last executing test programs: 2m29.209409641s ago: executing program 4 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x200, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x5200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m28.990808118s ago: executing program 4 (id=2684): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x180000a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="3e0f01c3650f01cb0fc77d84baf80c66b8945abe8266efbafc0c66b8ba00000066efba430066ed66b8a88800000f23d00f21f86635100000000f23f8f3ad0f01cfb800008ec83e7958", 0x49}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffe59, {0xd000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x40010, r2, 0x41111000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000100)=0x10000103) (async) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) (async) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)) (async) read$dsp(r7, &(0x7f0000000300)=""/79, 0x4f) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)="580000001400ad", 0x7}, {&(0x7f00000004c0)="7a61ed946be2bbbfb602f1cffbf580c052017a8dec9351fcb41238c79ac77e4efed86ad16038159c7010f1371e481fe96e04b018f79a1df511318b9dcaa2da5d7c625ec76916d85afdf2f42088c355c9fa", 0x51}], 0x2) 2m27.639989883s ago: executing program 4 (id=2691): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000065ffff0010000009003950323030302e75"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6(0xa, 0x3, 0xff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000010380)=ANY=[], 0x46) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x4547, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) (async, rerun: 64) connect$inet(r5, &(0x7f0000000480)={0x2, 0x1, @multicast2}, 0x10) (async, rerun: 64) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x21, 0x1, 0x18004000, 0xed, 0xffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x11}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, 0x0) (async, rerun: 64) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x80}, {0x2000000, 0x200000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {0x10000000000, 0x8000000000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x40000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e33bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/180, 0x114) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x25, 0x3, 0x0, "e70db065a8f3367501020000398500ff03eb6beb8bf9356600", 0x30314247}) 2m27.562723939s ago: executing program 4 (id=2693): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) recvmmsg$unix(r5, &(0x7f0000002400)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000300)=""/147, 0x93}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)=""/83, 0x53}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000780)=""/134, 0x86}], 0x6, &(0x7f00000008c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000ac0)=""/253, 0xfd}, {&(0x7f0000000bc0)=""/104, 0x68}, {&(0x7f0000001dc0)=""/68, 0x44}, {&(0x7f0000000000)=""/20, 0x14}], 0x4, &(0x7f0000001e40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000001f40)=""/120, 0x78}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002100)=""/77, 0x4d}, {&(0x7f0000002180)=""/235, 0xeb}, {&(0x7f0000002280)=""/160, 0xa0}], 0x3, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x4, 0x2000, &(0x7f0000002500)) (async) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200004, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}, {@cache_fscache}]}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r6) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r9, 0x1}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000002540)=ANY=[@ANYBLOB="2b9d8a94f2410713e3d14b572c200004", @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf2525000000050029000000000008002f000400000008000200", @ANYRES32=r10, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40) (async) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000280)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRESHEX=r1], 0x0) 2m27.355981284s ago: executing program 4 (id=2695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000400)="390000001300090468fe07000000000000c377400400e6b200100000000004002b000affff007208c5a9b43f3da65fd7bdb71e4ca3a7bf3177d2250a00003ea8653c5fad48174101000062bfa3146898c1b40d7a7ec0aa88ef1c7fee40ef5d60b788d3ee23ee4cc64ffcd237584101e6f41c6dae113f491429bc1877f0b85eda73354cc8aa3f4885be6c97fada446c600ebf79693b49c788e0958d10b024b0cb5d1da5a464384abac16eb4ee3a521a5e5aa967c3f949a533d5481e613e4350b72c94de8c8133874a7a340d733d0c4704d859189ceb03c77c70210f0df7639e0c7e3b8e6e20d0410ca2bc7f2f64095f", 0x39}, {&(0x7f0000000500)="85f68f5c375b29d81c3d2ee44abd46f6a51cdf8f2a939303a048cddf6b0696b248d6adc8c847524ba80bdd8fbe66c1cbc1838a013c0311862c0e14946ceab2d1e395ad89edf60e7099ca963c362c3e7446f293f6fd385b7a03fa8d02138474670aa4da531faab297d61be7f1b40b58454a112eb2795b4479621b5054bca1fb16afaacdd4c219d682ff0e4a8dcaf294b6e688ea0a6e327c3789f288cd169cf63b505206f8df8b70bfc9f87f396aab74faae2ae1280e4c1eac31b16da0b7042c82ddd8ce69235a01d517bf956ea76a7f5f131a960a8bf9a0799dd3394915506ad94ab87b627354a67412952ad839b37af1d0bb912b79d7c0035b4d62d134084138418fd1515bbcdf380cc16f3379cfd8422d8b5d07593565e0a55789efc0fab0a29fa6a29ee0bddc6e578ec6a285928192af4f99c94de5fa71a0feecd944e24d4efaf35ac87b2dd3f270129c3c09301543f8d866de7ed2"}], 0x1000003c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) ustat(0x801, &(0x7f0000000300)) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m24.55202587s ago: executing program 4 (id=2705): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0x3ff, @private2, 0xff}, 0x1c) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) readv(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r2], 0x58}, 0x1, 0xba01}, 0x0) 2m9.188593467s ago: executing program 32 (id=2705): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0x3ff, @private2, 0xff}, 0x1c) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) readv(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r2], 0x58}, 0x1, 0xba01}, 0x0) 1m34.238679574s ago: executing program 3 (id=2872): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x23}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120110012b95d908e2041214c0046879030109022e000102faa0bf09040008020806620009050a100800f80703072501"], 0x0) 1m30.457039457s ago: executing program 3 (id=2884): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = epoll_create(0x5) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x35e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf6720000000000a160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0x81, 0x10000000000000) socket$packet(0x11, 0x3, 0x300) 1m28.719332392s ago: executing program 3 (id=2887): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e25}, 0x6e) (async) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) 1m28.240059038s ago: executing program 3 (id=2889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 1m27.998065607s ago: executing program 3 (id=2890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000018"]) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m27.571114371s ago: executing program 3 (id=2892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=@delchain={0x292c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x7, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x28fc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x132fb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_ACT={0x2444, 0x9, 0x0, 0x1, [@m_sample={0x114, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfc2e}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x9, 0x4bdcd9e0}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xaf, 0x6, "4c17d5908edd33408232e5904f0dbebc39f5d44d5a1864d6f370bc371969a687a5f404e1b1660c0b9111b4ab4a902d0a19bb07348affccbb73c15e05ea339eeaede02507c60614c23e815dffc95b7ed9cc79bd39ec32102389c067823acd6c6050ae6c6ff8713a4d745c573297669481a233389a78421ed451bb03629e65fba008fcd25c4d934be6f74be25142a532dcf553e0e9ebd08bb158c1a0b35565d7f88d357cfe8c0ae3565686dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x140, 0x14, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15a8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x996d, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x6, 0x5, 0x800, 0x90a}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11f3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd24, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1124, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xc67e, 0x6, 0x7f, 0xa7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0x0, 0x81, 0xfffffff7}}]}, {0x82, 0x6, "753c96488a37cdade06b6ef07b6e368ca92e48c84f0cf89ace09a487ec00311335ef2ce6127036385814c186dc3c66eb12244affb450648ced7fd96f2344500856d9d41af300f5e6cb389ecd53d3e342f7f1ad00b4f210a049d4b0aa7a2347dae806ae9dfa471a0ce63c202947e2f4b7d825c3bb7fe9babd003a8e7011da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x12c, 0x9, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x200, 0x4, 0x0, 0xc16, 0xd}, 0x1}}]}, {0xdf, 0x6, "b3e59680da1100792d3b1bdd68442150abcbba81de80ec9ebe1b6bd20f37a3437092b0769fc3dd33454d0f7065d316103fddbed016f7971d5c4cdb6662b5bcaae90160df2ee38e9ace06a41dca0ad582cf3951ca4c0e103e352b710f1928235e37f5758ca4e72c59dfcd68c440aef6a8caf68d2980cbf9821c47362ad8362a3ac8d5fb7f09eca1778f77cf7768acfc799a53ab88105ba647ae70d2a5ddab0f79c2406d0bb77c7fa6cee65f4db3c2c151d1eb96fcd17b63332779095983e37a922db32f4a798b815bb35b7e82d42fa457b8a7ccedb14be92c68e18b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x1050, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0xffffffffffffffff, 0x9, 0x1200000}, 0x2, r3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ct={0x1070, 0x1c, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7fff}, @TCA_CT_ACTION={0x6, 0x3, 0x30}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FLOW_POLICE={0x74, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x7, 0x5, 0x6, 0xe3f, {0xc, 0x2, 0x5, 0x4, 0xe148, 0x7}, {0xd, 0x2, 0x8, 0x0, 0xb, 0x4}, 0x7, 0xffff7b07, 0x5}}]}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0xc6, 0x4c, 0xf, 0x0, 0xc1ae, 0x40, 0x5, 0x1000, 0x4, 0x0, 0xb, 0x8, 0x6, 0x43, 0x1, 0x4, 0x1, 0x8, 0x5, 0xfffffff8, 0xc9e2, 0x81, 0x3f64d68e, 0x0, 0x6, 0x0, 0x5, 0x5, 0x9, 0x2, 0x1000, 0x7, 0x1000, 0x5, 0x8, 0x4, 0x5, 0x9, 0xffffffff, 0x1, 0x7, 0x8, 0x7, 0x55034a84, 0x3, 0x5, 0x6, 0xe, 0xffffffff, 0x7574d2fb, 0x3, 0x8, 0x12, 0xce4, 0x6, 0x8000, 0x10002000, 0x553, 0xfffffff8, 0x4, 0x7, 0xf, 0x9, 0x400, 0x5, 0x6, 0x2, 0xb137, 0xffff, 0x8, 0x40, 0x3, 0x3, 0x6, 0x6, 0x40, 0x0, 0x8, 0x8, 0x9, 0xfff, 0x1, 0x6, 0x5, 0x2, 0x9, 0x93, 0x5, 0x0, 0x1, 0x1, 0xfff, 0x6d30, 0x5, 0x6, 0x2, 0xe, 0x401, 0x1, 0x5, 0xe0000, 0x8, 0x5, 0x3ff, 0x4, 0x4, 0x1, 0x3, 0x8ab, 0x8001, 0xb, 0xfffffffd, 0x10, 0x1, 0x9, 0x5, 0x1000, 0x4, 0x7ff, 0x7, 0x1, 0x80000000, 0x8568, 0x1, 0x2, 0xffffffff, 0x646d, 0xbf, 0x5, 0x1b67, 0x9, 0x6, 0x0, 0x5b, 0xae, 0x4486, 0x6, 0x6, 0x2, 0x100, 0x3, 0x5, 0xa, 0x0, 0x7fffffff, 0x9, 0xffffffff, 0xca0, 0x800, 0x7, 0x5, 0xa, 0x4, 0x4, 0x120, 0x6, 0x8, 0x800, 0x0, 0x9, 0x0, 0x4, 0x375, 0x1, 0x1, 0x5, 0x10001, 0x3, 0x3f, 0x6, 0x7fff, 0x10000, 0x2b3a, 0x6, 0x7, 0x2, 0x5, 0x8, 0x3, 0x818b, 0x23fd09ea, 0x3, 0x1, 0x7, 0x5, 0x49ce, 0x5, 0x80000000, 0x1ff, 0x27, 0xfffffffc, 0x8, 0x0, 0x0, 0xe, 0x8000, 0xefca, 0x3, 0xaa4, 0xf762, 0x0, 0xff, 0x3, 0x2, 0x0, 0xee, 0x4, 0x9, 0xf, 0x3, 0x0, 0x401, 0x56f, 0x5, 0x74f, 0x6, 0x3ff, 0x10, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff, 0x3, 0x6, 0x5, 0x1, 0xffffffff, 0x3251, 0x3ffc0000, 0x0, 0xff, 0x2e46, 0xf927, 0x4, 0x2, 0x1, 0x9, 0x96e, 0x0, 0x3, 0x2673, 0x7, 0x8, 0x9, 0x8, 0x1, 0x7f, 0x24ef, 0x2, 0x323aff74, 0x7]}]}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x80000001}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x292c}, 0x1, 0x0, 0x0, 0x44890}, 0x4000) 1m12.012610927s ago: executing program 33 (id=2892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=@delchain={0x292c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x7, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x28fc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x132fb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_ACT={0x2444, 0x9, 0x0, 0x1, [@m_sample={0x114, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfc2e}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x9, 0x4bdcd9e0}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xaf, 0x6, "4c17d5908edd33408232e5904f0dbebc39f5d44d5a1864d6f370bc371969a687a5f404e1b1660c0b9111b4ab4a902d0a19bb07348affccbb73c15e05ea339eeaede02507c60614c23e815dffc95b7ed9cc79bd39ec32102389c067823acd6c6050ae6c6ff8713a4d745c573297669481a233389a78421ed451bb03629e65fba008fcd25c4d934be6f74be25142a532dcf553e0e9ebd08bb158c1a0b35565d7f88d357cfe8c0ae3565686dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x140, 0x14, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15a8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x996d, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x6, 0x5, 0x800, 0x90a}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11f3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd24, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1124, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xc67e, 0x6, 0x7f, 0xa7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0x0, 0x81, 0xfffffff7}}]}, {0x82, 0x6, "753c96488a37cdade06b6ef07b6e368ca92e48c84f0cf89ace09a487ec00311335ef2ce6127036385814c186dc3c66eb12244affb450648ced7fd96f2344500856d9d41af300f5e6cb389ecd53d3e342f7f1ad00b4f210a049d4b0aa7a2347dae806ae9dfa471a0ce63c202947e2f4b7d825c3bb7fe9babd003a8e7011da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x12c, 0x9, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x200, 0x4, 0x0, 0xc16, 0xd}, 0x1}}]}, {0xdf, 0x6, "b3e59680da1100792d3b1bdd68442150abcbba81de80ec9ebe1b6bd20f37a3437092b0769fc3dd33454d0f7065d316103fddbed016f7971d5c4cdb6662b5bcaae90160df2ee38e9ace06a41dca0ad582cf3951ca4c0e103e352b710f1928235e37f5758ca4e72c59dfcd68c440aef6a8caf68d2980cbf9821c47362ad8362a3ac8d5fb7f09eca1778f77cf7768acfc799a53ab88105ba647ae70d2a5ddab0f79c2406d0bb77c7fa6cee65f4db3c2c151d1eb96fcd17b63332779095983e37a922db32f4a798b815bb35b7e82d42fa457b8a7ccedb14be92c68e18b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x1050, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0xffffffffffffffff, 0x9, 0x1200000}, 0x2, r3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ct={0x1070, 0x1c, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7fff}, @TCA_CT_ACTION={0x6, 0x3, 0x30}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FLOW_POLICE={0x74, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x7, 0x5, 0x6, 0xe3f, {0xc, 0x2, 0x5, 0x4, 0xe148, 0x7}, {0xd, 0x2, 0x8, 0x0, 0xb, 0x4}, 0x7, 0xffff7b07, 0x5}}]}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0xc6, 0x4c, 0xf, 0x0, 0xc1ae, 0x40, 0x5, 0x1000, 0x4, 0x0, 0xb, 0x8, 0x6, 0x43, 0x1, 0x4, 0x1, 0x8, 0x5, 0xfffffff8, 0xc9e2, 0x81, 0x3f64d68e, 0x0, 0x6, 0x0, 0x5, 0x5, 0x9, 0x2, 0x1000, 0x7, 0x1000, 0x5, 0x8, 0x4, 0x5, 0x9, 0xffffffff, 0x1, 0x7, 0x8, 0x7, 0x55034a84, 0x3, 0x5, 0x6, 0xe, 0xffffffff, 0x7574d2fb, 0x3, 0x8, 0x12, 0xce4, 0x6, 0x8000, 0x10002000, 0x553, 0xfffffff8, 0x4, 0x7, 0xf, 0x9, 0x400, 0x5, 0x6, 0x2, 0xb137, 0xffff, 0x8, 0x40, 0x3, 0x3, 0x6, 0x6, 0x40, 0x0, 0x8, 0x8, 0x9, 0xfff, 0x1, 0x6, 0x5, 0x2, 0x9, 0x93, 0x5, 0x0, 0x1, 0x1, 0xfff, 0x6d30, 0x5, 0x6, 0x2, 0xe, 0x401, 0x1, 0x5, 0xe0000, 0x8, 0x5, 0x3ff, 0x4, 0x4, 0x1, 0x3, 0x8ab, 0x8001, 0xb, 0xfffffffd, 0x10, 0x1, 0x9, 0x5, 0x1000, 0x4, 0x7ff, 0x7, 0x1, 0x80000000, 0x8568, 0x1, 0x2, 0xffffffff, 0x646d, 0xbf, 0x5, 0x1b67, 0x9, 0x6, 0x0, 0x5b, 0xae, 0x4486, 0x6, 0x6, 0x2, 0x100, 0x3, 0x5, 0xa, 0x0, 0x7fffffff, 0x9, 0xffffffff, 0xca0, 0x800, 0x7, 0x5, 0xa, 0x4, 0x4, 0x120, 0x6, 0x8, 0x800, 0x0, 0x9, 0x0, 0x4, 0x375, 0x1, 0x1, 0x5, 0x10001, 0x3, 0x3f, 0x6, 0x7fff, 0x10000, 0x2b3a, 0x6, 0x7, 0x2, 0x5, 0x8, 0x3, 0x818b, 0x23fd09ea, 0x3, 0x1, 0x7, 0x5, 0x49ce, 0x5, 0x80000000, 0x1ff, 0x27, 0xfffffffc, 0x8, 0x0, 0x0, 0xe, 0x8000, 0xefca, 0x3, 0xaa4, 0xf762, 0x0, 0xff, 0x3, 0x2, 0x0, 0xee, 0x4, 0x9, 0xf, 0x3, 0x0, 0x401, 0x56f, 0x5, 0x74f, 0x6, 0x3ff, 0x10, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff, 0x3, 0x6, 0x5, 0x1, 0xffffffff, 0x3251, 0x3ffc0000, 0x0, 0xff, 0x2e46, 0xf927, 0x4, 0x2, 0x1, 0x9, 0x96e, 0x0, 0x3, 0x2673, 0x7, 0x8, 0x9, 0x8, 0x1, 0x7f, 0x24ef, 0x2, 0x323aff74, 0x7]}]}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x80000001}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x292c}, 0x1, 0x0, 0x0, 0x44890}, 0x4000) 16.371561438s ago: executing program 2 (id=3146): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x81}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20001}, 0xc004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x354, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x89}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x45}, @NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x194, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "89dffca712a927050da8373144ebec8b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47a5f961c9d1375171aa0915a477e534"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b318fba355f7125b379176c83391b7ce"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1177f3ea2ffb6c2d429b2df68f96f9db348476c7441628e06325cea11acca87b"}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b36e4d5a7aa5069d4fe97021b3c3fc29"}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3c0f8b37e6a23823f1a4b253b135981328f12acbbd691e57b07be402ac9d5ff2"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x148, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x120, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c074ccb46bf278e6db35a2dd4fd1b4af84cdf430cb017f6ef4e12e1b3304c8cb"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7ab4107de7dc07a80886d498d549122577440f6b5d3507310426dd6e7cd60cf"}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4004044}, 0x40000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.207884524s ago: executing program 0 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001200)=@newtaction={0x7c, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0xce24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7d3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4004000) 16.068567875s ago: executing program 0 (id=3150): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x7) 15.088842144s ago: executing program 0 (id=3152): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x0, 0x0, 0xf8, 0x3}, {0x4, 0x10, 0x4, 0x6}, {0x6, 0x0, 0x7, 0x41e65c20}, {0x5, 0x2, 0x9, 0x8001}, {0x80, 0x6, 0x9, 0x9}, {0xb, 0x81, 0x81, 0x5}, {0x81b, 0x4, 0x3, 0x7c}, {0x5, 0xd8, 0x7a}, {0x9, 0x4, 0x7, 0x39}]}, 0x10) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xad, "5aa7b7bade645e79a0bca9695a33a68beb0a7fb57aba98e9f08bd42a354013b0be0be9f6474540a115ed34391c3c39db62e5ee156896f72c97e1172dc501cc", 0xf}, 0x60) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) close_range(r0, r1, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10808b8, &(0x7f00000002c0)={[{@index_off}, {@redirect_dir_off}, {@default_permissions}, {@verity_on}, {@metacopy_on}, {@default_permissions}, {@workdir={'workdir', 0x3d, './file0'}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@dont_appraise}]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0xb, 0x20, 0x3, 0x4}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000440)={r2, 0x25b}, &(0x7f0000000480)=0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000004c0), &(0x7f0000000540)=0x68) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f00000005c0)='highspeed\x00', 0xa) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000640), 0x3ca, 0x101000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x80}}, './file0\x00'}) syz_io_uring_setup(0x26fc, &(0x7f00000006c0)={0x0, 0x6cd9, 0x0, 0x0, 0x387, 0x0, r5}, &(0x7f0000000740), &(0x7f0000000780)) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000840)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) r8 = geteuid() mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x800000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@nodevmap}, {@debug={'debug', 0x3d, 