/0x10 [ 415.026854][T12229] ? __fget_files+0x215/0x3d0 [ 415.026869][T12229] ? __fget_files+0x21f/0x3d0 [ 415.026884][T12229] ksys_write+0x12a/0x250 [ 415.026894][T12229] ? __pfx_ksys_write+0x10/0x10 [ 415.026908][T12229] do_syscall_64+0x106/0xf80 [ 415.026925][T12229] ? clear_bhb_loop+0x40/0x90 [ 415.026938][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.026955][T12229] RIP: 0033:0x7faf4f35d04e [ 415.026964][T12229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.026974][T12229] RSP: 002b:00007faf501eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.026986][T12229] RAX: ffffffffffffffda RBX: 00007faf501eb6c0 RCX: 00007faf4f35d04e [ 415.026993][T12229] RDX: 0000000000000001 RSI: 00007faf501eb0a0 RDI: 0000000000000004 [ 415.026999][T12229] RBP: 00007faf501eb090 R08: 0000000000000000 R09: 0000000000000000 [ 415.027005][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.027011][T12229] R13: 00007faf4f616038 R14: 00007faf4f615fa0 R15: 00007ffd214a1ae8 [ 415.027024][T12229] [ 415.701996][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 415.702018][ T29] audit: type=1400 audit(1775412206.698:2254): avc: denied { read } for pid=12249 comm="syz.7.1479" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 415.809801][ T29] audit: type=1400 audit(1775412206.808:2255): avc: denied { read write } for pid=6999 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 416.291212][T12257] wlan1 speed is unknown, defaulting to 1000 [ 416.406453][ T29] audit: type=1400 audit(1775412206.868:2256): avc: denied { read } for pid=12252 comm="syz.6.1478" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 416.429602][ T29] audit: type=1400 audit(1775412206.868:2257): avc: denied { mount } for pid=12252 comm="syz.6.1478" name="/" dev="ramfs" ino=35055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 416.453797][ T29] audit: type=1400 audit(1775412207.288:2258): avc: denied { create } for pid=12255 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 416.474381][ T29] audit: type=1400 audit(1775412207.348:2259): avc: denied { read write } for pid=6999 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 416.502042][ T29] audit: type=1400 audit(1775412207.448:2260): avc: denied { read write } for pid=12252 comm="syz.6.1478" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=0 [ 416.556300][T12265] serio: Serial port ttyS3 [ 416.643028][ T29] audit: type=1400 audit(1775412207.448:2261): avc: denied { map_create } for pid=12252 comm="syz.6.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 416.693967][ T29] audit: type=1400 audit(1775412207.468:2262): avc: denied { read } for pid=12264 comm="syz.5.1481" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 416.732997][ T29] audit: type=1400 audit(1775412207.668:2263): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 417.154760][T12278] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 417.235567][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.670773][T12292] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 417.681645][T12292] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 417.868127][T12297] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 417.882001][T12297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.898334][T12297] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 418.404402][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 418.870923][T12322] wlan1 speed is unknown, defaulting to 1000 [ 420.119560][T12344] sp0: Synchronizing with TNC [ 420.238693][T12359] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 420.287022][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.287303][T12343] [U] è [ 420.319282][T12359] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 420.362090][T12363] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 420.398363][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1515'. [ 420.401264][T12363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1514'. [ 420.593873][T12363] batadv0: entered promiscuous mode [ 420.627242][T12363] batadv0: entered allmulticast mode [ 420.668090][T12363] bond0: (slave batadv0): Releasing backup interface [ 420.707153][ T29] kauditd_printk_skb: 969 callbacks suppressed [ 420.707169][ T29] audit: type=1400 audit(1775412211.708:3233): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.734604][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.734622][ T5477] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 420.734634][ T5477] audit: backlog limit exceeded [ 420.734675][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.734685][ T5477] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 420.734696][ T5477] audit: backlog limit exceeded [ 420.734736][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.734746][ T5477] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 420.734756][ T5477] audit: backlog limit exceeded [ 420.770875][T12363] bridge0: port 1(batadv0) entered blocking state [ 420.930811][T12363] bridge0: port 1(batadv0) entered disabled state [ 420.980260][T12374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12374 comm=syz.6.1515 [ 421.456897][ T3511] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 421.466430][ T3511] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 421.674996][T12397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1525'. [ 421.754846][T12400] netlink: 'syz.1.1524': attribute type 39 has an invalid length. [ 422.912599][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1531'. [ 422.927628][T12418] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1531'. [ 423.312648][T12430] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 423.619559][ T3511] Bluetooth: hci7: Frame reassembly failed (-84) [ 425.103992][T12482] bond4: Removing last arp target with arp_interval on [ 425.151641][T12482] bond4: entered promiscuous mode [ 425.159467][T12482] bond4: entered allmulticast mode [ 425.165114][T12482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.636335][ T5816] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 425.720050][ T29] kauditd_printk_skb: 15689 callbacks suppressed [ 425.720072][ T29] audit: type=1400 audit(1775412216.708:14030): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 425.770418][T12494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.777300][T12491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.777322][T12491] audit: audit_lost=1635 audit_rate_limit=0 audit_backlog_limit=64 [ 425.777337][T12491] audit: backlog limit exceeded [ 425.777550][T12491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.777563][T12491] audit: audit_lost=1636 audit_rate_limit=0 audit_backlog_limit=64 [ 425.777574][T12491] audit: backlog limit exceeded [ 425.825002][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.828438][ T9912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 426.657717][T12516] kAFS: unable to lookup cell 'ÿ' [ 426.924847][T12521] kAFS: unable to lookup cell '(,c¾Ì' [ 427.138877][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1569'. [ 427.413787][T12526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.527435][T12526] bond_slave_0: entered promiscuous mode [ 427.534233][T12526] bond_slave_1: entered promiscuous mode [ 427.636372][T12526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.679881][T12526] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 429.255102][T12563] wlan1 speed is unknown, defaulting to 1000 [ 430.752567][ T29] kauditd_printk_skb: 7489 callbacks suppressed [ 430.752592][ T29] audit: type=1400 audit(1775412221.668:20653): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.777248][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.795001][ T5808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.887993][ T5808] audit: audit_lost=1927 audit_rate_limit=0 audit_backlog_limit=64 [ 430.901764][ T29] audit: type=1400 audit(1775412221.748:20654): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.924736][ T5808] audit: backlog limit exceeded [ 430.954671][ T29] audit: type=1400 audit(1775412221.748:20655): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.979034][ T5477] audit: audit_lost=1928 audit_rate_limit=0 audit_backlog_limit=64 [ 430.991031][ T29] audit: type=1400 audit(1775412221.748:20656): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 431.022519][ T5477] audit: backlog limit exceeded [ 431.869616][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.877030][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.904503][T12653] bond_slave_0: left promiscuous mode [ 432.041494][T12653] bond_slave_1: left promiscuous mode [ 432.313738][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.355041][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.658103][T12653] bond2: left allmulticast mode [ 432.724908][T12655] veth3: entered promiscuous mode [ 432.740433][T12655] veth3: entered allmulticast mode [ 432.834903][ T7957] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.844421][ T7957] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.898546][ T7957] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.920649][ T7957] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.990033][T12664] wlan1 speed is unknown, defaulting to 1000 [ 432.997320][ T7957] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.012216][ T7957] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.094095][ T7957] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.108440][ T7957] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.132710][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 433.740748][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1626'. [ 433.790328][T12706] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1626'. [ 434.317216][T12719] netlink: 'syz.6.1629': attribute type 39 has an invalid length. [ 435.632860][T12759] wlan1 speed is unknown, defaulting to 1000 [ 435.757846][ T29] kauditd_printk_skb: 8732 callbacks suppressed [ 435.757864][ T29] audit: type=1400 audit(1775412226.748:28525): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.833652][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 435.848685][ T29] audit: type=1400 audit(1775412226.758:28526): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.851115][T12767] audit: audit_backlog=65 > audit_backlog_limit=64 [ 435.875491][ T29] audit: type=1400 audit(1775412226.758:28527): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.899385][ T29] audit: type=1400 audit(1775412226.758:28528): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.929772][ T5477] audit: audit_lost=2217 audit_rate_limit=0 audit_backlog_limit=64 [ 435.939194][ T29] audit: type=1400 audit(1775412226.758:28529): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.963388][ T29] audit: type=1400 audit(1775412226.758:28530): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.984749][T12767] audit: audit_lost=2218 audit_rate_limit=0 audit_backlog_limit=64 [ 436.598995][T12781] trusted_key: encrypted_key: keyword 'ndefault' not recognized [ 436.629037][T12781] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 436.718562][T12788] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 436.812296][T12797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=12797 comm=syz.3.1659 [ 437.877735][T12847] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 438.019184][T12848] bond4: entered promiscuous mode [ 438.073097][T12848] bond4: entered allmulticast mode [ 438.110461][T12848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 438.587292][T12859] bridge3: entered promiscuous mode [ 438.652087][T12859] bridge3: entered allmulticast mode [ 438.782779][ T7954] Bluetooth: hci7: Frame reassembly failed (-84) [ 439.638988][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.648730][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.793474][ T29] kauditd_printk_skb: 11446 callbacks suppressed [ 440.793493][ T29] audit: type=1400 audit(1775412231.788:39142): avc: denied { create } for pid=12905 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 440.874277][T11492] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 440.874286][ T5816] Bluetooth: hci7: command 0xfc11 tx timeout [ 440.874523][ T29] audit: type=1400 audit(1775412231.818:39143): avc: denied { create } for pid=12905 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 440.939130][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.946202][ T5477] audit: audit_lost=2497 audit_rate_limit=0 audit_backlog_limit=64 [ 440.982541][ T5477] audit: backlog limit exceeded [ 440.998066][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 441.036581][ T9912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 441.043352][ T5477] audit: audit_lost=2498 audit_rate_limit=0 audit_backlog_limit=64 [ 441.052550][ T9912] audit: audit_lost=2499 audit_rate_limit=0 audit_backlog_limit=64 [ 441.061101][ T5477] audit: backlog limit exceeded [ 441.208117][T12917] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1698'. [ 441.293381][T12917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.392201][T12917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.536204][T12917] bond0 (unregistering): Released all slaves [ 443.930092][T12992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1729'. [ 444.238595][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 444.604422][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 444.948234][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1744'. [ 445.327351][T13047] team0 (unregistering): Port device team_slave_0 removed [ 445.360659][T13047] team0 (unregistering): Port device team_slave_1 removed [ 445.881499][ T29] kauditd_printk_skb: 10415 callbacks suppressed [ 445.881516][ T29] audit: type=1400 audit(1775412236.878:49155): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 445.971153][ T29] audit: type=1400 audit(1775412236.878:49156): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 446.088196][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.097206][ T29] audit: type=1400 audit(1775412236.958:49157): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 446.150667][ T5808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.157428][ T5477] audit: audit_lost=2634 audit_rate_limit=0 audit_backlog_limit=64 [ 446.166419][ T5808] audit: audit_lost=2635 audit_rate_limit=0 audit_backlog_limit=64 [ 446.198451][ T9912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.204996][ T5477] audit: backlog limit exceeded [ 446.211039][ T5808] audit: backlog limit exceeded [ 446.580093][T11492] Bluetooth: hci6: unexpected event for opcode 0x1408 [ 446.623326][T13085] block device autoloading is deprecated and will be removed. [ 447.207379][T13111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.297033][T13111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.447371][T13117] netlink: 'syz.5.1770': attribute type 21 has an invalid length. [ 447.457048][T13117] netlink: 