0x9b58}}], [{@uid_eq={'uid', 0x3d, r7}}, {@hash}, {@uid_lt={'uid<', r8}}]}}) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000a40)={'veth0_to_bond\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) listen(r4, 0x8) getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000000a80)=""/201, 0xc9) preadv(r0, &(0x7f0000000ec0)=[{&(0x7f0000000b80)=""/114, 0x72}, {&(0x7f0000000c00)=""/217, 0xd9}, {&(0x7f0000000d00)=""/126, 0x7e}, {&(0x7f0000000d80)=""/212, 0xd4}, {&(0x7f0000000e80)=""/64, 0x40}], 0x5, 0x5, 0x53a) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000f40)='syz0\x00') ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000f80)={0x1, 0xd98, 0x3, 0x7}) r9 = getegid() sendmsg$unix(r1, &(0x7f0000001140)={&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000001040)="459e46dcf98cf942abeef18f7c35294df0dc85fbc9cc233798f4e73a92f1e8d425d5fd62f446e642d2c7781dc40da64964fb511744cbf142c8be1c763b7dc956cc2f7cd74bc2489804859714742b91be267aca3458530fac2c54cc468a20ec623a943fe47a4594ac12b21e432114c7ee4f1873f162fbba3b1e81", 0x7a}], 0x1, &(0x7f0000001100)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x20, 0x8081}, 0x4058804) syz_open_procfs(0x0, &(0x7f00000011c0)='net/igmp\x00') 14.329889299s ago: executing program 0 (id=3154): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x40) socket$inet(0x2, 0x3, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x101, 0x6701e32d}}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x7, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0xff}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control={0x0, 0xffffffff}}, {0x0, 0x0, 0x0, 0x0, @tick=0x18, {}, {0x0, 0x5}, @connect={{0xfc}, {0xfd, 0x5}}}], 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) 13.00021969s ago: executing program 0 (id=3158): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (fail_nth: 2) 12.860039931s ago: executing program 0 (id=3161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001200)=@newtaction={0x7c, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0xce24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7d3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4004000) 11.575218302s ago: executing program 1 (id=3163): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x3, 0x7, 0x6, 0x5}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xfffffee9}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x2, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) r3 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x200, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x184d, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000"], 0xbc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 9.947926517s ago: executing program 2 (id=3169): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000081200000000000000000000000057210478000000fb04f27800808f26f6115b01d5865ad5c9a990e4ded5798e586ddf08cdb2ec2f9d78ac396ad7f8fe300a1674c23f081edaaaf132617e6f5aef7bb62b2fc72dce1ed05a439c9fe8a5beed3152222b5e8d43406b8d85e478c770891600ca88270117645813a0e5f6d6050042979166f0ce38377a8fca505eeeeda95fcd9b2421c977fed1c81f00cccebdd4ec4ffbcc249943065d2d0a854e13a9e7230544cc78a5ad0818ceaed796efe8c968f738540ff1368b64116261cc9a95f0b9e6f11fd58291192a795d43748ec199c3ed4806541ea16e1615e174f94be9526c11"], 0x48) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042c1101c90000d71d14ffbf33c04a0936d4fbf97300000000000202015db4018005"], 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close_range(r10, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_TRANSMIT(r12, 0xc0386105, &(0x7f00000000c0)={0x1200000000001, 0xc, 0x809, 0x4, 0x8200, 0x0, "a2a0069f416e002604d1690ea4e7e0ef", 0x3, 0x7, 0x2, 0x9, 0xa, 0xf4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x10001, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 8.570038429s ago: executing program 2 (id=3171): syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x34) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x81, 0xcc, 0xaf, 0x20, 0x1df7, 0x2500, 0x505d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0x54, 0x21, 0x81, 0xff}}]}}]}}, &(0x7f0000000b40)={0x4c, 0x0, 0x0, 0x0, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x30000, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0xc, 0x2, {0x2, 0x22}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x4, 0x4, "4e764f8e", "f6c7e8a2"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0xf, 0x9, 0x0, 0x7, 0x3}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000780)={0x40, 0x17, 0x100, "31a367bbda2a3c79b64d15d2854836218634f4492db59cedc619eddde93e26196d219bb8ac8562cabbce559e845c614ab4e5c5c4a38d945f3972bccf409f8a2bc2efbff52a443d718c8ed40121646da1760d59f442f81a093b6653116390fdd67afd6b87ef40ee7f5b952e47ea2dc024925f46264ea7b7f8c81e8f2a5e18b4e75fd650152906facf166d274b56fdf6d53352eb1a2a794708950ccab2037ec1ee7c70b84b33f8463c7f9b4485ef4028148201ef020031421d857c550c38be44d267c58d44dba39618af5e5bb72ee15d028423c55727df401717e7d94a65fad197e5f932716b1779c43e03117b96d913520ced1634c014942f4bb75aec2417f1e7"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x160, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x4}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "b0ce"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x43}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x5d}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}]}) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x138}, &(0x7f0000000480)=0x0, &(0x7f0000000500)) r8 = eventfd2(0x936, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r8, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x654b, 0x1, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0xbf1f, 0x0, 0x7fff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x3, {0x3b24, 0x0, 0x0, {0x4000000000008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 8.37498919s ago: executing program 1 (id=3173): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x7, @pix={0x1, 0x0, 0x30314247, 0x8, 0x0, 0x4, 0x6, 0x8, 0x0, 0x3, 0x2, 0x7}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="a078224dd7dc1dbc6281284701065a2ae88a11ad3c5d321b24eec6c442d2079c0ff0d73057a8a374eab727202b9cd215ed7d0cd8fa9fc2c0457a1d76240d709ae34b55838374c0525e1d0bca3698ef718ecf205ca81eed85f7ab3f982940e97a985a440286ca6cac82b7994fc45c4720c2387b1757f00400a5c6d64df23fa9fe085ed5db74b55c96b9f030c593a937bfb2e0f7958fc2da17278bfed67db26ae71390ecd8759228992bfd108abe421fc7fac2a38f7fd28bc026fffc938697b2f4825886d46a30c2c35d01a539d37e99f5438f8ac5df6cf6f9e60417c4f04941cd", 0xe0}, {&(0x7f0000000200)="c265a3f112e99ce8cbe62083d8423f0a5e176e3667e224d3b983454112ff6efced3fef6e7d5eb8a01e2e84eb094cc16bd5b6d64063", 0x35}, {&(0x7f00000003c0)="3a0616387da48cf79df746195922c61757e28a35f3779eeb08ac8304bd05b1011a3fdb540d1b582dedc97188b840c2d8e715544ca030fd84131454cf706e185c6373f9c2e27431c2b1d91b1b90ea5c6a4269317f766f6ae6d0d342fff6c3affacd00a306262652162ec86487297022689d65fa31cff56e1f12776712647c2fcd31c20fd65d4f1fbd823a159b302d459a114f7a7f65bd21296e97579d56513922b97563dc9f8e7440dd737625eca3f5297b0bb3ff133249ce47bb94dc70cfc38350bc710503307063e7b0949facb388540aea94dd2e4fdf4eb1dfdaead87e0350efe9e4939e9544d08d7697448f92520ae09a287ae3d62bd2757fee75bef6f1fa27a200b2ee033937b69564c2a2900db7b8866b548a56debedc378416b5a1e98e86e9f09c20fdf619b94488fa025f032af79968915eb2f5937096b1e6611aed94cf8fac35ec18524a5cef321132f1975f5e6acd24ab6d85dfff0f0b373f7eb120ad1570ce8f67479b3d7877b7e9adebd02569d2b9f4a3332b11cd8a24cca38e998cabd694141b4af2a28738b9718288fa04c9b280652d707b65a0289b92db6ddec35238f517bf0224b0390403200deb89e615bd849fd80a8b98cd7877cab27a431cbab4b10872072442fc182a9560ff8916faf331b8e32805f3aa8aabc638b25fd2bd557cf0bf3cb7c343087415d58f8d0e3108ab8e6038d34f5f02586a8f8ee690774c1cfd3b5cff3ca641b2d2bf9c2bcda63cf5f67e8eff16228b5da8a6a7d1a702c738c84a8ca023802897ff5189b475a66cc8de60085430277aefdd2733bcad3ddb7a91cdaee3d35f052e4419ba0bc3547ab681ae842701322f95b0fdb4d16574a34bc9376422d64529645906960902374b64462e524f48c17c35bc9baf050f00bedfd44cd120f4835643648f7b75aee0f776c411a05e06f757a82889dfeb6dfd8c95f597f0225481bcb885ee46b047f5d1af6482a5d3f7f238fac6cf07b8898a1ce4aaf2ef3853fc55a1e7ed1a17a916eb84a777911a9ca90f7ca6c42e314b26d15181d7a1aa400945bad90cd2c4ae4c3cbb3a12e9ab4f1ae15ec64ff74803720ea83a02a11546c685eefb60b80af14477604e4709a3bbd082b1819643ede73fab402667e175afaac2381131fbb2bc3cdff688a8983d80fd6b001603a1789d593a0a5e233195cbc86b0a8230311356d6b7bf51bc9f2463c2d4c3253614e1aec30769b9bae53abd66f4d225beb46d57d0c82da1a7f541595b5bde0642951cf2f2d46c613c470c94d0bc7f94bfc5a69f77921d91cae041b7a569b75d52244b045b15e38f165cfc4d3808899abfe83d563b2238037a76ef3160b9fb37370ff4c5b8c36116ab1ee34b6fa922a7b1a02d225b431087de1d0106de2022447586a6c37faa009ff26934a2d56280ff2fbf32fbfea7367ff253064b68a4d79647ea9516e742547a3d3699e4531d026bb1d9de5ec1f6ad81448d39e3bf3d4fa175a4d4c4a5f67fd2566c4ca0d3fa1712811f59e7da7164244e6dd4203a568870c390cd6f12b8d0b6c45f5c81887281d5a591afa9a605c86b96f681f5cd21d6991116c28aa3f2b5faadbcdbcaa474a783c161e187ebb8fde747bafb5d49c39d78cd8f5c6f1f0991782d4818c181f25b2f8ff70ac35fbbb2cc699078330ec099a6c87b73e47bf223ea40adb3a1bcd3aed1175ee7a07f119692133e5e2f7cceb9874f914db1f987ec6f679c4d355bc51302ce40122c101d098f69fb66a4c7a466be56b7af2de13a185d59fe11845c2185b1c0ea3587baf66e123f50702bf97e8b0ade1b2d3088949ccd6f15a78807212ac6ddf7328ae896a6d620102e8c1d4ee4d2736a62687aa5a19f707de0353960243cbc8d4debb02a9ef6637109f5b050a1dc40b26b80b82cf23bc5f8adde65f5309542873f1aabcdf2e29f70af7663e638d0cdee9422b84e3fca0cac3d477abc1c36521b0807020341fc045177ac4c56f63dc6ae4820332bde65c9bd6aa61f81d5ce74804c994f169239106bc8162d82095ed1079563fd6919d5fdff5c419f1942c9d8dbd2499c3a44e08a641076767ff8e4e5f90daaa7e8ca51774efcc4234ff4773cbce91e7a27289465a9f6a89139cb5697ea3304007c7e46d7758f376047382684fd5627c0fecce23d9bb6b6ee147fd8d50cef909c9e85856f3c9da83483194af21c716852c09717435f470742035961d5d1bceb4e49ad52f4045b9d3640f69672a08cbeac8b2c7fbd7283bf565ba59ac36350cd95b0c990609813de58314fd19b73ad6927efabe58ecc4316823d8c777fd89e265c00472f19395403946552eaa9ab4c561866d084584690fc84c95e91da27e0aefd81d5986950f24ba76468785c20962391974f2cd29edda4fda8f2985f41f05e521fcc57986ded5089ae58aeef81b13b68c6d5b0cc7ef42a6275b254e09b66753c5134f19c652fb5ea1d02ba45c681f963a5d0120b73ab4588c0c7c207992c09280b9f56dc7e6b779bec695a4da1ae92c0b349e8d750a99ef7f9ed01a2f7e1d21ae4e90d90f13c728a9ce59736bcac6ea1333099c4cd6b1a77ed0a68db40cd6aef3f30ffb39095a2cc550527a1e7fecd0858d9164d5ba823419cfe4c4d21ce6ef8c5e8867ecef6e0e0dc0c6685f8ea0bc303c209e1d0c30c5de33b2eecc9a335fdc4bc1bfa36544b38ad03696eb26386bd03d6683f48c572517837c5540c14c7fbba054101397bc95da8061a1f281290d89b7839097246a29b4940a92bc7a04f4f84d31425807c439a2d3d35209e5c9b2b45026cc748e35037c17f259c84a3698aa790e25d09c56ee77fac056fe8a268797d4e394314127b0ce15ac9698ee7b524420a99d07619cbc75d", 0x7eb}], 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000640)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000680)=[0x0, r3], 0x0, 0x0, 0x2}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000640)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000680)=[0x0, r5], 0x0, 0x0, 0x2}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000640)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000680)=[0x0, r7], 0x0, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) mmap(&(0x7f000092a000/0x4000)=nil, 0x4000, 0xa, 0x8010, 0xffffffffffffffff, 0x89b9e000) socket$packet(0x11, 0x3, 0x300) 7.581187704s ago: executing program 1 (id=3175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000340)=0xc, &(0x7f0000000380)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="69bbe840af31ab7b7d97d11d8b3c5ae88834d942ce2c4f42139aaf343af5096cfb", @ANYRES32=r0, @ANYRESOCT=0x0], 0x20dc}}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x5, &(0x7f0000001540)=0xffffffff, 0x4) r6 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x1}, 0x6e) mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="010000000000000000000002000000000800030011000000"], 0x54}}, 0x20000080) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x4, 0x84) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00', &(0x7f0000000240), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6673757569643d3139336264340e342d613938342d3036fb9a0b9bef7e8ade5f17614492b9ea34002d626462372d39633663650034332c00"]) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x84, &(0x7f0000001100)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8}, @in6={0xa, 0x4e24, 0x4, @remote, 0xd}, @in6={0xa, 0x4e24, 0xc000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}]}, &(0x7f00000011c0)=0x10) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x4c80, 0x7000000) mknodat$loop(r6, &(0x7f0000000480)='./bus\x00', 0x2000, 0x0) r11 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r12, 0x114, 0x3, &(0x7f00000005c0), 0x10) lseek(r11, 0x7ff, 0x1) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000001200)={r9, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x84) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 5.743917479s ago: executing program 1 (id=3177): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000000}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000002c0)={0xe0000008}) getrlimit(0x7, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r7, &(0x7f0000003680), 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x4e0, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 5.29607645s ago: executing program 5 (id=3179): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000ffffffffffffff7f00000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x4c050) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040027bd70000000000c00147379000000000000000000000200000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) socket(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x3}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x951, 0x0, 0x4, 0x0, 0x0) 4.311270883s ago: executing program 5 (id=3180): syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB, @ANYRESHEX, @ANYRES8=0x0], 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='svcrdma_rq_post_err\x00', r0, 0x0, 0x8001}, 0xfffffe7a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05", 0x36}], 0x1) 4.291921745s ago: executing program 6 (id=3181): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 3.844097769s ago: executing program 1 (id=3182): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x18a, 0x0, 0x0, 0x1000, 0xffff, @loopback}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x11, 0x0, @fd=r0, 0x9, 0x0, 0x3, 0x0, 0x1, {0x0, r1}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x1f, &(0x7f0000000100)=@string={0x1f, 0x3, "197d1810aa13ea08d1167ec2a84dba5bf303caa246a6918294909dd115"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) r5 = io_uring_setup(0x3b2c, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 3.481761825s ago: executing program 6 (id=3183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f0", 0x5}], 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x1}}, 0x10, 0x0}, 0x0) write$qrtrtun(r1, &(0x7f0000000c00)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c72", 0xb1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-ce\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x19) write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 3.269240128s ago: executing program 2 (id=3184): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="11d65590ef4083d20000006b5800000000000000000000611204000000000095bd8856c8f62a00236c54c3d3b2b05ce9a8dcbcda15b167479978dc7a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.1392751s ago: executing program 5 (id=3185): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca83740000000000000000000000000300000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 3.092062998s ago: executing program 2 (id=3186): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) (async) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0x800, @in6=@dev, 0x0, 0xfffc, 0x4e22, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x429bc19f}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@local, 0x2, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x14}}, 0xe8) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x1ff, 0x0, 0x0, 0x1}]}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000010001008badcc84000000000000000000007675c0e489951e05a35f8e5f87b4bdbe93295b36bbf0327a77f509399f3eec72e3e8fc6b6faecdf2eb2a9af5a2d6319919a845c1c482c31596fb9a6addbc311505fccd637de0d8d63f80ca50526208d3da79c37e6e8bd67eb98edef15c810e751298e36650945436470135ec625ddd0f3063d67048baa22e48178bb8800d98867bbeaf8bf69024e09b8e053ea66ac79e3f41ecd31ff91536638b9743438706701fe83534aaf9989a9e821e451d938636a549be064faa894d784d100891"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000140), 0x0}, 0x20) ptrace$cont(0x3f, r4, 0x5, 0x4) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f0000010140)=0x7, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000340)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.061651648s ago: executing program 2 (id=3187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x6f71, &(0x7f00000003c0)={0x0, 0x0, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000980)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xc836}], 0x1, 0x40010141, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008a40)="7c72bf03f7", 0x5}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000740)={0x40, 0x16, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) sync() syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f00000002c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0xd8, 0xfff4}, @generic={0x6c, 0x10, 0x1, "288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x96, {0x96, 0x1a, "1950691962624c35e59064eb96c8f2701bbd9bda5c520c18b882381b295bb3eb5b3ee44ee3962e738ef7c4920019c0eef216f8241468b321d81f738867ddebd5bb1e14464bb4c8d52962582252936ca25e4f4aa35ca117d16d03b95b445c40bd847bbdf9b87964590537030edb1f5c2ca93a2401e38b52f7238790b5114f169af48e42fe63cde6483ffa2165e010ce991256a0d1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000000600)={0x34, &(0x7f0000000200)={0x20, 0x14, 0x13, "4f45409a80f0b1a3516c3e47e1a265d4af62d1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x81, {0x7f, "5648adf48862b170b99c6a4c5ba836143ca078aaa3082fb7c2f183f22226a86b18d6d0f844b51338aafe7a7f150f8588a3d4f3290fb5263a20717d46293e0c89c64a606979c342be5fe8b41e684a50aff6d63aed30067cfc119ad84f1634f228bc45c9c866bdaff05db781f398d5ac9afddccf267c7170ac379bac154edf81"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x80}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r5, &(0x7f0000000140)="f8", 0x1, 0x4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000006c0)={0x14, &(0x7f0000000880)={0x0, 0x7, 0xc7, {0xc7, 0x7, "76aeba1fccc75e5d3fc7e6346a5ae6f014a63705f7bc0f4201a166b86b9506ee0919f189ea04e68ce5704eb0e3c076e1a2718a4b704f03afb146d3a71081a6200ab46f62b9971b103c844f31f95dd9ca99cd1aa28f8a046d1a391ed03b082f6c66f9ca6811bd697d58179e540650ed0bf3a1e4d890db6b8ccd83fea561d63d33a0176e8016020cf0af5c35c9a2a0f503b42ac88984cfcb18e2b3825314e1839a5916e2b61c2573c75099d7c62d1df25c90e1591e2c338221e3e773a6a1bcb43dfad0dc6d08"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x1c, &(0x7f0000000a80)={0x40, 0x18, 0x6a, "3dbaabaccb097919db028a7a99586cc9fb1d935643c8a44dfd99ede8c05340c3c52976cc44779029768cce4b612cf41c41e3beafe33516216eccb4f6e2c7cdd3c28e262bafc888b0827587a932cb2715f7974cae578cf70817ddef3763259f54b6138e3eb0dd9eaf3455"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 2.933076403s ago: executing program 5 (id=3188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$MSR(&(0x7f00000000c0), 0x1ff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000240)="5de0c29c01fdb00a6a86b98476b1caa832d80bde36c6f5268c6f855b0388f321ab5d22e000e1bc3f622ca9cd1a2f7e0c36a6e958c103bf02da684ee9b289d863b7de0734248204441bd74db1e413b68e788f142a8322d24cc48726a779c8b45e6c8dc8da62c4ed", 0x67, 0xf000000}) fsopen(&(0x7f0000000340)='squashfs\x00', 0x0) getpgrp(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="7910000000001600690066b6251b3e90f16b9ff3a614750e9539d72c544a90f2ad33bd6196bd77383b448ecc999f493a4c1efbc6444b157b3816c21e8f92e6a41bdf88793c2406086cd6c83074804865c5d1a59c2bacc85019b3817aed3691b2085ba3c4a1df96a597c687e666e03b6d27d47da515ae310ab6c458859e84c2fd764f99b2b4ee7c8e35cfa302abec726477106a37c1474a"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xa}}}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003540)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x20040054) sendfile(0xffffffffffffffff, r3, &(0x7f0000000300)=0x6, 0x7ff) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.868285789s ago: executing program 6 (id=3189): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fc000000000000000000000000000002ac1e010100000000000000000000cfce66fbf0002100000070d04c16860bf5b8ab661602a975d5f2ee7f829f026be58298fea77ae8251a1a942e771b54eb7aec49d0798a14d188cfc32813cd963049c692770ffd074e98047b97c1ae40b282bcf3a51b67a072efe12fefced1fc7bf5ca26960518e662719ee922c520795d158454f9935a4127cede54570aae764d298c8c0c8e6bb98fcb820c31052f871683dd00199a082a129bf297fb555bfab74a1da1d5d375bc50a69eccceb296fed72b3633aa6ebaa7b3c052e4355abd34158b15eaee636b184fb242e0d1bcc7a5c960ede765297164747bb7ff99f455399752360c48bf33cecdd4bd7b409c2b2f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000ffffffffffffff7f00000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x4c050) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040027bd70000000000c00147379000000000000000000000200000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) socket(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x3}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x951, 0x0, 0x4, 0x0, 0x0) 1.900243977s ago: executing program 6 (id=3190): openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$inet6(0xa, 0x6, 0x0) (rerun: 64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmmsg$inet(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5ec8", 0xffc0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="be", 0x1}], 0x1}}], 0x2, 0x20048045) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2000024e, &(0x7f0000001680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@bridge_getvlan={0x30, 0x72, 0x333, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6000804) (rerun: 64) creat(0x0, 0x80) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) (async) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delroute={0x28, 0x19, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x6, 0xff, 0x4, 0x0, 0x7, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0xe81f, 0x4, 0x81}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 1.74349063s ago: executing program 6 (id=3191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, 0x0, 0x0) recvmsg(r0, 0x0, 0x40008160) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) syz_open_dev$sg(0x0, 0xca5, 0x410680) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r7, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 1.307913094s ago: executing program 5 (id=3192): pipe(&(0x7f0000000300)) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r2, 0x5460, 0x20000000) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(r3, &(0x7f0000000000)='net/udp\x00') socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x14) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3dc76e5d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000e00)="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", 0x596}], 0x1}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 463.757648ms ago: executing program 6 (id=3193): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @private=0xa010100, 0x4e22, 0x1, 'lblcr\x00', 0x2, 0x8, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 0x1, 0x0, 0x7ff}}, 0x44) socket$netlink(0x10, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='dctcp-reno\x00', 0xb) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000200), 0x4) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000002c0)={'lo\x00', @random="6109757bf83e"}) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2, 0x12, 0x57, 0xe, 0x16, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e21, 0x7b8000, @loopback, 0x101}}, @sadb_lifetime={0x4, 0x2, 0x4, 0x5, 0xb, 0x8000000000000000}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb1, 0xf, {0x6, 0x6c, 0x4, 0x60, 0x0, 0x0, 0x0, @in=@loopback, @in=@loopback}}]}, 0xb0}}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000480)={0x0, 0xa, 0xf06, 0x9, 0xf, "fe713bc39a0a0a4f"}) r4 = accept4$packet(r2, 0x0, &(0x7f00000004c0), 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'ip6gretap0\x00', 0x0}) accept4$netrom(r3, &(0x7f0000000540)={{0x3, @netrom}, [@rose, @default, @default, @rose, @null, @bcast, @netrom, @bcast]}, &(0x7f00000005c0)=0x48, 0x80000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000640)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000680)=0x2, 0x4) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000006c0)=0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000700)=0xa3) sendmsg$nl_route(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv4_newnexthop={0x3c, 0x68, 0x302, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000980)={r6, 0x2c, &(0x7f0000000940)=[@in6={0xa, 0x4e22, 0x80000000, @loopback, 0x1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000009c0)=0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000a00)=0x9) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x240480c4) connect$bt_sco(r2, &(0x7f0000000b40), 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x0, 0x4, 0xce, {0xce, 0x4, "e958e0f3b96e371d85e0d39187a6694e5191a8f23722a9cd99602cddace979a68dfde4a5071ba0e7c0c4083231a0f04c72f6eacbcd25b531aaad68b0c52e636822f38ecdbbb46aad5cad2a27214f18120299181063835de06945253807e2d45970b1c2491aead43c433ab90dbc4c6205271a93c57bed6f49a0acab395e8df4b4579d337314a4c109d541617a9943d98c4de0280f778948672d3495bcafedf6bf5ae7a7f9d87e94baff7dcb3aad1576bca90fe1600e9fc96c9c09777513f65e96bf1dcb595e1d29a2e89a1cd3"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000001180)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf, 0xc, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x6, 0xf00f, 0x5cb, [0x3fa0]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xc, 0x2, 0x3f}, @ext_cap={0x7, 0x10, 0x2, 0x22, 0x7, 0x8, 0xdef4}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "e3742d2ddb625c31f01dc7a89f6f1b07"}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x2, 0x7, "ef41f7ca", "bbcf6841"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x4, 0x2, 0x9, 0x6, 0x4e29}}}, &(0x7f0000001780)={0x84, &(0x7f00000012c0)={0x40, 0x17, 0xbd, "e66a634bcaad6ee27959233cbbed5edd3c3344d3931cf694c53516282dc69bc5b2fe405fac307ebc4d3782ceb2fdc2c2edbfcd70ea8f713dcd44c97fe936cea7f0cc4450c66d12f5ad5772fb2e7c69c89bb9a2fffee2236d8f779b0d7e5b03ba9f8bb47cb18a5a3797ada63194e60713f582cc959ea3493fc9f142808704148f3e18b59aae4a538ff53aee7a35855419a332e73d5c4e262663f031d8e32f7fe68147d95481e3381b9a52230c707212d3e37dfd18b1e1cfdad00f0c5490"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0xe0, 0x4}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0xd2}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x9c}, &(0x7f0000001540)={0x40, 0xb, 0x2, "d099"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001640)={0x40, 0x19, 0x2, "a56f"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x41}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001700)={0x40, 0x1e, 0x1}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x6}}) 415.174217ms ago: executing program 5 (id=3194): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3195): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x201, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x23, 0x5, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): ][T15424] __split_vma+0x181/0x1160 [ 766.487312][T15424] ? __pfx___split_vma+0x10/0x10 [ 766.487348][T15424] vms_gather_munmap_vmas+0x38b/0x1730 [ 766.487375][T15424] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 766.487396][T15424] ? mas_walk+0x6a6/0x910 [ 766.487426][T15424] __mmap_region+0x328/0x2760 [ 766.487449][T15424] ? __pfx___mmap_region+0x10/0x10 [ 766.487476][T15424] ? hlock_class+0x4e/0x130 [ 766.487495][T15424] ? mark_lock+0xb5/0xc60 [ 766.487517][T15424] ? avc_has_perm_noaudit+0x119/0x3a0 [ 766.487536][T15424] ? __pfx_lock_release+0x10/0x10 [ 766.487560][T15424] ? __pfx_mark_lock+0x10/0x10 [ 766.487582][T15424] ? __pfx___lock_acquire+0x10/0x10 [ 766.487604][T15424] ? process_measurement+0x1e8/0x2370 [ 766.487672][T15424] mmap_region+0x1ab/0x3f0 [ 766.487697][T15424] do_mmap+0xd8d/0x11b0 [ 766.487727][T15424] ? __pfx_do_mmap+0x10/0x10 [ 766.487753][T15424] ? __pfx_down_write_killable+0x10/0x10 [ 766.487783][T15424] vm_mmap_pgoff+0x203/0x3a0 [ 766.487806][T15424] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 766.487826][T15424] ? __fget_files+0x206/0x3a0 [ 766.487849][T15424] ksys_mmap_pgoff+0x32c/0x5c0 [ 766.487872][T15424] ? __pfx_ksys_write+0x10/0x10 [ 766.487892][T15424] __x64_sys_mmap+0x125/0x190 [ 766.487920][T15424] do_syscall_64+0xcd/0x250 [ 766.487944][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.487968][T15424] RIP: 0033:0x7f4a1d78d169 [ 766.487982][T15424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.487999][T15424] RSP: 002b:00007f4a1e64b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 766.488015][T15424] RAX: ffffffffffffffda RBX: 00007f4a1d9a5fa0 RCX: 00007f4a1d78d169 [ 766.488027][T15424] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000400000000000 [ 766.488038][T15424] RBP: 00007f4a1e64b090 R08: 0000000000000003 R09: 0000000000000000 [ 766.488049][T15424] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 766.488059][T15424] R13: 0000000000000000 R14: 00007f4a1d9a5fa0 R15: 00007ffff18ee648 [ 766.488084][T15424] [ 766.562130][ T5871] koneplus 0003:1E7D:2E22.0024: probe with driver koneplus failed with error -71 [ 766.588980][ T2148] hid-generic 0020:0003:0002.0025: hidraw0: SENSOR HUB HID v0.03 Device [syz0] on syz0 [ 766.698589][ T5871] usb 5-1: USB disconnect, device number 95 [ 766.701463][ T29] audit: type=1400 audit(1741251540.867:2024): avc: denied { unmount } for pid=14507 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 766.724092][ T29] audit: type=1400 audit(1741251541.017:2025): avc: denied { getopt } for pid=15427 comm="syz.3.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 766.753697][T15428] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 766.867300][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 766.885555][ T29] audit: type=1400 audit(1741251541.047:2026): avc: denied { ioctl } for pid=15427 comm="syz.3.2702" path="socket:[47283]" dev="sockfs" ino=47283 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 767.076357][ T29] audit: type=1400 audit(1741251541.347:2027): avc: denied { mounton } for pid=15433 comm="syz.4.2705" path=2F3438382FE91F7189591E9233614B dev="tmpfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 767.506341][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 767.850819][ T5872] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 767.888179][T15416] net_ratelimit: 4 callbacks suppressed [ 767.888194][T15416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.902773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.205516][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.403693][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 768.449734][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.476947][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.495809][ T5872] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 768.506885][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.525670][ T5872] usb 4-1: config 0 descriptor?? [ 768.762872][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2718'. [ 768.797035][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 768.802793][T15466] netlink: 'syz.0.2718': attribute type 39 has an invalid length. [ 768.949295][ T5872] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0026/input/input33 [ 768.996107][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 769.026116][ T5872] appleir 0003:05AC:8241.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 769.110503][ T29] audit: type=1400 audit(1741251543.417:2028): avc: denied { write } for pid=15476 comm="syz.0.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 769.260629][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.450122][ T29] audit: type=1400 audit(1741251543.747:2029): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 769.470132][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.749402][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.659321][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.895983][T15501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.899569][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 770.904289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.932698][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 771.131193][T15516] netlink: 'syz.1.2737': attribute type 39 has an invalid length. [ 771.159040][ T29] audit: type=1400 audit(1741251545.447:2030): avc: denied { getopt } for pid=15508 comm="syz.3.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 771.182204][ T5871] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 771.190444][ T5872] usb 4-1: USB disconnect, device number 34 [ 771.280517][ T5901] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 771.341677][ T5871] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 771.349913][ T5871] usb 1-1: config 0 has no interface number 0 [ 771.357793][ T5871] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 771.367946][ T5871] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 771.436189][T15521] veth0_vlan: entered allmulticast mode [ 771.458657][T15521] veth0_vlan: left promiscuous mode [ 771.465961][T15521] veth0_vlan: entered promiscuous mode [ 772.085124][ T5871] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 772.094346][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.103304][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 772.109325][ T5871] usb 1-1: Product: syz [ 772.113988][ T5871] usb 1-1: Manufacturer: syz [ 772.118776][ T5871] usb 1-1: SerialNumber: syz [ 772.140470][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.171459][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.194529][ T5901] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 772.214427][ T5871] usb 1-1: config 0 descriptor?? [ 772.372197][T15505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 772.391657][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.407341][ T5871] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 772.474299][ T5901] usb 3-1: config 0 descriptor?? [ 772.593026][ T5871] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 772.840917][ T5871] usb 1-1: USB disconnect, device number 81 [ 773.444650][ T5901] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0027/input/input34 [ 773.465624][ T5871] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 773.477837][ T5871] cyberjack 1-1:0.69: device disconnected [ 773.535560][ T5901] appleir 0003:05AC:8241.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 774.522228][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.531180][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.630555][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.260159][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.269108][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.799038][ T29] audit: type=1400 audit(1741251550.097:2031): avc: denied { watch } for pid=15557 comm="syz.3.2752" path="/47" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 775.825912][ T29] audit: type=1400 audit(1741251550.097:2032): avc: denied { watch_sb watch_reads } for pid=15557 comm="syz.3.2752" path="/47" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 776.190267][T15565] veth0_vlan: entered allmulticast mode [ 776.260968][T15565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input35 [ 776.276757][ T29] audit: type=1400 audit(1741251550.547:2033): avc: denied { connect } for pid=15554 comm="syz.2.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 776.501023][ T5873] usb 3-1: USB disconnect, device number 103 [ 776.566316][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.711552][ T5871] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 777.080171][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 777.093531][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 777.111502][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 777.127729][ T5871] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 777.139534][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.167161][ T5871] usb 1-1: Product: syz [ 777.176380][ T5871] usb 1-1: Manufacturer: syz [ 777.183858][ T5871] usb 1-1: SerialNumber: syz [ 777.195141][ T5871] usb 1-1: config 0 descriptor?? [ 777.204591][ T5871] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 777.229255][T15579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.237598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.847006][ T29] audit: type=1400 audit(1741251552.147:2034): avc: denied { append } for pid=15586 comm="syz.2.2759" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 777.902677][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.911096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.461323][ T5960] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 778.687108][ T5873] usb 1-1: USB disconnect, device number 82 [ 778.739647][T15609] FAULT_INJECTION: forcing a failure. [ 778.739647][T15609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.761271][ T5960] usb 4-1: device descriptor read/64, error -71 [ 778.820729][T15609] CPU: 0 UID: 0 PID: 15609 Comm: syz.0.2764 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 778.820762][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 778.820774][T15609] Call Trace: [ 778.820781][T15609] [ 778.820790][T15609] dump_stack_lvl+0x16c/0x1f0 [ 778.820819][T15609] should_fail_ex+0x50a/0x650 [ 778.820852][T15609] _copy_to_user+0x32/0xd0 [ 778.820875][T15609] simple_read_from_buffer+0xd0/0x160 [ 778.820905][T15609] proc_fail_nth_read+0x198/0x270 [ 778.820933][T15609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.820961][T15609] ? rw_verify_area+0xcf/0x680 [ 778.820987][T15609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.821013][T15609] vfs_read+0x1df/0xbf0 [ 778.821041][T15609] ? __fget_files+0x1fc/0x3a0 [ 778.821060][T15609] ? __pfx___mutex_lock+0x10/0x10 [ 778.821084][T15609] ? __pfx_vfs_read+0x10/0x10 [ 778.821120][T15609] ? __fget_files+0x206/0x3a0 [ 778.821147][T15609] ksys_read+0x12b/0x250 [ 778.821174][T15609] ? __pfx_ksys_read+0x10/0x10 [ 778.821210][T15609] do_syscall_64+0xcd/0x250 [ 778.821237][T15609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.821262][T15609] RIP: 0033:0x7f8f1778bb7c [ 778.821278][T15609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 778.821296][T15609] RSP: 002b:00007f8f185be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.821315][T15609] RAX: ffffffffffffffda RBX: 00007f8f179a5fa0 RCX: 00007f8f1778bb7c [ 778.821328][T15609] RDX: 000000000000000f RSI: 00007f8f185be0a0 RDI: 0000000000000004 [ 778.821340][T15609] RBP: 00007f8f185be090 R08: 0000000000000000 R09: 0000000000000000 [ 778.821352][T15609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.821363][T15609] R13: 0000000000000000 R14: 00007f8f179a5fa0 R15: 00007fff58175628 [ 778.821391][T15609] [ 779.283583][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 779.361236][ T5960] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 779.511357][ T5960] usb 4-1: device descriptor read/64, error -71 [ 779.758513][ T5960] usb usb4-port1: attempt power cycle [ 779.810334][ T5871] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 780.795336][ T5871] usb 1-1: device descriptor read/64, error -71 [ 780.870479][ T5960] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 780.890832][ T5960] usb 4-1: device descriptor read/8, error -71 [ 781.063055][ T5871] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 781.774640][ T5960] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 781.801550][ T5960] usb 4-1: device descriptor read/8, error -71 [ 781.820018][T15645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.828746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.841255][ T5871] usb 1-1: device descriptor read/64, error -71 [ 781.854222][T15645] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2775'. [ 781.918040][ T5837] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 781.933002][ T5960] usb usb4-port1: unable to enumerate USB device [ 782.225248][ T5871] usb usb1-port1: attempt power cycle [ 782.537616][ T29] audit: type=1400 audit(1741251556.837:2035): avc: denied { write } for pid=15657 comm="syz.2.