'syz.5.1770': attribute type 6 has an invalid length. [ 447.465048][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1770'. [ 450.562267][T13172] bridge0: port 2(hsr0) entered blocking state [ 450.673292][T13172] bridge0: port 2(hsr0) entered disabled state [ 450.766123][T13172] hsr0: entered allmulticast mode [ 450.886669][ T29] kauditd_printk_skb: 13801 callbacks suppressed [ 450.886691][ T29] audit: type=1400 audit(1775412241.878:55739): avc: denied { create } for pid=13180 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 450.906977][T13172] hsr_slave_0: entered allmulticast mode [ 450.925719][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.936873][T13184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.944408][ T5477] audit: audit_lost=5043 audit_rate_limit=0 audit_backlog_limit=64 [ 450.946669][T13181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.953037][T13184] audit: audit_lost=5044 audit_rate_limit=0 audit_backlog_limit=64 [ 450.976736][T10716] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.985175][ T5477] audit: backlog limit exceeded [ 450.995308][T10716] audit: audit_lost=5045 audit_rate_limit=0 audit_backlog_limit=64 [ 450.995983][ T29] audit: type=1400 audit(1775412241.888:55740): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 451.015392][T13172] hsr_slave_1: entered allmulticast mode [ 451.359519][T13172] hsr0: entered promiscuous mode [ 451.484386][T13172] bridge0: port 2(hsr0) entered blocking state [ 451.490683][T13172] bridge0: port 2(hsr0) entered forwarding state [ 452.277103][T13201] bridge0: entered allmulticast mode [ 453.715504][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.334647][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1811'. [ 455.921034][ T5477] audit_log_start: 8560 callbacks suppressed [ 455.921051][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.946788][T13302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.953336][T13302] audit: audit_lost=5149 audit_rate_limit=0 audit_backlog_limit=64 [ 455.972615][ T5477] audit: audit_lost=5150 audit_rate_limit=0 audit_backlog_limit=64 [ 455.991872][T10716] audit: audit_backlog=65 > audit_backlog_limit=64 [ 456.016747][ T5477] audit: backlog limit exceeded [ 456.031913][T10716] audit: audit_lost=5151 audit_rate_limit=0 audit_backlog_limit=64 [ 456.046953][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 456.053488][ T5477] audit: audit_lost=5152 audit_rate_limit=0 audit_backlog_limit=64 [ 456.076585][T10716] audit: backlog limit exceeded [ 456.658815][T13323] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1833'. [ 457.488230][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 457.494416][T11492] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 457.748955][T13348] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 457.965175][T13348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.241540][T13346] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 458.291314][T13346] bond5: (slave wlan0): Opening slave failed [ 458.654565][T13377] trusted_key: encrypted_key: master key parameter 'dXfault' is invalid [ 459.105083][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1853'. [ 459.168582][T13387] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1853'. [ 459.258687][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1855'. [ 459.327125][T13394] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 459.427015][T13396] bond5: (slave geneve2): making interface the new active one [ 459.437689][T13396] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 459.450069][ T3511] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.507105][ T3511] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.555930][ T3511] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.578473][ T6509] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.993766][T11492] Bluetooth: hci2: link tx timeout [ 459.999327][T11492] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 460.497245][T13425] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1867'. [ 460.960553][ T29] kauditd_printk_skb: 9172 callbacks suppressed [ 460.961978][ T29] audit: type=1400 audit(1775412251.918:71346): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 461.153148][T13449] block device autoloading is deprecated and will be removed. [ 461.192610][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.217350][T13449] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.223991][T13449] audit: audit_lost=5758 audit_rate_limit=0 audit_backlog_limit=64 [ 461.242385][ T5477] audit: audit_lost=5759 audit_rate_limit=0 audit_backlog_limit=64 [ 461.261661][ T29] audit: type=1400 audit(1775412251.918:71347): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 461.274305][ T5477] audit: backlog limit exceeded [ 461.291693][T13454] netlink: 'syz.1.1872': attribute type 4 has an invalid length. [ 461.300025][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.300040][ T5477] audit: audit_lost=5760 audit_rate_limit=0 audit_backlog_limit=64 [ 461.300052][ T5477] audit: backlog limit exceeded [ 461.601202][T13457] netlink: 'syz.1.1872': attribute type 4 has an invalid length. [ 462.035828][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 463.159290][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.166629][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.423772][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.500512][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.009106][ T6509] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.034351][ T6509] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.400464][ T6509] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.584509][ T6509] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.641592][ T6509] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.693224][ T6509] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.728726][ T6509] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.751958][ T6509] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.923590][T13524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.610635][T13539] netlink: 'syz.3.1891': attribute type 3 has an invalid length. [ 465.643166][T13541] serio: Serial port ptm0 [ 465.954702][T13560] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 465.961878][T13560] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 465.967770][ T29] kauditd_printk_skb: 4481 callbacks suppressed [ 465.967786][ T29] audit: type=1400 audit(1775412256.968:72837): avc: denied { getattr } for pid=13562 comm="mkdir" path="/run" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 465.987904][T13560] vhci_hcd vhci_hcd.0: Device attached [ 466.038981][ T29] audit: type=1400 audit(1775412257.008:72838): avc: denied { search } for pid=13556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 466.062450][T13563] vhci_hcd: connection closed [ 466.069317][ T49] vhci_hcd vhci_hcd.7: stop threads [ 466.097738][ T49] vhci_hcd vhci_hcd.7: release socket [ 466.099865][ T29] audit: type=1400 audit(1775412257.008:72839): avc: denied { search } for pid=13556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 466.103261][ T49] vhci_hcd vhci_hcd.7: disconnect device [ 466.170502][ T29] audit: type=1400 audit(1775412257.008:72840): avc: denied { search } for pid=13556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 466.574991][ T29] audit: type=1400 audit(1775412257.008:72841): avc: denied { search } for pid=13556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 466.661853][ T29] audit: type=1400 audit(1775412257.008:72842): avc: denied { search } for pid=13556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 466.713967][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.723006][T13573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.731872][T13573] audit: audit_lost=6758 audit_rate_limit=0 audit_backlog_limit=64 [ 466.736779][T13575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.632083][T13597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53114 sclass=netlink_route_socket pid=13597 comm=syz.5.1907 [ 468.123414][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 468.299346][T13627] wlan1 speed is unknown, defaulting to 1000 [ 468.370818][T13629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=13629 comm=syz.7.1916 [ 469.786737][T13672] netlink: 'syz.5.1924': attribute type 1 has an invalid length. [ 471.857759][ T29] kauditd_printk_skb: 7054 callbacks suppressed [ 471.857774][ T29] audit: type=1400 audit(1775412261.638:78980): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 471.918714][ T29] audit: type=1400 audit(1775412261.638:78981): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 471.919543][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.056602][ T5477] audit: audit_lost=7065 audit_rate_limit=0 audit_backlog_limit=64 [ 472.064717][T13688] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 472.070164][ T29] audit: type=1400 audit(1775412261.638:78982): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 472.071216][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.111361][ T5477] audit: backlog limit exceeded [ 472.129842][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.139573][ T29] audit: type=1400 audit(1775412261.638:78983): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 472.175554][T13688] vhci_hcd vhci_hcd.0: Device attached [ 472.194691][T13689] vhci_hcd: connection closed [ 472.197514][ T6513] vhci_hcd vhci_hcd.7: stop threads [ 472.211948][ T5477] audit: audit_lost=7066 audit_rate_limit=0 audit_backlog_limit=64 [ 472.215370][ T6513] vhci_hcd vhci_hcd.7: release socket [ 472.241206][ T5477] audit: backlog limit exceeded [ 472.246391][ T6513] vhci_hcd vhci_hcd.7: disconnect device [ 472.329630][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 472.818284][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1938'. [ 472.865974][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1938'. [ 473.113292][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1939'. [ 473.853523][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1944'. [ 473.878433][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1944'. [ 475.251419][T13752] netlink: 672 bytes leftover after parsing attributes in process `syz.6.1952'. [ 476.015013][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 476.571254][T13791] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1966'. [ 476.878023][ T29] kauditd_printk_skb: 6376 callbacks suppressed [ 476.878041][ T29] audit: type=1400 audit(1775412267.868:84844): avc: denied { map_create } for pid=13797 comm="syz.5.