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 782.558712][T15658] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2781'. [ 783.503703][T15668] can0: slcan on ttyS3. [ 783.520478][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2781'. [ 783.529498][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 784.093859][T15657] can0 (unregistered): slcan off ttyS3. [ 784.298611][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.345704][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.401139][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.413442][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.424088][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 784.432683][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 784.600845][T15669] wlan0 speed is unknown, defaulting to 1000 [ 785.019849][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.028155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.773421][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.781803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.999286][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.767864][ T5837] Bluetooth: hci5: command tx timeout [ 786.910763][ T5830] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 786.980189][ T29] audit: type=1400 audit(1741251561.277:2036): avc: denied { lock } for pid=15693 comm="syz.2.2788" path="socket:[48512]" dev="sockfs" ino=48512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 787.434207][T15669] chnl_net:caif_netlink_parms(): no params data found [ 787.805162][T15716] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2794'. [ 787.838273][T15669] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.850127][T15714] syz.0.2793: attempt to access beyond end of device [ 787.850127][T15714] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 787.855642][T15669] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.872168][T15669] bridge_slave_0: entered allmulticast mode [ 787.879448][T15669] bridge_slave_0: entered promiscuous mode [ 787.889075][T15669] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.889969][T15714] XFS (loop0): SB validate failed with error -5. [ 787.896296][T15669] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.909788][T15669] bridge_slave_1: entered allmulticast mode [ 787.917601][T15669] bridge_slave_1: entered promiscuous mode [ 787.956966][T15669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.995783][T15669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.035108][T15669] team0: Port device team_slave_0 added [ 788.049212][T15669] team0: Port device team_slave_1 added [ 788.100329][ T5873] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 788.106583][T15669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.160383][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.214112][T15669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.237248][T15669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.250332][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.260308][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 788.283330][T15669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.296258][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.309140][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 788.309240][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 788.334985][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 788.346115][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 788.355939][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 788.373245][ T5873] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 788.382467][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 788.391099][ T5873] usb 3-1: Product: syz [ 788.395352][ T5873] usb 3-1: Manufacturer: syz [ 788.399991][ T5873] usb 3-1: SerialNumber: syz [ 788.412067][ T5873] usb 3-1: config 0 descriptor?? [ 788.428973][T15669] hsr_slave_0: entered promiscuous mode [ 788.466662][ T5926] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 788.467338][T15669] hsr_slave_1: entered promiscuous mode [ 788.512535][T15669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.520141][T15669] Cannot create hsr debugfs directory [ 788.739168][ T5926] usb 1-1: device descriptor read/64, error -71 [ 788.745964][ T5873] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 788.752843][ T5873] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 788.780839][ T5830] Bluetooth: hci5: command tx timeout [ 788.804550][T15669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 788.823796][ T5873] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 788.824763][T15669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 788.831538][ T5873] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 788.858465][ T5873] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 789.010506][ T5926] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 789.053211][ T5873] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 789.191004][ T5926] usb 1-1: device descriptor read/64, error -71 [ 789.321711][ T5926] usb usb1-port1: attempt power cycle [ 789.391892][T15669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 789.562380][T15669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 789.663430][T15669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.730830][T15669] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.738036][ T5926] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 789.777228][T10294] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.784374][T10294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.800468][ T5926] usb 1-1: device descriptor read/8, error -71 [ 789.809829][T10294] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.816946][T10294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.832266][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 789.942072][T15748] bond_slave_0: entered promiscuous mode [ 789.947773][T15748] bond_slave_1: entered promiscuous mode [ 789.954554][T15748] macvlan2: entered promiscuous mode [ 789.959923][T15748] bond0: entered promiscuous mode [ 789.970249][T15748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 790.040306][ T5926] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 790.069456][ T5926] usb 1-1: device descriptor read/8, error -71 [ 790.087014][T15669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.180921][ T5926] usb usb1-port1: unable to enumerate USB device [ 790.621147][ T5873] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 790.659744][ T5873] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 790.830718][ T5873] usb 3-1: USB disconnect, device number 104 [ 790.860698][ T5830] Bluetooth: hci5: command tx timeout [ 790.964673][T15669] veth0_vlan: entered promiscuous mode [ 791.017420][T15669] veth1_vlan: entered promiscuous mode [ 791.040013][T15669] veth0_macvtap: entered promiscuous mode [ 791.383006][T15669] veth1_macvtap: entered promiscuous mode [ 791.427616][T15669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.510323][T15669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.540319][T15669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.555739][T15669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.574525][T15669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.620528][ T5830] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 792.758038][T15669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.781588][T15669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.941040][ T5830] Bluetooth: hci5: command tx timeout [ 792.975245][T15669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.996264][T15669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.996616][T15777] syz.3.2809: attempt to access beyond end of device [ 792.996616][T15777] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 793.006673][T15669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.030324][T15669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.041743][T15669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.052334][T15669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.066151][T15669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.100481][T15777] XFS (loop3): SB validate failed with error -5. [ 793.227519][ T5926] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 793.771922][T15669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.785802][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.794149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.832217][T15669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.860835][T15669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.869536][T15669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.973472][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 793.990643][ T5926] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 794.030497][ T5926] usb 4-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.051618][T10294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.062871][ T5926] usb 4-1: config 2 interface 0 has no altsetting 0 [ 794.069623][T10294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.082170][ T5873] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 794.091474][ T5926] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice= 4.c0 [ 794.129695][ T5926] usb 4-1: New USB device strings: Mfr=104, Product=121, SerialNumber=3 [ 794.145505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.153687][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.166345][ T5926] usb 4-1: Product: syz [ 794.170915][ T5926] usb 4-1: Manufacturer: syz [ 794.180273][ T5926] usb 4-1: SerialNumber: syz [ 794.261961][T15800] FAULT_INJECTION: forcing a failure. [ 794.261961][T15800] name failslab, interval 1, probability 0, space 0, times 0 [ 794.270387][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 794.279796][T15800] CPU: 0 UID: 0 PID: 15800 Comm: syz.2.2813 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 794.279820][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 794.279831][T15800] Call Trace: [ 794.279837][T15800] [ 794.279845][T15800] dump_stack_lvl+0x16c/0x1f0 [ 794.279874][T15800] should_fail_ex+0x50a/0x650 [ 794.279901][T15800] ? fs_reclaim_acquire+0xae/0x150 [ 794.279930][T15800] ? tomoyo_encode2+0x100/0x3e0 [ 794.279954][T15800] should_failslab+0xc2/0x120 [ 794.279975][T15800] __kmalloc_noprof+0xcb/0x510 [ 794.279998][T15800] ? rcu_is_watching+0x12/0xc0 [ 794.280021][T15800] tomoyo_encode2+0x100/0x3e0 [ 794.280048][T15800] tomoyo_encode+0x29/0x50 [ 794.280064][T15800] tomoyo_realpath_from_path+0x19d/0x720 [ 794.280082][T15800] ? tomoyo_path_number_perm+0x235/0x590 [ 794.280098][T15800] tomoyo_path_number_perm+0x248/0x590 [ 794.280118][T15800] ? tomoyo_path_number_perm+0x235/0x590 [ 794.280144][T15800] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 794.280192][T15800] ? __pfx_lock_release+0x10/0x10 [ 794.280215][T15800] ? trace_lock_acquire+0x14e/0x1f0 [ 794.280239][T15800] ? lock_acquire+0x2f/0xb0 [ 794.280261][T15800] ? __fget_files+0x40/0x3a0 [ 794.280283][T15800] ? __fget_files+0x206/0x3a0 [ 794.280303][T15800] security_file_ioctl+0x9b/0x240 [ 794.280330][T15800] __x64_sys_ioctl+0xb7/0x200 [ 794.280358][T15800] do_syscall_64+0xcd/0x250 [ 794.280382][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.280405][T15800] RIP: 0033:0x7f4a1d78d169 [ 794.280426][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.280443][T15800] RSP: 002b:00007f4a1e62a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.280460][T15800] RAX: ffffffffffffffda RBX: 00007f4a1d9a6080 RCX: 00007f4a1d78d169 [ 794.280473][T15800] RDX: 0000400000000240 RSI: 0000000000008912 RDI: 0000000000000006 [ 794.280485][T15800] RBP: 00007f4a1e62a090 R08: 0000000000000000 R09: 0000000000000000 [ 794.280496][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.280507][T15800] R13: 0000000000000000 R14: 00007f4a1d9a6080 R15: 00007ffff18ee648 [ 794.280534][T15800] [ 794.313756][ T5873] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 794.346510][T15800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 794.467191][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.869884][ T5926] usb 4-1: USB disconnect, device number 39 [ 794.877600][ T5873] usb 1-1: Product: syz [ 794.883468][ T5873] usb 1-1: Manufacturer: syz [ 794.890269][ T5873] usb 1-1: SerialNumber: syz [ 794.896554][ T5873] usb 1-1: config 0 descriptor?? [ 795.268027][ T5873] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 795.636958][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.759868][T15811] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 795.865668][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 796.351960][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.620737][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.863785][ T5873] gspca_sunplus: reg_w_riv err -110 [ 796.929350][ T5873] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 797.067929][ T5873] usb 1-1: USB disconnect, device number 90 [ 798.108407][T15835] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 798.237502][T15835] ptrace attach of ""[15836] was attempted by "./syz-executor exec"[15835] [ 798.652957][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 798.663769][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 798.680534][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 798.826912][ T29] audit: type=1400 audit(1741251573.077:2037): avc: denied { ioctl } for pid=15837 comm="syz.0.2824" path="socket:[48948]" dev="sockfs" ino=48948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 799.277887][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.286124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.351933][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.365746][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 799.376374][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.944063][T15840] wlan0 speed is unknown, defaulting to 1000 [ 800.603676][T15857] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2827'. [ 800.613927][T15852] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2827'. [ 800.698044][ T6977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.730648][T15861] syz.2.2829: attempt to access beyond end of device [ 800.730648][T15861] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 800.745050][T15861] XFS (loop2): SB validate failed with error -5. [ 800.830021][ T6977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.042038][ T29] audit: type=1400 audit(1741251575.327:2038): avc: denied { mount } for pid=15868 comm="syz.0.2831" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 801.080469][ T2148] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 801.466462][ T2148] usb 3-1: Using ep0 maxpacket: 8 [ 801.498365][ T2148] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 801.589238][ T2148] usb 3-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.690389][ T2148] usb 3-1: config 2 interface 0 has no altsetting 0 [ 801.705256][ T6977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.739562][ T2148] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice= 4.c0 [ 801.753479][ T5837] Bluetooth: hci3: command tx timeout [ 802.022787][ T2148] usb 3-1: New USB device strings: Mfr=104, Product=121, SerialNumber=3 [ 802.074903][ T2148] usb 3-1: Product: syz [ 802.138134][ T2148] usb 3-1: Manufacturer: syz [ 802.196598][ T2148] usb 3-1: SerialNumber: syz [ 802.353982][ T6977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.447197][T15840] chnl_net:caif_netlink_parms(): no params data found [ 802.493708][ T2148] usb 3-1: USB disconnect, device number 105 [ 802.634480][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.652366][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.667104][T15840] bridge_slave_0: entered allmulticast mode [ 802.677553][T15840] bridge_slave_0: entered promiscuous mode [ 802.692669][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.738340][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.745676][T15840] bridge_slave_1: entered allmulticast mode [ 802.757554][T15840] bridge_slave_1: entered promiscuous mode [ 802.816844][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.834521][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.861348][ T5901] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 802.908227][T15840] team0: Port device team_slave_0 added [ 802.927309][ T6977] gretap0: left allmulticast mode [ 802.934054][ T6977] gretap0: left promiscuous mode [ 802.939314][ T6977] bridge0: port 3(gretap0) entered disabled state [ 802.948862][ T6977] bridge_slave_1: left allmulticast mode [ 802.954765][ T6977] bridge_slave_1: left promiscuous mode [ 802.960620][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.974144][ T6977] bridge_slave_0: left allmulticast mode [ 802.980765][ T6977] bridge_slave_0: left promiscuous mode [ 802.986488][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.031611][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 803.041977][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 803.064643][ T5901] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 803.089120][ T5901] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 803.169530][ T5901] usb 1-1: Product: syz [ 803.174924][ T5901] usb 1-1: Manufacturer: syz [ 803.189492][ T5901] usb 1-1: SerialNumber: syz [ 803.197818][T15897] FAULT_INJECTION: forcing a failure. [ 803.197818][T15897] name failslab, interval 1, probability 0, space 0, times 0 [ 803.216734][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.2.2838 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 803.216756][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 803.216767][T15897] Call Trace: [ 803.216773][T15897] [ 803.216781][T15897] dump_stack_lvl+0x16c/0x1f0 [ 803.216808][T15897] should_fail_ex+0x50a/0x650 [ 803.216838][T15897] ? fs_reclaim_acquire+0xae/0x150 [ 803.216866][T15897] ? tomoyo_realpath_from_path+0xb9/0x720 [ 803.216891][T15897] should_failslab+0xc2/0x120 [ 803.216912][T15897] __kmalloc_noprof+0xcb/0x510 [ 803.216928][T15897] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 803.216959][T15897] tomoyo_realpath_from_path+0xb9/0x720 [ 803.216983][T15897] ? tomoyo_path_number_perm+0x235/0x590 [ 803.217008][T15897] ? tomoyo_path_number_perm+0x235/0x590 [ 803.217033][T15897] tomoyo_path_number_perm+0x248/0x590 [ 803.217060][T15897] ? tomoyo_path_number_perm+0x235/0x590 [ 803.217086][T15897] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 803.217136][T15897] ? __pfx_lock_release+0x10/0x10 [ 803.217159][T15897] ? trace_lock_acquire+0x14e/0x1f0 [ 803.217183][T15897] ? lock_acquire+0x2f/0xb0 [ 803.217206][T15897] ? __fget_files+0x40/0x3a0 [ 803.217229][T15897] ? __fget_files+0x206/0x3a0 [ 803.217251][T15897] security_file_ioctl+0x9b/0x240 [ 803.217276][T15897] __x64_sys_ioctl+0xb7/0x200 [ 803.217304][T15897] do_syscall_64+0xcd/0x250 [ 803.217329][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.217353][T15897] RIP: 0033:0x7f4a1d78d169 [ 803.217369][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.217386][T15897] RSP: 002b:00007f4a1e64b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.217404][T15897] RAX: ffffffffffffffda RBX: 00007f4a1d9a5fa0 RCX: 00007f4a1d78d169 [ 803.217417][T15897] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 803.217428][T15897] RBP: 00007f4a1e64b090 R08: 0000000000000000 R09: 0000000000000000 [ 803.217440][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.217451][T15897] R13: 0000000000000000 R14: 00007f4a1d9a5fa0 R15: 00007ffff18ee648 [ 803.217478][T15897] [ 803.272024][T15897] ERROR: Out of memory at tomoyo_realpath_from_path. [ 803.492059][ T5901] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 803.520800][ T5901] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 803.528636][ T5901] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 803.557244][ T5901] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 803.578739][ T29] audit: type=1400 audit(1741251577.877:2039): avc: denied { write } for pid=15899 comm="syz.3.2839" path="socket:[49107]" dev="sockfs" ino=49107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 803.698997][ T29] audit: type=1400 audit(1741251577.987:2040): avc: denied { name_connect } for pid=15894 comm="syz.0.2837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 803.770322][ T29] audit: type=1400 audit(1741251578.047:2041): avc: denied { shutdown } for pid=15894 comm="syz.0.2837" laddr=fe80::13 lport=48097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 803.843963][ T29] audit: type=1400 audit(1741251578.137:2042): avc: denied { create } for pid=15894 comm="syz.0.2837" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 803.902803][ T5901] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 803.923396][ T5901] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 803.963441][ T5901] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 803.981434][ T6977] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 803.989236][ T5837] Bluetooth: hci3: command tx timeout [ 804.011091][ T29] audit: type=1400 audit(1741251578.247:2043): avc: denied { rename } for pid=15894 comm="syz.0.2837" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=50030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 804.055797][ T5901] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 804.413509][ T6977] bond0 (unregistering): left promiscuous mode [ 804.427389][ T6977] bond_slave_0: left promiscuous mode [ 804.437403][ T6977] bond_slave_1: left promiscuous mode [ 804.923491][ T6977] batman_adv: batadv0: Removing interface: macvlan5 [ 804.965499][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.995307][ T6977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.008561][ T6977] bond0 (unregistering): Released all slaves [ 805.039660][ T6977] bond1 (unregistering): Released all slaves [ 805.077643][T15840] team0: Port device team_slave_1 added [ 805.173234][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.207209][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.255641][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.298192][ T6977] IPVS: stopping master sync thread 10419 ... [ 805.614466][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.621620][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.662024][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.958874][T15840] hsr_slave_0: entered promiscuous mode [ 805.965237][T15840] hsr_slave_1: entered promiscuous mode [ 806.070440][ T5837] Bluetooth: hci3: command tx timeout [ 806.563317][T15840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.580257][T15840] Cannot create hsr debugfs directory [ 806.606994][ T5873] usb 1-1: USB disconnect, device number 91 [ 806.618254][ T5873] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 806.646006][ T5873] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 806.730530][ T5873] visor 1-1:1.0: device disconnected [ 806.787729][T15936] syz.0.2849: attempt to access beyond end of device [ 806.787729][T15936] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 806.811108][ T6977] hsr_slave_0: left promiscuous mode [ 806.816937][T15936] XFS (loop0): SB validate failed with error -5. [ 806.848609][ T6977] hsr_slave_1: left promiscuous mode [ 806.868375][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.877261][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.898985][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.920447][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.981385][ T6977] veth1_macvtap: left promiscuous mode [ 806.990469][ T6977] veth0_macvtap: left promiscuous mode [ 806.996055][ T6977] veth1_vlan: left promiscuous mode [ 807.001475][ T6977] veth0_vlan: left promiscuous mode [ 807.161208][ T5926] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 807.320288][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 807.453026][ T5926] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 807.463531][ T5926] usb 1-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.481259][ T5926] usb 1-1: config 2 interface 0 has no altsetting 0 [ 807.489577][ T5926] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice= 4.c0 [ 807.505629][ T5926] usb 1-1: New USB device strings: Mfr=104, Product=121, SerialNumber=3 [ 807.527165][ T5926] usb 1-1: Product: syz [ 807.693629][ T5926] usb 1-1: Manufacturer: syz [ 807.698233][ T5926] usb 1-1: SerialNumber: syz [ 808.150326][ T5830] Bluetooth: hci3: command tx timeout [ 808.641014][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.888677][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 809.566429][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 810.003320][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2859'. [ 812.144781][ T5873] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 812.328088][ T5873] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 812.357482][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.382989][ T5873] usb 4-1: Product: syz [ 812.387198][ T5873] usb 4-1: Manufacturer: syz [ 812.428728][ T5873] usb 4-1: SerialNumber: syz [ 812.457519][ T5873] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 812.474207][ T5821] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 813.004041][ T5926] usb 1-1: USB disconnect, device number 92 [ 813.441942][ T5873] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 813.610431][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 813.743279][ T5873] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 814.670860][ T5821] usb 4-1: Service connection timeout for: 256 [ 814.677079][ T5821] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 814.690272][ T5873] usb 3-1: config 179 has no interface number 0 [ 814.696642][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 814.709084][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 814.720773][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 814.732325][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 814.877294][ T2148] usb 4-1: USB disconnect, device number 40 [ 814.886381][ T5821] ath9k_htc: Failed to initialize the device [ 814.899492][ T2148] usb 4-1: ath9k_htc: USB layer deinitialized [ 814.906254][ T5873] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 814.922154][ T5873] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 815.002246][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.015521][T15986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 815.153129][T16005] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 815.305250][T16005] omfs: Invalid superblock (0) [ 815.402820][T15986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.442969][T15986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.232396][ T29] audit: type=1400 audit(1741251590.337:2044): avc: denied { listen } for pid=16002 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 817.090346][T15840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 817.218144][ T5960] usb 3-1: USB disconnect, device number 106 [ 817.218144][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 817.218185][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 817.252726][T15840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 817.411982][T15840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 818.045978][T15840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 818.130947][T16022] syz.3.2872: attempt to access beyond end of device [ 818.130947][T16022] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 818.262395][T16022] XFS (loop3): SB validate failed with error -5. [ 818.582066][ T2148] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 818.720497][ T2148] usb 4-1: device descriptor read/64, error -71 [ 819.275060][T15840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.303222][T15840] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.315550][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.322686][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.458865][ T2148] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 819.883647][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.890796][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.937431][T15840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 819.988133][T15840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 820.015200][ T29] audit: type=1400 audit(1741251594.317:2045): avc: denied { getopt } for pid=16055 comm="syz.2.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 820.038107][ T2148] usb 4-1: device descriptor read/64, error -71 [ 820.062734][T16056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2879'. [ 820.150561][ T2148] usb usb4-port1: attempt power cycle [ 821.086376][T15840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.113765][T15840] veth0_vlan: entered promiscuous mode [ 821.124348][T15840] veth1_vlan: entered promiscuous mode [ 821.143356][T15840] veth0_macvtap: entered promiscuous mode [ 821.151751][T15840] veth1_macvtap: entered promiscuous mode [ 822.224816][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.245633][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.421061][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.432053][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.442429][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.554685][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.661936][T15840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.812642][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.836237][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.846101][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.856655][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.866533][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.877571][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.888320][T15840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.901660][ T29] audit: type=1400 audit(1741251597.207:2046): avc: denied { create } for pid=16079 comm="syz.3.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 822.912764][T15840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.949108][T15840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.959321][T15840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.974719][T15840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.028329][ T29] audit: type=1400 audit(1741251597.317:2047): avc: denied { append } for pid=16081 comm="syz.0.2886" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 823.051275][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.351851][ T5960] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 823.499154][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.549494][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.572345][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 823.597626][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.654878][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.673470][ T5960] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 823.685860][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.696688][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.707419][ T5960] usb 3-1: config 0 descriptor?? [ 823.838343][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 824.135528][ T5960] corsair-psu 0003:1B1C:1C1F.0028: unknown main item tag 0x0 [ 824.469266][T16085] syz.2.2888: attempt to access beyond end of device [ 824.469266][T16085] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 824.666082][ T29] audit: type=1400 audit(1741251598.967:2048): avc: denied { lock } for pid=16083 comm="syz.2.2888" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 824.714258][T16085] XFS (loop2): SB validate failed with error -5. [ 824.820447][ T5960] corsair-psu 0003:1B1C:1C1F.0028: unknown main item tag 0x0 [ 824.821119][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.827854][ T5960] corsair-psu 0003:1B1C:1C1F.0028: unknown main item tag 0x0 [ 824.845894][ T5960] corsair-psu 0003:1B1C:1C1F.0028: unknown main item tag 0x0 [ 824.853353][ T5960] corsair-psu 0003:1B1C:1C1F.0028: unknown main item tag 0x0 [ 824.865370][ T29] audit: type=1400 audit(1741251598.997:2049): avc: denied { ioctl } for pid=16083 comm="syz.2.2888" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 824.890137][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.898198][ T5960] corsair-psu 0003:1B1C:1C1F.0028: hidraw0: USB HID v0.05 Device [HID 1b1c:1c1f] on usb-dummy_hcd.2-1/input0 [ 824.934711][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.980381][ T5960] corsair-psu 0003:1B1C:1C1F.0028: unable to initialize device (-38) [ 824.994458][ T5960] corsair-psu 0003:1B1C:1C1F.0028: probe with driver corsair-psu failed with error -38 [ 825.038938][T16114] wlan0 speed is unknown, defaulting to 1000 [ 825.053289][ T5960] usb 3-1: USB disconnect, device number 107 [ 826.596042][T16132] befs: Bad value for 'gid' [ 826.596042][T16131] befs: Bad value for 'gid' [ 826.596062][T16131] befs: Bad value for 'gid' [ 826.602281][T16132] befs: Bad value for 'gid' [ 827.038355][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2900'. [ 827.341391][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 828.696482][ T29] audit: type=1400 audit(1741251602.997:2050): avc: denied { bind } for pid=16156 comm="syz.0.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 828.739741][ T29] audit: type=1400 audit(1741251602.997:2051): avc: denied { listen } for pid=16156 comm="syz.0.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 829.125858][ T5926] IPVS: starting estimator thread 0... [ 829.551144][T16171] IPVS: using max 25 ests per chain, 60000 per kthread [ 829.776921][T16176] sctp: [Deprecated]: syz.2.2914 (pid 16176) Use of int in max_burst socket option. [ 829.776921][T16176] Use struct sctp_assoc_value instead [ 829.792666][ T29] audit: type=1400 audit(1741251604.077:2052): avc: denied { setopt } for pid=16175 comm="syz.2.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 829.860276][ T29] audit: type=1400 audit(1741251604.077:2053): avc: denied { connect } for pid=16175 comm="syz.2.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 830.706133][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 830.710262][ T29] audit: type=1400 audit(1741251604.157:2054): avc: denied { write } for pid=16179 comm="syz.5.2915" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 831.751674][ T29] audit: type=1400 audit(1741251606.057:2055): avc: denied { sqpoll } for pid=16191 comm="syz.1.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 831.962581][T16197] loop2: detected capacity change from 0 to 7 [ 832.299655][ T5825] Dev loop2: unable to read RDB block 7 [ 832.306029][ T5825] loop2: unable to read partition table [ 832.312922][ T5825] loop2: partition table beyond EOD, truncated [ 832.521506][T16208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16208 comm=syz.0.2924 [ 832.941083][T16217] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 833.841198][T16226] bridge_slave_0: default FDB implementation only supports local addresses [ 833.897374][ T29] audit: type=1400 audit(1741251608.197:2056): avc: denied { getopt } for pid=16225 comm="syz.5.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 834.000643][T16231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2929'. [ 834.121595][T16235] netlink: 'syz.0.2929': attribute type 39 has an invalid length. [ 834.163966][T16236] Bluetooth: MGMT ver 1.23 [ 836.221788][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 836.649559][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 837.134528][ T29] audit: type=1400 audit(1741251611.427:2057): avc: denied { ioctl } for pid=16268 comm="syz.1.2940" path="socket:[52375]" dev="sockfs" ino=52375 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 837.530299][ T2148] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 837.577430][T16282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2943'. [ 837.647602][T16283] netlink: 'syz.0.2943': attribute type 39 has an invalid length. [ 837.731594][ T2148] usb 2-1: unable to get BOS descriptor or descriptor too short [ 837.752891][ T2148] usb 2-1: config 1 has an invalid interface number: 171 but max is 0 [ 837.780391][ T2148] usb 2-1: config 1 has no interface number 0 [ 837.795156][ T2148] usb 2-1: config 1 interface 171 has no altsetting 0 [ 837.808458][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 837.829595][ T2148] usb 2-1: New USB device found, idVendor=0eef, idProduct=0002, bcdDevice=41.f8 [ 837.848883][ T2148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.866223][ T2148] usb 2-1: Product: syz [ 837.893073][ T2148] usb 2-1: Manufacturer: syz [ 837.897702][ T2148] usb 2-1: SerialNumber: syz [ 838.655424][ T2148] usb 2-1: USB disconnect, device number 51 [ 840.534742][ T29] audit: type=1400 audit(1741251614.827:2058): avc: denied { setopt } for pid=16302 comm="syz.1.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 841.532030][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.545895][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.553657][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.561880][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.569234][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 841.576935][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.610858][T16318] wlan0 speed is unknown, defaulting to 1000 [ 841.935023][T16315] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2954'. [ 841.980449][ T29] audit: type=1400 audit(1741251616.247:2059): avc: denied { setopt } for pid=16314 comm="syz.5.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 842.332786][ T3617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.526962][T16318] chnl_net:caif_netlink_parms(): no params data found [ 843.360773][T16345] syz.0.2958: attempt to access beyond end of device [ 843.360773][T16345] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 843.374148][T16345] XFS (loop0): SB validate failed with error -5. [ 843.411267][ T3617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.431118][T16342] trusted_key: syz.1.2959 sent an empty control message without MSG_MORE. [ 843.660819][ T5830] Bluetooth: hci0: command tx timeout [ 843.681654][ T3617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.817899][ T3617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.374506][T16318] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.383195][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.428164][T16318] bridge_slave_0: entered allmulticast mode [ 844.455660][T16318] bridge_slave_0: entered promiscuous mode [ 844.489844][T16318] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.529318][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.561815][T16318] bridge_slave_1: entered allmulticast mode [ 844.577036][T16318] bridge_slave_1: entered promiscuous mode [ 844.818064][T16318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.887006][T16318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.951429][ T5830] Bluetooth: hci0: command tx timeout [ 846.169699][ T3617] bridge_slave_1: left allmulticast mode [ 846.190281][ T3617] bridge_slave_1: left promiscuous mode [ 846.199289][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.261544][ T3617] bridge_slave_0: left allmulticast mode [ 846.280451][ T3617] bridge_slave_0: left promiscuous mode [ 846.286944][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.721854][T16395] Bluetooth: hci6: Frame reassembly failed (-84) [ 847.923356][ T6977] Bluetooth: hci6: Frame reassembly failed (-84) [ 847.981116][ T5837] Bluetooth: hci0: command tx timeout [ 849.205252][ T3617] bond0 (unregistering): left promiscuous mode [ 849.211587][ T3617] bond_slave_0: left promiscuous mode [ 849.217708][ T3617] bond_slave_1: left promiscuous mode [ 849.262020][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.331646][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.365869][ T3617] bond0 (unregistering): Released all slaves [ 849.477620][T16318] team0: Port device team_slave_0 added [ 849.540392][T16318] team0: Port device team_slave_1 added [ 849.772555][ T3617] tipc: Left network mode [ 849.857480][T16410] wlan0 speed is unknown, defaulting to 1000 [ 849.991265][ T5837] Bluetooth: hci6: command 0x1003 tx timeout [ 849.993035][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 850.062355][ T5830] Bluetooth: hci0: command tx timeout [ 850.103119][T16318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.110088][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.138124][T16318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.150405][T16318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.157416][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.819939][T16318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.312055][T16427] Cannot find add_set index 0 as target [ 851.972053][T16428] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd0": -EINTR [ 852.340360][ T5821] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 852.612861][T16435] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 852.634395][ T29] audit: type=1400 audit(1741251626.937:2060): avc: denied { connect } for pid=16434 comm="syz.1.