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 476.888961][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.907541][ T6999] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.945185][T13793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.024733][ T6999] audit: audit_lost=7239 audit_rate_limit=0 audit_backlog_limit=64 [ 477.025736][T13801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.034393][ T6999] audit: backlog limit exceeded [ 477.045829][T13801] audit: audit_lost=7240 audit_rate_limit=0 audit_backlog_limit=64 [ 477.064956][T13801] audit: backlog limit exceeded [ 477.072711][ T29] audit: type=1400 audit(1775412267.868:84845): avc: denied { map_create } for pid=13797 comm="syz.5.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 477.135150][T13803] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 477.619780][T13813] netlink: 'syz.6.1975': attribute type 4 has an invalid length. [ 477.644038][T13813] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1975'. [ 478.295083][T13833] wlan1 speed is unknown, defaulting to 1000 [ 481.727043][T13919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=13919 comm=syz.3.2008 [ 481.791601][T13920] bridge2: entered promiscuous mode [ 481.892650][ T29] kauditd_printk_skb: 12620 callbacks suppressed [ 481.892663][ T29] audit: type=1400 audit(1775412272.888:92674): avc: denied { map_create } for pid=13922 comm="syz.1.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 481.958182][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.966952][ T5807] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.973483][ T5807] audit: audit_lost=8839 audit_rate_limit=0 audit_backlog_limit=64 [ 481.982486][T13925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.994198][ T5808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.006183][ T5477] audit: audit_lost=8840 audit_rate_limit=0 audit_backlog_limit=64 [ 482.014280][T13925] audit: audit_lost=8841 audit_rate_limit=0 audit_backlog_limit=64 [ 482.024121][ T5477] audit: backlog limit exceeded [ 482.032590][ T9912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.163192][T11492] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 482.178253][T11492] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 482.871361][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2022'. [ 483.092328][T13960] wlan1 speed is unknown, defaulting to 1000 [ 483.807164][ T30] INFO: task syz.4.984:10442 blocked for more than 143 seconds. [ 483.861731][ T30] Tainted: G L syzkaller #0 [ 483.884436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.911758][ T30] task:syz.4.984 state:D stack:27280 pid:10442 tgid:10434 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 483.945812][ T30] Call Trace: [ 483.949233][ T30] [ 483.952174][ T30] __schedule+0xfee/0x6120 [ 483.974403][ T30] ? __lock_acquire+0x4a5/0x2630 [ 483.990920][ T30] ? __pfx___schedule+0x10/0x10 [ 484.028814][ T30] ? find_held_lock+0x2b/0x80 [ 484.047178][ T30] ? schedule+0x2bf/0x390 [ 484.066013][ T30] schedule+0xdd/0x390 [ 484.070234][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.103459][ T30] __mutex_lock+0xc9a/0x1b90 [ 484.122091][ T30] ? stack_trace_save+0x8e/0xc0 [ 484.144107][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 484.168609][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 484.208813][ T30] ? kasan_save_stack+0x3f/0x50 [ 484.234053][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.261998][ T30] ? netlink_dump+0x19b/0xd30 [ 484.284530][ T30] ? __netlink_dump_start+0x6d6/0x990 [ 484.314915][ T30] ? genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 484.347257][ T30] ? netlink_rcv_skb+0x159/0x420 [ 484.383419][ T30] ? genl_rcv+0x28/0x40 [ 484.403336][ T30] ? netlink_unicast+0x5aa/0x870 [ 484.430126][ T30] ? ___sys_sendmsg+0x190/0x1e0 [ 484.617280][ T30] ? __sys_sendmsg+0x170/0x220 [ 484.639009][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 484.672994][ T30] nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 484.709747][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 484.816257][ T30] ? rcu_is_watching+0x12/0xc0 [ 484.821151][ T30] ? trace_kmalloc+0x101/0x130 [ 484.835960][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 484.845211][ T30] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 