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 852.697760][T16318] hsr_slave_0: entered promiscuous mode [ 852.706530][T16318] hsr_slave_1: entered promiscuous mode [ 852.710432][ T5821] usb 3-1: device descriptor read/64, error -71 [ 852.717766][T16318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.734990][T16318] Cannot create hsr debugfs directory [ 852.854766][ T3617] hsr_slave_0: left promiscuous mode [ 852.863498][ T3617] hsr_slave_1: left promiscuous mode [ 852.869095][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.876775][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.884871][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.893338][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.914860][ T3617] veth1_macvtap: left promiscuous mode [ 852.920548][ T3617] veth0_macvtap: left promiscuous mode [ 852.926282][ T3617] veth0_vlan: left promiscuous mode [ 852.950370][ T5821] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 852.992552][ T6977] Bluetooth: Error in BCSP hdr checksum [ 853.023068][ T2148] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 853.093307][ T5821] usb 3-1: device descriptor read/64, error -71 [ 853.182631][ T2148] usb 1-1: Using ep0 maxpacket: 16 [ 853.192832][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.204604][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.215534][ T5821] usb usb3-port1: attempt power cycle [ 853.221772][ T2148] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 853.231309][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.241482][ T2148] usb 1-1: config 0 descriptor?? [ 853.255793][ T6977] Bluetooth: Error in BCSP hdr checksum [ 853.407293][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 853.464576][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 853.560395][ T5821] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 853.591090][ T5821] usb 3-1: device descriptor read/8, error -71 [ 853.674097][ T2148] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0029/input/input36 [ 853.765419][ T2148] appleir 0003:05AC:8241.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 853.845029][ T5821] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 853.886862][ T5821] usb 3-1: device descriptor read/8, error -71 [ 853.932948][ T29] audit: type=1400 audit(1741251628.237:2061): avc: denied { mount } for pid=16440 comm="syz.0.2981" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 853.955782][ T29] audit: type=1400 audit(1741251628.237:2062): avc: denied { search } for pid=16440 comm="syz.0.2981" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 853.978385][ T29] audit: type=1400 audit(1741251628.237:2063): avc: denied { mounton } for pid=16440 comm="syz.0.2981" path="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 854.002502][ T5821] usb usb3-port1: unable to enumerate USB device [ 854.020256][ T5926] infiniband s}z1: ib_query_port failed (-19) [ 854.328941][ T29] audit: type=1800 audit(1741251628.627:2064): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2984" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 854.378669][T16318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 854.409707][T16318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 854.431893][T16318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 854.445459][T16318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 854.554334][T16318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.575547][T16318] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.589001][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.596125][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.621479][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.628620][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.781662][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 855.511525][T16464] netlink: 'syz.1.2987': attribute type 10 has an invalid length. [ 855.541162][T16464] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.548548][T16464] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.612807][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.619949][T16464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.627319][ T5871] usb 1-1: USB disconnect, device number 93 [ 855.627346][T16464] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.640360][T16464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.656058][ T29] audit: type=1400 audit(1741251629.957:2065): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 855.667653][T16464] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 855.724184][T16318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.177830][T16486] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 856.248797][ T29] audit: type=1400 audit(1741251630.527:2066): avc: denied { connect } for pid=16478 comm="syz.2.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 856.340089][T16492] vivid-000: disconnect [ 857.321367][ T29] audit: type=1400 audit(1741251631.027:2067): avc: denied { setopt } for pid=16489 comm="syz.1.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 857.400166][T16318] veth0_vlan: entered promiscuous mode [ 857.465005][T16318] veth1_vlan: entered promiscuous mode [ 857.525392][ T5960] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 857.534601][T16318] veth0_macvtap: entered promiscuous mode [ 857.715672][T16318] veth1_macvtap: entered promiscuous mode [ 857.955629][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.081972][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.220111][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.287958][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.311281][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.322480][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.333948][T16318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.351326][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 858.444367][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.451063][ T5960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.456902][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.474868][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.485319][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.496901][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.520237][ T5960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 858.520304][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.536748][ T5960] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 858.536776][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.541460][ T5960] usb 1-1: config 0 descriptor?? [ 858.586634][T16318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.596868][T16516] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 858.599563][T16318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.614807][T16318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.623819][T16516] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3001'. [ 858.639981][T16318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.660111][T16318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.777241][T16521] blktrace: Concurrent blktraces are not allowed on sg0 [ 858.830895][ T29] audit: type=1400 audit(1741251632.997:2068): avc: denied { append } for pid=16517 comm="syz.5.3003" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 859.134375][T16487] vivid-000: reconnect [ 859.136895][ T5960] usbhid 1-1:0.0: can't add hid device: -71 [ 859.210655][ T5960] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 859.259965][ T5960] usb 1-1: USB disconnect, device number 94 [ 859.269301][T16524] wlan0 speed is unknown, defaulting to 1000 [ 859.326637][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.351179][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.497512][ T6545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.505534][ T6545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.877296][T16550] bond_slave_0: entered promiscuous mode [ 860.883036][T16550] bond_slave_1: entered promiscuous mode [ 860.941421][T16550] macvlan2: entered promiscuous mode [ 860.946845][T16550] bond0: entered promiscuous mode [ 860.957774][T16550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 861.646629][ T29] audit: type=1400 audit(1741251635.937:2069): avc: denied { watch } for pid=16556 comm="syz.2.3013" path="/591" dev="tmpfs" ino=3201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 861.733193][ T29] audit: type=1400 audit(1741251635.937:2070): avc: denied { read } for pid=16556 comm="syz.2.3013" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 861.789396][ T29] audit: type=1400 audit(1741251635.937:2071): avc: denied { open } for pid=16556 comm="syz.2.3013" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 861.906392][T16557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 862.070484][T16557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 862.078995][T16557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 862.276420][T16557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 862.345506][T16557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.351790][T16557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 862.382140][T16557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 862.397762][T16557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 862.407135][T16557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 862.437188][T16557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 862.711079][T16526] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 862.744146][ T29] audit: type=1400 audit(1741251637.047:2072): avc: denied { ioctl } for pid=16579 comm="syz.5.3021" path="socket:[55478]" dev="sockfs" ino=55478 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 862.812066][ T5960] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 862.832534][T16568] netlink: 'syz.1.3016': attribute type 39 has an invalid length. [ 862.835606][T16579] block nbd5: shutting down sockets [ 862.912069][T16526] usb 7-1: Using ep0 maxpacket: 8 [ 862.919060][T16526] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 862.929474][T16526] usb 7-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.944712][T16526] usb 7-1: config 2 interface 0 has no altsetting 0 [ 862.956485][T16526] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice= 4.c0 [ 862.970344][T16526] usb 7-1: New USB device strings: Mfr=104, Product=121, SerialNumber=3 [ 862.981413][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 862.990453][T16526] usb 7-1: Product: syz [ 862.994676][T16526] usb 7-1: Manufacturer: syz [ 862.999411][T16526] usb 7-1: SerialNumber: syz [ 863.005462][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.018152][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.029882][ T5960] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 863.050338][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.064671][ T5960] usb 3-1: config 0 descriptor?? [ 863.085643][ T5837] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 863.251528][T16526] usb 7-1: USB disconnect, device number 2 [ 863.282485][T16578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.234291][T16596] Cannot find add_set index 0 as target [ 864.253432][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 864.270802][T16578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.380278][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 864.461467][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 864.896774][ T29] audit: type=1400 audit(1741251639.197:2073): avc: denied { read } for pid=16576 comm="syz.2.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 864.917830][ T5960] usbhid 3-1:0.0: can't add hid device: -71 [ 864.925292][ T5960] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 864.936702][T16601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'. [ 864.984592][T16601] netlink: 'syz.1.3027': attribute type 39 has an invalid length. [ 865.538603][ T5960] usb 3-1: USB disconnect, device number 112 [ 865.567513][ T29] audit: type=1400 audit(1741251639.867:2074): avc: denied { watch } for pid=16605 comm="syz.6.3029" path="/2/file0" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 865.595221][T16607] bond_slave_0: entered promiscuous mode [ 865.600951][T16607] bond_slave_1: entered promiscuous mode [ 865.606629][T16607] bridge0: entered promiscuous mode [ 865.612884][T16607] macvlan2: entered promiscuous mode [ 865.618198][T16607] bond0: entered promiscuous mode [ 865.624131][T16607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.549137][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 866.555212][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 867.084433][T16621] netlink: 'syz.2.3031': attribute type 10 has an invalid length. [ 867.197021][T16621] syz_tun: entered promiscuous mode [ 867.257043][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 867.360337][ T5830] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 868.396337][ T29] audit: type=1400 audit(1741251642.677:2075): avc: denied { read } for pid=16633 comm="syz.5.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 868.660582][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 868.666840][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 868.686449][T16643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3039'. [ 868.705283][T16647] netlink: 'syz.2.3039': attribute type 39 has an invalid length. [ 869.000312][ T5821] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 869.176494][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 869.185294][T16661] macvlan7: entered promiscuous mode [ 869.193536][T16661] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 869.215195][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 869.273330][ T5821] usb 2-1: config 86 has an invalid interface number: 196 but max is 0 [ 869.445076][ T5821] usb 2-1: config 86 has no interface number 0 [ 869.474466][ T5821] usb 2-1: config 86 interface 196 has no altsetting 0 [ 869.501097][ T5821] usb 2-1: string descriptor 0 read error: -22 [ 869.508084][ T5821] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 869.518526][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.823622][ T5821] msi2500 2-1:86.196: Registered as swradio24 [ 869.829731][ T5821] msi2500 2-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 869.965796][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'. [ 870.062425][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.014919][ T5926] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 871.223065][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.281275][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.355050][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.382210][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.408249][ T5926] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 871.417555][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 871.436616][ T5926] usb 3-1: SerialNumber: syz [ 871.723142][ T5926] usb 3-1: 0:2 : does not exist [ 871.742949][ T5926] usb 3-1: USB disconnect, device number 113 [ 872.364021][ T9] usb 2-1: USB disconnect, device number 52 [ 872.793130][ T29] audit: type=1400 audit(1741251647.097:2076): avc: denied { accept } for pid=16707 comm="syz.0.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 872.851201][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3063'. [ 873.217311][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 873.228474][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 873.239741][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 873.263863][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 873.272484][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 873.281515][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 873.573338][T16726] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 873.573338][T16726] program syz.0.3067 not setting count and/or reply_len properly [ 873.992180][ T3617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.414405][T16718] wlan0 speed is unknown, defaulting to 1000 [ 874.433174][T16722] syz.0.3067: attempt to access beyond end of device [ 874.433174][T16722] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 874.446278][T16722] XFS (loop0): SB validate failed with error -5. [ 874.480355][ T5926] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 874.644729][ T29] audit: type=1400 audit(1741251648.947:2077): avc: denied { read append } for pid=16744 comm="syz.0.3073" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 874.670105][ T3617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.670337][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 874.682928][ T29] audit: type=1400 audit(1741251648.967:2078): avc: denied { open } for pid=16744 comm="syz.0.3073" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 874.722364][ T5926] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 874.737670][ T5926] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 874.741196][ T29] audit: type=1400 audit(1741251648.987:2079): avc: denied { ioctl } for pid=16744 comm="syz.0.3073" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 874.747994][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.792790][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.802827][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.811632][ T5926] usb 2-1: Product: syz [ 874.826221][ T5926] usb 2-1: Manufacturer: syz [ 874.831315][ T5926] usb 2-1: SerialNumber: syz [ 874.843578][ T3617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.944060][ T3617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.954445][T16526] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 875.008052][T16718] chnl_net:caif_netlink_parms(): no params data found [ 875.113501][T16526] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 875.156863][T16526] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.179177][T16526] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 875.222792][T16526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 875.247419][T16526] usb 1-1: SerialNumber: syz [ 875.341322][ T5837] Bluetooth: hci2: command tx timeout [ 875.624139][ T5926] usb 2-1: 0:2 : does not exist [ 875.651952][T16526] usb 1-1: 0:2 : does not exist [ 875.654145][ T5926] usb 2-1: USB disconnect, device number 53 [ 875.660141][T16526] usb 1-1: unit 5: unexpected type 0x09 [ 875.695887][T16526] usb 1-1: USB disconnect, device number 95 [ 875.718682][T16718] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.734028][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.746863][T16718] bridge_slave_0: entered allmulticast mode [ 875.758205][T16718] bridge_slave_0: entered promiscuous mode [ 875.801769][T16718] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.818667][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.845872][T16718] bridge_slave_1: entered allmulticast mode [ 875.862404][T16718] bridge_slave_1: entered promiscuous mode [ 875.949113][T16718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.978193][T16718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.095871][T16718] team0: Port device team_slave_0 added [ 876.105528][T16718] team0: Port device team_slave_1 added [ 876.129417][T16718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.443401][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.471972][T16718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.687597][ T29] audit: type=1400 audit(1741251650.987:2080): avc: denied { read write } for pid=16772 comm="syz.0.3080" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 876.720087][ T29] audit: type=1400 audit(1741251650.987:2081): avc: denied { open } for pid=16772 comm="syz.0.3080" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 877.295579][T16782] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 877.371807][ T3617] bond0 (unregistering): left promiscuous mode [ 877.420262][ T5837] Bluetooth: hci2: command tx timeout [ 877.527282][ T3617] bond0 (unregistering): Released all slaves [ 877.605676][ T3617] bond1 (unregistering): Released all slaves [ 877.707961][ T29] audit: type=1400 audit(1741251651.997:2082): avc: denied { write } for pid=16792 comm="syz.1.3085" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 878.320348][ T29] audit: type=1400 audit(1741251651.997:2083): avc: denied { ioctl } for pid=16792 comm="syz.1.3085" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 878.529106][ T3617] bond2 (unregistering): Released all slaves [ 878.542335][T16718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.549360][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.580911][T16718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.931120][ T3617] IPVS: stopping master sync thread 16217 ... [ 879.769757][ T5837] Bluetooth: hci2: command tx timeout [ 879.773812][T16718] hsr_slave_0: entered promiscuous mode [ 879.781685][T16718] hsr_slave_1: entered promiscuous mode [ 879.787683][T16718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.795393][T16718] Cannot create hsr debugfs directory [ 879.833188][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 879.850077][T16814] tmpfs: Unknown parameter 'mpSl' [ 880.366839][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3096'. [ 880.980313][ T5873] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 881.160244][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 881.204373][ T3617] hsr_slave_0: left promiscuous mode [ 881.233027][ T5873] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 881.270591][ T3617] hsr_slave_1: left promiscuous mode [ 881.297661][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.330145][ T5873] usb 1-1: Product: syz [ 881.334546][ T5873] usb 1-1: Manufacturer: syz [ 881.352076][ T3617] veth0_macvtap: left promiscuous mode [ 881.357652][ T3617] veth1_vlan: left promiscuous mode [ 881.370099][ T5873] usb 1-1: SerialNumber: syz [ 881.389830][ T5873] esd_usb 1-1:1.0: sending version message failed [ 881.402638][ T5873] esd_usb 1-1:1.0: probe with driver esd_usb failed with error -22 [ 881.770520][ T29] audit: type=1400 audit(1741251656.067:2084): avc: denied { read } for pid=16849 comm="syz.5.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 881.833105][ T5830] Bluetooth: hci2: command tx timeout [ 881.948177][ T29] audit: type=1400 audit(1741251656.247:2085): avc: denied { shutdown } for pid=16849 comm="syz.5.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 882.710313][ T5960] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 882.748062][ T5830] Bluetooth: hci3: Malformed LE Event: 0x1b [ 882.760868][ T29] audit: type=1400 audit(1741251657.067:2086): avc: denied { remount } for pid=16860 comm="syz.1.3101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 882.862437][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.874528][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.884413][ T5960] usb 7-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 882.893710][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.906604][ T5960] usb 7-1: config 0 descriptor?? [ 882.981802][ T29] audit: type=1400 audit(1741251657.287:2087): avc: denied { unmount } for pid=15840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 883.514736][T16869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.531288][T16869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.572167][ T9] usb 1-1: USB disconnect, device number 96 [ 883.755034][T16718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 883.766828][T16718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 883.780913][T16526] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 883.781517][T16718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 883.818094][ T3617] IPVS: stop unused estimator thread 0... [ 883.825002][T16718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 883.886805][T16718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.903154][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 883.905457][T16718] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.927262][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.934405][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.947457][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.952404][T16526] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 883.954553][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.965081][T16526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.999989][T16718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 884.016358][T16718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.017208][T16526] usb 2-1: config 0 descriptor?? [ 884.038848][T16526] cp210x 2-1:0.0: cp210x converter detected [ 884.100437][ T116] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 884.163391][T16718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.199669][T16718] veth0_vlan: entered promiscuous mode [ 884.210942][T16718] veth1_vlan: entered promiscuous mode [ 884.234444][T16718] veth0_macvtap: entered promiscuous mode [ 884.245862][T16526] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 884.255132][T16718] veth1_macvtap: entered promiscuous mode [ 884.261839][ T116] usb 1-1: Using ep0 maxpacket: 32 [ 884.267015][T16526] cp210x 2-1:0.0: querying part number failed [ 884.275475][ T116] usb 1-1: config 129 has an invalid interface number: 172 but max is 0 [ 884.289881][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.302781][ T116] usb 1-1: config 129 has no interface number 0 [ 884.309312][ T116] usb 1-1: config 129 interface 172 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 884.321287][T16526] usb 2-1: cp210x converter now attached to ttyUSB0 [ 884.330207][T16526] usb 2-1: USB disconnect, device number 54 [ 884.337242][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.349720][T16526] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 884.357540][ T116] usb 1-1: config 129 interface 172 altsetting 0 endpoint 0x4 has an invalid bInterval 72, changing to 10 [ 884.369047][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.382073][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.383476][T16526] cp210x 2-1:0.0: device disconnected [ 884.396287][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.399409][ T116] usb 1-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice=1c.bd [ 884.410045][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.418348][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.435767][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.436174][ T116] usb 1-1: Product: syz [ 884.447842][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.459649][ T116] usb 1-1: Manufacturer: syz [ 884.463839][T16718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.465540][ T116] usb 1-1: SerialNumber: syz [ 884.489842][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.500769][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.511556][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.523106][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.535048][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.546067][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.556020][T16718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.566477][T16718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.577657][T16718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.590120][T16718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.598885][T16718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.609943][T16718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.619108][T16718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.736219][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.746040][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.955671][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.970363][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.078149][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 885.546115][T16890] FAULT_INJECTION: forcing a failure. [ 885.546115][T16890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.559290][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.1.3107 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 885.559315][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 885.559326][T16890] Call Trace: [ 885.559332][T16890] [ 885.559340][T16890] dump_stack_lvl+0x16c/0x1f0 [ 885.559370][T16890] should_fail_ex+0x50a/0x650 [ 885.559401][T16890] _copy_from_user+0x2e/0xd0 [ 885.559422][T16890] do_sock_getsockopt+0x5f6/0x800 [ 885.559445][T16890] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 885.559478][T16890] __sys_getsockopt+0x12f/0x260 [ 885.559509][T16890] __x64_sys_getsockopt+0xbd/0x160 [ 885.559532][T16890] ? do_syscall_64+0x91/0x250 [ 885.559556][T16890] ? lockdep_hardirqs_on+0x7c/0x110 [ 885.559578][T16890] do_syscall_64+0xcd/0x250 [ 885.559603][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.559629][T16890] RIP: 0033:0x7f225818d169 [ 885.559644][T16890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.559662][T16890] RSP: 002b:00007f2259080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 885.559681][T16890] RAX: ffffffffffffffda RBX: 00007f22583a6160 RCX: 00007f225818d169 [ 885.559694][T16890] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000009 [ 885.559706][T16890] RBP: 00007f2259080090 R08: 0000400000000000 R09: 0000000000000000 [ 885.559718][T16890] R10: 0000400000000580 R11: 0000000000000246 R12: 0000000000000001 [ 885.559730][T16890] R13: 0000000000000000 R14: 00007f22583a6160 R15: 00007ffdc3deb638 [ 885.559756][T16890] [ 886.001112][ T5960] razer 0003:1532:010E.002A: failed to enable macro keys: -71 [ 886.035165][ T5960] razer 0003:1532:010E.002A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.6-1/input0 [ 886.045826][T16892] veth1_to_batadv: entered promiscuous mode [ 886.048422][ T5960] usb 7-1: USB disconnect, device number 3 [ 886.080400][T16892] macsec1: entered promiscuous mode [ 886.364031][T16895] veth0_vlan: entered allmulticast mode [ 887.741990][T16910] can0: slcan on ptm0. [ 888.447573][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3111'. [ 888.490965][T16905] can0 (unregistered): slcan off ptm0. [ 888.717490][ T116] appletouch 1-1:129.172: Could not find int-in endpoint [ 888.735980][ T116] appletouch 1-1:129.172: probe with driver appletouch failed with error -5 [ 888.755754][ T116] usbhid 1-1:129.172: couldn't find an input interrupt endpoint [ 888.797661][ T116] usb 1-1: USB disconnect, device number 97 [ 888.920288][ T5901] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 889.102813][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 889.211865][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 889.297506][ T116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 889.308539][ T5960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 889.334431][ T5901] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 889.347311][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.360897][ T5901] usb 2-1: Product: syz [ 889.368127][ T5901] usb 2-1: Manufacturer: syz [ 889.378223][ T5901] usb 2-1: SerialNumber: syz [ 889.398473][ T5901] usb 2-1: config 0 descriptor?? [ 889.979753][T16945] bpf: Bad value for 'uid' [ 890.040280][ T5901] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 890.306051][ T29] audit: type=1400 audit(1741251664.607:2088): avc: denied { accept } for pid=16942 comm="syz.2.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 890.514918][ T29] audit: type=1400 audit(1741251664.817:2089): avc: denied { write } for pid=16913 comm="syz.1.3116" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 890.539935][T16914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.622425][T16914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.662667][ T29] audit: type=1400 audit(1741251664.817:2090): avc: denied { open } for pid=16913 comm="syz.1.3116" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 891.234681][ T5901] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 891.617185][ T5901] usb 2-1: USB disconnect, device number 55 [ 891.695142][ T29] audit: type=1400 audit(1741251665.997:2091): avc: denied { append } for pid=16975 comm="syz.5.3134" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 891.845442][ T29] audit: type=1400 audit(1741251666.127:2092): avc: denied { watch } for pid=16973 comm="syz.2.3132" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 891.869649][ T29] audit: type=1400 audit(1741251666.127:2093): avc: denied { watch_sb watch_reads } for pid=16973 comm="syz.2.3132" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 891.894665][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.079318][ T29] audit: type=1400 audit(1741251666.347:2094): avc: denied { listen } for pid=16980 comm="syz.0.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 892.100046][ T29] audit: type=1400 audit(1741251666.347:2095): avc: denied { accept } for pid=16980 comm="syz.0.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 892.120975][ T29] audit: type=1400 audit(1741251666.377:2096): avc: denied { getopt } for pid=16977 comm="syz.6.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 892.140957][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.734734][T16997] SET target dimension over the limit! [ 893.740522][T16997] SET target dimension over the limit! [ 895.230760][T17025] FAULT_INJECTION: forcing a failure. [ 895.230760][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.230790][T17025] CPU: 1 UID: 0 PID: 17025 Comm: syz.5.3147 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 895.230813][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 895.230824][T17025] Call Trace: [ 895.230830][T17025] [ 895.230837][T17025] dump_stack_lvl+0x16c/0x1f0 [ 895.230865][T17025] should_fail_ex+0x50a/0x650 [ 895.230897][T17025] _copy_from_user+0x2e/0xd0 [ 895.230919][T17025] copy_msghdr_from_user+0x99/0x160 [ 895.230946][T17025] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 895.230985][T17025] ___sys_sendmsg+0xff/0x1e0 [ 895.231012][T17025] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.231049][T17025] ? __pfx_lock_release+0x10/0x10 [ 895.231074][T17025] ? trace_lock_acquire+0x14e/0x1f0 [ 895.231105][T17025] ? __fget_files+0x206/0x3a0 [ 895.231131][T17025] __sys_sendmsg+0x16e/0x220 [ 895.231157][T17025] ? __pfx___sys_sendmsg+0x10/0x10 [ 895.231201][T17025] do_syscall_64+0xcd/0x250 [ 895.231226][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.231251][T17025] RIP: 0033:0x7f8c5278d169 [ 895.231267][T17025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.231284][T17025] RSP: 002b:00007f8c53511038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.231302][T17025] RAX: ffffffffffffffda RBX: 00007f8c529a5fa0 RCX: 00007f8c5278d169 [ 895.231314][T17025] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 895.231326][T17025] RBP: 00007f8c53511090 R08: 0000000000000000 R09: 0000000000000000 [ 895.231338][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.231349][T17025] R13: 0000000000000000 R14: 00007f8c529a5fa0 R15: 00007ffcc9faa7a8 [ 895.231375][T17025] [ 895.654630][T17035] FAULT_INJECTION: forcing a failure. [ 895.654630][T17035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.654659][T17035] CPU: 0 UID: 0 PID: 17035 Comm: syz.6.3141 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 895.654681][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 895.654692][T17035] Call Trace: [ 895.654699][T17035] [ 895.654706][T17035] dump_stack_lvl+0x16c/0x1f0 [ 895.654741][T17035] should_fail_ex+0x50a/0x650 [ 895.654773][T17035] _copy_to_user+0x32/0xd0 [ 895.654795][T17035] simple_read_from_buffer+0xd0/0x160 [ 895.654825][T17035] proc_fail_nth_read+0x198/0x270 [ 895.654853][T17035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 895.654881][T17035] ? rw_verify_area+0xcf/0x680 [ 895.654907][T17035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 895.654933][T17035] vfs_read+0x1df/0xbf0 [ 895.654961][T17035] ? __pfx_rds_getsockopt+0x10/0x10 [ 895.654992][T17035] ? __pfx_vfs_read+0x10/0x10 [ 895.655021][T17035] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 895.655040][T17035] ? __pfx_do_sys_openat2+0x10/0x10 [ 895.655079][T17035] ksys_read+0x12b/0x250 [ 895.655106][T17035] ? __pfx_ksys_read+0x10/0x10 [ 895.655141][T17035] do_syscall_64+0xcd/0x250 [ 895.655167][T17035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.655192][T17035] RIP: 0033:0x7f4d4838bb7c [ 895.655208][T17035] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 895.655226][T17035] RSP: 002b:00007f4d4916b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 895.655244][T17035] RAX: ffffffffffffffda RBX: 00007f4d485a6160 RCX: 00007f4d4838bb7c [ 895.655257][T17035] RDX: 000000000000000f RSI: 00007f4d4916b0a0 RDI: 000000000000000a [ 895.655269][T17035] RBP: 00007f4d4916b090 R08: 0000000000000000 R09: 0000000000000000 [ 895.655281][T17035] R10: 0000400000000580 R11: 0000000000000246 R12: 0000000000000001 [ 895.655293][T17035] R13: 0000000000000000 R14: 00007f4d485a6160 R15: 00007ffdc4474d68 [ 895.655318][T17035] [ 897.869876][ T29] audit: type=1400 audit(1741251672.007:2097): avc: denied { accept } for pid=17057 comm="syz.5.