484.863149][ T30] ? __alloc_skb+0x185/0x710 [ 484.887352][ T30] ? trace_kmem_cache_alloc+0x21/0x120 [ 484.912702][ T30] ? __kasan_slab_alloc+0x40/0x90 [ 484.930761][ T30] ? kmalloc_reserve+0xf9/0x350 [ 484.951972][ T30] ? __asan_memset+0x23/0x50 [ 484.971382][ T30] ? __alloc_skb+0x4e9/0x710 [ 484.992254][ T30] ? __alloc_skb+0x5b7/0x710 [ 485.011473][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 485.021685][ T30] genl_dumpit+0x125/0x230 [ 485.036996][ T30] netlink_dump+0x539/0xd30 [ 485.044800][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 485.079046][ T30] ? __asan_memset+0x23/0x50 [ 485.102749][ T30] ? genl_start+0x67a/0x970 [ 485.123309][ T30] __netlink_dump_start+0x6d6/0x990 [ 485.138960][ T30] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 485.166050][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 485.185758][ T30] ? consume_skb+0xd6/0x110 [ 485.209144][ T30] ? __dev_queue_xmit+0x8a0/0x4800 [ 485.230217][ T30] ? __pfx_genl_get_cmd+0x10/0x10 [ 485.253098][ T30] ? __pfx_genl_start+0x10/0x10 [ 485.269636][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 485.274656][ T30] ? __pfx_genl_done+0x10/0x10 [ 485.303508][ T30] ? __dev_queue_xmit+0x5af/0x4800 [ 485.321086][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 485.336793][ T30] genl_rcv_msg+0x471/0x800 [ 485.349038][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.365266][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 485.390615][ T30] netlink_rcv_skb+0x159/0x420 [ 485.400440][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.433467][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.455821][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 485.461248][ T30] genl_rcv+0x28/0x40 [ 485.469938][ T30] netlink_unicast+0x5aa/0x870 [ 485.484266][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 485.500269][ T30] netlink_sendmsg+0x8b0/0xda0 [ 485.516687][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.530833][ T30] ? __might_fault+0x50/0x140 [ 485.542714][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 485.557824][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.571136][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.585190][ T30] ? try_to_wake_up+0x644/0x1a80 [ 485.603340][ T30] ___sys_sendmsg+0x190/0x1e0 [ 485.620971][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.633280][ T30] ? futex_private_hash_put+0x107/0x1c0 [ 485.648914][ T30] __sys_sendmsg+0x170/0x220 [ 485.663959][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 485.678084][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 485.693609][ T30] do_syscall_64+0x106/0xf80 [ 485.705895][ T30] ? clear_bhb_loop+0x40/0x90 [ 485.748086][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.765210][ T30] RIP: 0033:0x7f6f9819c819 [ 485.780138][ T30] RSP: 002b:00007f6f98f84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.818542][ T30] RAX: 0000000000000014 RBX: 00007f6f98416180 RCX: 00007f6f9819c819 [ 485.838746][ T30] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000005 [ 485.863623][ T30] RBP: 00007f6f98232c91 R08: 0000000000000000 R09: 0000000000000000 [ 485.884671][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.901990][ T30] R13: 00007f6f98416218 R14: 00007f6f98416180 R15: 00007ffddec72d98 [ 485.922457][ T30] [ 485.940861][ T30] [ 485.940861][ T30] Showing all locks held in the system: [ 485.979452][ T30] 1 lock held by kauditd/29: [ 486.005858][ T30] 1 lock held by khungtaskd/30: [ 486.036525][ T30] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 486.079824][ T30] 4 locks held by kworker/u8:10/3511: [ 486.104845][ T30] #0: ffff88801cac9148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 486.145699][ T30] #1: ffffc9000da47d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 486.199328][ T30] #2: ffffffff905fb990 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 486.233538][ T30] #3: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 486.269095][ T30] 2 locks held by getty/5567: [ 486.287855][ T30] #0: ffff8880389980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 486.330791][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 486.370888][ T30] 2 locks held by syz.2.183/6797: [ 486.394020][ T30] 1 lock held by syz-executor/9912: [ 486.418702][ T30] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 486.467602][ T30] 2 locks held by syz.4.984/10442: [ 486.496027][ T30] 4 locks held by syz.5.2022/13959: [ 486.520204][ T30] 2 locks held by syz.7.2027/13978: [ 486.544716][ T30] 1 lock held by syz.6.2028/13981: [ 486.567214][ T30] #0: ffffffff8e7f3340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 486.616245][ T30] [ 486.626061][ T30] ============================================= [ 486.626061][ T30] [ 486.679832][ T30] NMI backtrace for cpu 1 [ 486.679853][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 486.679876][ T30] Tainted: [L]=SOFTLOCKUP [ 486.679881][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 486.679890][ T30] Call Trace: [ 486.679896][ T30] [ 486.679902][ T30] dump_stack_lvl+0x100/0x190 [ 486.679937][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 486.679956][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.679972][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 486.679995][ T30] sys_info+0x141/0x190 [ 486.680012][ T30] watchdog+0xd25/0x1050 [ 486.680041][ T30] ? __pfx_watchdog+0x10/0x10 [ 486.680062][ T30] ? __kthread_parkme+0x18c/0x230 [ 486.680087][ T30] ? kthread+0x13a/0x450 [ 486.680101][ T30] ? __pfx_watchdog+0x10/0x10 [ 486.680120][ T30] kthread+0x370/0x450 [ 486.680135][ T30] ? __pfx_kthread+0x10/0x10 [ 486.680152][ T30] ret_from_fork+0x754/0xd80 [ 486.680170][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 486.680188][ T30] ? __switch_to+0x7b4/0x1120 [ 486.680208][ T30] ? __pfx_kthread+0x10/0x10 [ 486.680245][ T30] ret_from_fork_asm+0x1a/0x30 [ 486.680276][ T30] [ 486.680283][ T30] Sending NMI from CPU 1 to CPUs 0: [ 486.807605][ C0] NMI backtrace for cpu 0 [ 486.807622][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.807641][ C0] Tainted: [L]=SOFTLOCKUP [ 486.807646][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 486.807654][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 486.807680][ C0] Code: a8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 51 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 486.807693][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 486.807705][ C0] RAX: 0000000000fe9a17 RBX: ffffffff8e4975c0 RCX: ffffffff8b913c75 [ 486.807714][ C0] RDX: 0000000000000000 RSI: ffffffff8de7a76f RDI: ffffffff8c1b1e20 [ 486.807723][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 486.807731][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 486.807740][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9d210 [ 486.807749][ C0] FS: 0000000000000000(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 486.807763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.807772][ C0] CR2: 0000564072fd1c88 CR3: 000000002999f000 CR4: 00000000003526f0 [ 486.807781][ C0] Call Trace: [ 486.807787][ C0] [ 486.807792][ C0] default_idle+0x9/0x10 [ 486.807805][ C0] default_idle_call+0x6c/0xb0 [ 486.807818][ C0] do_idle+0x464/0x590 [ 486.807838][ C0] ? __pfx_do_idle+0x10/0x10 [ 486.807857][ C0] cpu_startup_entry+0x4f/0x60 [ 486.807874][ C0] rest_init+0x251/0x260 [ 486.807888][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 486.807910][ C0] start_kernel+0x47f/0x480 [ 486.807929][ C0] x86_64_start_reservations+0x24/0x30 [ 486.807948][ C0] x86_64_start_kernel+0x12b/0x130 [ 486.807967][ C0] common_startup_64+0x13e/0x148 [ 486.807989][ C0] [ 486.977611][ T5477] audit_log_start: 8288 callbacks suppressed [ 486.977625][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.977637][ T5477] audit: audit_lost=9015 audit_rate_limit=0 audit_backlog_limit=64 [ 486.977648][ T5477] audit: backlog limit exceeded [ 486.977689][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.977699][ T5477] audit: audit_lost=9016 audit_rate_limit=0 audit_backlog_limit=64 [ 486.977710][ T5477] audit: backlog limit exceeded [ 486.978018][ T29] audit: type=1400 audit(1775412277.668:100444): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 487.090379][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.106319][ T5477] audit: audit_lost=9017 audit_rate_limit=0 audit_backlog_limit=64 [ 487.114238][ T5477] audit: backlog limit exceeded [ 487.307148][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 487.314045][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 487.324729][ T30] Tainted: [L]=SOFTLOCKUP [ 487.329069][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.339131][ T30] Call Trace: [ 487.342407][ T30] [ 487.345331][ T30] dump_stack_lvl+0x100/0x190 [ 487.350019][ T30] vpanic+0x552/0x970 [ 487.354006][ T30] ? __pfx_vpanic+0x10/0x10 [ 487.358498][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 487.364645][ T30] panic+0xd1/0xe0 [ 487.368348][ T30] ? __pfx_panic+0x10/0x10 [ 487.372769][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 487.378930][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 487.385200][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 487.391585][ T30] ? watchdog.cold+0x198/0x1ca [ 487.396431][ T30] ? watchdog+0xd35/0x1050 [ 487.400848][ T30] watchdog.cold+0x1a9/0x1ca [ 487.405432][ T30] ? __pfx_watchdog+0x10/0x10 [ 487.410101][ T30] ? __kthread_parkme+0x18c/0x230 [ 487.415117][ T30] ? kthread+0x13a/0x450 [ 487.419350][ T30] ? __pfx_watchdog+0x10/0x10 [ 487.424030][ T30] kthread+0x370/0x450 [ 487.428114][ T30] ? __pfx_kthread+0x10/0x10 [ 487.432753][ T30] ret_from_fork+0x754/0xd80 [ 487.437344][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 487.442455][ T30] ? __switch_to+0x7b4/0x1120 [ 487.447128][ T30] ? __pfx_kthread+0x10/0x10 [ 487.451697][ T30] ret_from_fork_asm+0x1a/0x30 [ 487.456461][ T30] [ 487.459769][ T30] Kernel Offset: disabled [ 487.464085][ T30] Rebooting in 86400 seconds..