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 897.982245][T17066] dlm: no locking on control device [ 898.010234][T17066] hub 5-0:1.0: USB hub found [ 898.013004][T17066] hub 5-0:1.0: 1 port detected [ 898.418748][ T29] audit: type=1400 audit(1741251672.277:2098): avc: denied { append } for pid=17059 comm="syz.0.3154" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 898.467662][T17068] FAULT_INJECTION: forcing a failure. [ 898.467662][T17068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.467692][T17068] CPU: 0 UID: 0 PID: 17068 Comm: syz.1.3157 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 898.467714][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 898.467724][T17068] Call Trace: [ 898.467731][T17068] [ 898.467738][T17068] dump_stack_lvl+0x16c/0x1f0 [ 898.467764][T17068] should_fail_ex+0x50a/0x650 [ 898.467795][T17068] _copy_from_user+0x2e/0xd0 [ 898.467816][T17068] copy_msghdr_from_user+0x99/0x160 [ 898.467842][T17068] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 898.467880][T17068] ___sys_sendmsg+0xff/0x1e0 [ 898.467906][T17068] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.467942][T17068] ? __pfx_lock_release+0x10/0x10 [ 898.467967][T17068] ? trace_lock_acquire+0x14e/0x1f0 [ 898.467998][T17068] ? __fget_files+0x206/0x3a0 [ 898.468025][T17068] __sys_sendmsg+0x16e/0x220 [ 898.468051][T17068] ? __pfx___sys_sendmsg+0x10/0x10 [ 898.468094][T17068] do_syscall_64+0xcd/0x250 [ 898.468120][T17068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.468145][T17068] RIP: 0033:0x7f225818d169 [ 898.468159][T17068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.468176][T17068] RSP: 002b:00007f22590c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.468194][T17068] RAX: ffffffffffffffda RBX: 00007f22583a5fa0 RCX: 00007f225818d169 [ 898.468206][T17068] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000003 [ 898.468218][T17068] RBP: 00007f22590c2090 R08: 0000000000000000 R09: 0000000000000000 [ 898.468229][T17068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.468241][T17068] R13: 0000000000000000 R14: 00007f22583a5fa0 R15: 00007ffdc3deb638 [ 898.468265][T17068] [ 898.551364][T17070] FAULT_INJECTION: forcing a failure. [ 898.551364][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 898.551390][T17070] CPU: 1 UID: 0 PID: 17070 Comm: syz.0.3158 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 898.551412][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 898.551421][T17070] Call Trace: [ 898.551426][T17070] [ 898.551433][T17070] dump_stack_lvl+0x16c/0x1f0 [ 898.551458][T17070] should_fail_ex+0x50a/0x650 [ 898.551483][T17070] ? fs_reclaim_acquire+0xae/0x150 [ 898.551508][T17070] should_failslab+0xc2/0x120 [ 898.551529][T17070] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 898.551549][T17070] ? __alloc_skb+0x2b1/0x380 [ 898.551576][T17070] __alloc_skb+0x2b1/0x380 [ 898.551599][T17070] ? __pfx___alloc_skb+0x10/0x10 [ 898.551625][T17070] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 898.551654][T17070] netlink_alloc_large_skb+0x69/0x130 [ 898.551677][T17070] netlink_sendmsg+0x689/0xd70 [ 898.551702][T17070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.551732][T17070] ____sys_sendmsg+0xaaf/0xc90 [ 898.551750][T17070] ? copy_msghdr_from_user+0x10b/0x160 [ 898.551772][T17070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.551800][T17070] ___sys_sendmsg+0x135/0x1e0 [ 898.551823][T17070] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.551854][T17070] ? __pfx_lock_release+0x10/0x10 [ 898.551876][T17070] ? trace_lock_acquire+0x14e/0x1f0 [ 898.551904][T17070] ? __fget_files+0x206/0x3a0 [ 898.551929][T17070] __sys_sendmsg+0x16e/0x220 [ 898.551953][T17070] ? __pfx___sys_sendmsg+0x10/0x10 [ 898.551991][T17070] do_syscall_64+0xcd/0x250 [ 898.552016][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.552040][T17070] RIP: 0033:0x7f8f1778d169 [ 898.552054][T17070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.552072][T17070] RSP: 002b:00007f8f185be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.552089][T17070] RAX: ffffffffffffffda RBX: 00007f8f179a5fa0 RCX: 00007f8f1778d169 [ 898.552101][T17070] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 898.552113][T17070] RBP: 00007f8f185be090 R08: 0000000000000000 R09: 0000000000000000 [ 898.552125][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.552136][T17070] R13: 0000000000000000 R14: 00007f8f179a5fa0 R15: 00007fff58175628 [ 898.552160][T17070] [ 899.779689][ T5960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 901.321314][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.323391][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.594331][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.627034][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.636556][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 901.644449][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 901.668480][ T5837] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 902.161704][T17092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.677523][ T6545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.931655][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3163'. [ 902.992750][T17109] netlink: 'syz.1.3163': attribute type 39 has an invalid length. [ 903.003098][T17108] FAULT_INJECTION: forcing a failure. [ 903.003098][T17108] name failslab, interval 1, probability 0, space 0, times 0 [ 903.018551][T17095] wlan0 speed is unknown, defaulting to 1000 [ 903.109430][ T6545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.180513][T17108] CPU: 1 UID: 0 PID: 17108 Comm: syz.6.3170 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 903.180540][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 903.180552][T17108] Call Trace: [ 903.180558][T17108] [ 903.180566][T17108] dump_stack_lvl+0x16c/0x1f0 [ 903.180595][T17108] should_fail_ex+0x50a/0x650 [ 903.180623][T17108] ? fs_reclaim_acquire+0xae/0x150 [ 903.180652][T17108] should_failslab+0xc2/0x120 [ 903.180675][T17108] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 903.180695][T17108] ? __alloc_skb+0x2b1/0x380 [ 903.180724][T17108] __alloc_skb+0x2b1/0x380 [ 903.180748][T17108] ? __pfx___alloc_skb+0x10/0x10 [ 903.180775][T17108] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 903.180804][T17108] netlink_alloc_large_skb+0x69/0x130 [ 903.180830][T17108] netlink_sendmsg+0x689/0xd70 [ 903.180859][T17108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.180894][T17108] ____sys_sendmsg+0xaaf/0xc90 [ 903.180915][T17108] ? copy_msghdr_from_user+0x10b/0x160 [ 903.180940][T17108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.180972][T17108] ___sys_sendmsg+0x135/0x1e0 [ 903.180999][T17108] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.181036][T17108] ? __pfx_lock_release+0x10/0x10 [ 903.181061][T17108] ? trace_lock_acquire+0x14e/0x1f0 [ 903.181092][T17108] ? __fget_files+0x206/0x3a0 [ 903.181119][T17108] __sys_sendmsg+0x16e/0x220 [ 903.181145][T17108] ? __pfx___sys_sendmsg+0x10/0x10 [ 903.181188][T17108] do_syscall_64+0xcd/0x250 [ 903.181220][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.181245][T17108] RIP: 0033:0x7f4d4838d169 [ 903.181261][T17108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.181278][T17108] RSP: 002b:00007f4d491ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.181297][T17108] RAX: ffffffffffffffda RBX: 00007f4d485a5fa0 RCX: 00007f4d4838d169 [ 903.181310][T17108] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000003 [ 903.181322][T17108] RBP: 00007f4d491ad090 R08: 0000000000000000 R09: 0000000000000000 [ 903.181335][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.181346][T17108] R13: 0000000000000000 R14: 00007f4d485a5fa0 R15: 00007ffdc4474d68 [ 903.181371][T17108] [ 903.412110][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.710677][ T5837] Bluetooth: hci1: command tx timeout [ 903.882223][ T5960] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 904.280321][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 904.283296][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3175'. [ 904.287189][ T5960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 904.299563][ T29] audit: type=1400 audit(1741251678.597:2099): avc: denied { setopt } for pid=17123 comm="syz.1.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 904.335411][ T5960] usb 3-1: config 86 has an invalid interface number: 196 but max is 0 [ 904.344293][ T6545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.355564][ T5960] usb 3-1: config 86 has no interface number 0 [ 904.368561][ T5960] usb 3-1: config 86 interface 196 has no altsetting 0 [ 904.386856][ T5960] usb 3-1: string descriptor 0 read error: -22 [ 904.394202][ T5960] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 904.410258][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.560255][ T29] audit: type=1400 audit(1741251678.777:2100): avc: denied { ioctl } for pid=17123 comm="syz.1.3175" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 904.603345][ T29] audit: type=1400 audit(1741251678.817:2101): avc: denied { ioctl } for pid=17123 comm="syz.1.3175" path="socket:[58451]" dev="sockfs" ino=58451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 904.637595][ T6545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.715650][T17137] hfsplus: unable to find HFS+ superblock [ 904.749110][ T5960] msi2500 3-1:86.196: Registered as swradio24 [ 904.755270][ T5960] msi2500 3-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 905.708262][T17095] chnl_net:caif_netlink_parms(): no params data found [ 906.173871][ T5837] Bluetooth: hci1: command tx timeout [ 906.295450][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.319669][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.335369][T17095] bridge_slave_0: entered allmulticast mode [ 906.345083][T17095] bridge_slave_0: entered promiscuous mode [ 906.384998][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.401834][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.499037][T17095] bridge_slave_1: entered allmulticast mode [ 906.507613][T17095] bridge_slave_1: entered promiscuous mode [ 906.659069][ T29] audit: type=1400 audit(1741251680.717:2102): avc: denied { create } for pid=17146 comm="syz.1.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 906.711014][ T6545] bridge_slave_1: left allmulticast mode [ 906.722289][ T6545] bridge_slave_1: left promiscuous mode [ 906.732656][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.752813][ T6545] bridge_slave_0: left allmulticast mode [ 906.772163][ T6545] bridge_slave_0: left promiscuous mode [ 906.790710][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.061023][ T6545] bond1 (unregistering): (slave gretap2): Releasing active interface [ 907.580338][ T5821] usb 3-1: USB disconnect, device number 114 [ 908.220742][ T5837] Bluetooth: hci1: command tx timeout [ 908.480665][ T5821] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 908.610355][ T5821] usb 2-1: device descriptor read/64, error -71 [ 908.911831][ T6545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.925996][ T6545] bond_slave_0: left promiscuous mode [ 908.933670][ T6545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.012416][ T5821] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 909.266822][ T5821] usb 2-1: device descriptor read/64, error -71 [ 909.381902][ T5821] usb usb2-port1: attempt power cycle [ 909.602324][ T5901] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 909.611864][ T6545] bond_slave_1: left promiscuous mode [ 909.618658][ T6545] bond0 (unregistering): Released all slaves [ 909.678690][T17200] dccp_xmit_packet: Payload too large (65472) for featneg. [ 909.785429][ T5901] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 909.796992][ T6545] bond1 (unregistering): Released all slaves [ 909.800249][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.803209][ T5821] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 909.819392][ T5901] usb 3-1: Product: syz [ 909.827522][ T5901] usb 3-1: Manufacturer: syz [ 909.841553][ T5821] usb 2-1: device descriptor read/8, error -71 [ 909.858986][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.884203][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.019792][T17095] team0: Port device team_slave_0 added [ 910.029820][T17095] team0: Port device team_slave_1 added [ 910.120269][ T5901] usb 3-1: SerialNumber: syz [ 910.196110][ T5901] usb 3-1: config 0 descriptor?? [ 910.341947][ T5837] Bluetooth: hci1: command tx timeout [ 910.519673][ T5821] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 911.040687][ T5821] usb 2-1: device descriptor read/8, error -71 [ 911.449486][ T5821] usb usb2-port1: unable to enumerate USB device [ 911.470302][ T5901] airspy 3-1:0.0: Board ID: 00 [ 911.486793][ T5901] airspy 3-1:0.0: Firmware version: [ 911.532161][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.542360][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.572921][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.661240][ T30] INFO: task syz.4.2705:15434 blocked for more than 143 seconds. [ 911.696706][ T30] Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 911.773819][ T29] audit: type=1400 audit(1741251686.057:2103): avc: denied { write } for pid=5806 comm="syz-executor" path="pipe:[3978]" dev="pipefs" ino=3978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 911.774500][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 911.806679][ T30] task:syz.4.2705 state:D stack:27888 pid:15434 tgid:15433 ppid:5827 task_flags:0x400740 flags:0x00004006 [ 911.879950][ T30] Call Trace: [ 911.901153][ T30] [ 911.904200][ T30] __schedule+0xf43/0x5890 [ 911.909207][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 911.958345][ T30] ? find_held_lock+0x2d/0x110 [ 912.061710][ T30] ? __pfx___schedule+0x10/0x10 [ 912.155212][ T30] ? schedule+0x298/0x350 [ 912.172572][ T30] ? __pfx_lock_release+0x10/0x10 [ 912.187103][ T30] ? finish_task_switch.isra.0+0x217/0xcc0 [ 912.210342][ T30] ? lock_acquire+0x2f/0xb0 [ 912.214873][ T30] ? schedule+0x1fd/0x350 [ 912.219216][ T30] schedule+0xe7/0x350 [ 912.240704][ T30] schedule_timeout+0x244/0x280 [ 912.245602][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 912.259582][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.264887][ T30] __wait_for_common+0x3e1/0x600 [ 912.269864][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 912.275887][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 912.281470][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 912.286884][ T30] wait_for_completion_state+0x1c/0x40 [ 912.295819][ T30] do_coredump+0x86f/0x4400 [ 912.301549][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 912.306809][ T30] ? __pfx_do_coredump+0x10/0x10 [ 912.311882][ T30] ? find_held_lock+0x2d/0x110 [ 912.316680][ T30] ? finish_task_switch.isra.0+0x212/0xcc0 [ 912.331686][ T30] ? __pfx_lock_release+0x10/0x10 [ 912.336759][ T30] ? rcu_is_watching+0x12/0xc0 [ 912.348655][ T30] ? finish_task_switch.isra.0+0x160/0xcc0 [ 912.356688][ T30] ? finish_task_switch.isra.0+0x217/0xcc0 [ 912.368983][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 912.374707][ T30] ? __schedule+0xf4b/0x5890 [ 912.379434][ T30] ? __pfx___schedule+0x10/0x10 [ 912.384446][ T30] ? irqentry_exit+0x3b/0x90 [ 912.389045][ T30] ? proc_coredump_connector+0x2d2/0x4f0 [ 912.394890][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 912.403350][ T30] get_signal+0x230b/0x26c0 [ 912.407887][ T30] ? __pfx_force_sigsegv+0x10/0x10 [ 912.413031][ T30] ? __pfx_get_signal+0x10/0x10 [ 912.417892][ T30] ? __asan_memset+0x23/0x50 [ 912.422561][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 912.428118][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 912.434434][ T30] ? rcu_is_watching+0x12/0xc0 [ 912.439218][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 912.444897][ T30] do_syscall_64+0xda/0x250 [ 912.449413][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.455349][ T30] RIP: 0033:0x7f0f1684e750 [ 912.459745][ T30] RSP: 002b:00007f0f178473f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 912.468199][ T30] RAX: 0000000000000000 RBX: 00007f0f16ba5fa8 RCX: 00007f0f1698d169 [ 912.476236][ T30] RDX: 00007f0f17847400 RSI: 00007f0f17847530 RDI: 000000000000000b [ 912.484346][ T30] RBP: 00007f0f16ba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 912.492358][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f16ba5fac [ 912.500977][ T30] R13: 0000000000000000 R14: 00007ffccbfa4310 R15: 00007ffccbfa43f8 [ 912.508977][ T30] [ 912.512165][ T30] [ 912.512165][ T30] Showing all locks held in the system: [ 912.519931][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 912.550718][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.557658][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.584662][ T30] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 912.625098][ T30] 1 lock held by khungtaskd/30: [ 912.629968][ T30] #0: ffffffff8e1bd0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 912.650259][ T30] 3 locks held by kworker/u8:2/35: [ 912.655383][ T30] 3 locks held by kworker/u8:3/51: [ 912.670251][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.680795][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 912.700887][ T30] #1: ffffc90000bc7d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 912.740202][ T30] #2: ffffffff8fef7ba8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 912.749382][ T30] 2 locks held by getty/5574: [ 912.761866][ T30] #0: ffff888032cc50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 912.773635][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 912.783956][ T30] 3 locks held by kworker/1:3/5821: [ 912.789195][ T30] 6 locks held by kworker/0:7/5901: [ 912.794925][ T30] #0: ffff888144ad6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 912.806709][ T30] #1: ffffc900042afd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 912.818066][ T30] #2: ffff8880294c7190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 912.827581][ T30] #3: ffff8880251ac190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 912.836964][ T30] #4: ffff88805a8f3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 912.846307][ T30] #5: ffff888072d7abf8 (airspy:1039:(&s->hdl)->_lock){+.+.}-{4:4}, at: v4l2_ctrl_handler_setup+0x48/0xa0 [ 912.858191][ T30] 3 locks held by kworker/0:8/5960: [ 912.864053][ T5901] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 912.872795][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 912.884861][ T30] #1: ffffc9000453fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 912.889840][ T5901] airspy 3-1:0.0: Registered as swradio24 [ 912.894610][ T30] #2: ffffffff8e1c8538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 912.906339][ T5901] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 912.911043][ T30] 4 locks held by kworker/u8:10/6545: [ 912.911061][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 912.911122][ T30] #1: ffffc90005297d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 912.911179][ T30] #2: ffffffff8fee1e90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 912.911229][ T30] #3: ffffffff8e1c8538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 912.911289][ T30] 1 lock held by syz-executor/15669: [ 912.911302][ T30] #0: ffffffff8fef7ba8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 912.911365][ T30] 3 locks held by syz.2.3187/17183: [ 912.911377][ T30] #0: ffff88806b9e0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 912.911429][ T30] #1: ffff88806b9e0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 912.911480][ T30] #2: ffff888059716b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7f/0x730 [ 912.911541][ T30] 1 lock held by syz.6.3193/17211: [ 912.911553][ T30] #0: ffffffff8fef7ba8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 913.030582][ T30] 1 lock held by syz.1.3195/17220: [ 913.035679][ T30] #0: ffffffff8fef7ba8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 913.045115][ T30] [ 913.047486][ T30] ============================================= [ 913.047486][ T30] [ 913.056021][ T30] NMI backtrace for cpu 1 [ 913.056034][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 913.056053][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 913.056063][ T30] Call Trace: [ 913.056070][ T30] [ 913.056077][ T30] dump_stack_lvl+0x116/0x1f0 [ 913.056101][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 913.056129][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 913.056153][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 913.056174][ T30] watchdog+0xf62/0x12b0 [ 913.056204][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.056229][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 913.056252][ T30] ? __kthread_parkme+0x148/0x220 [ 913.056272][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.056300][ T30] kthread+0x3af/0x750 [ 913.056322][ T30] ? __pfx_kthread+0x10/0x10 [ 913.056347][ T30] ? __pfx_kthread+0x10/0x10 [ 913.056368][ T30] ret_from_fork+0x45/0x80 [ 913.056391][ T30] ? __pfx_kthread+0x10/0x10 [ 913.056412][ T30] ret_from_fork_asm+0x1a/0x30 [ 913.056444][ T30] [ 913.056453][ T30] Sending NMI from CPU 1 to CPUs 0: [ 913.169916][ C0] NMI backtrace for cpu 0 [ 913.169937][ C0] CPU: 0 UID: 0 PID: 3459 Comm: kworker/u8:7 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 913.169960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 913.169972][ C0] Workqueue: bat_events batadv_nc_worker [ 913.170000][ C0] RIP: 0010:lock_release+0x264/0x6f0 [ 913.170027][ C0] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 37 04 00 00 8b 55 24 <85> d2 0f 85 b4 03 00 00 48 8d 7d 22 48 b8 00 00 00 00 00 fc ff df [ 913.170045][ C0] RSP: 0018:ffffc9000c747a60 EFLAGS: 00000046 [ 913.170058][ C0] RAX: 0000000000000007 RBX: 1ffff920018e8f4e RCX: ffffc9000c747ab0 [ 913.170070][ C0] RDX: 0000000000000000 RSI: ffffffff8e1bd0c0 RDI: ffff8880338aafa4 [ 913.170083][ C0] RBP: ffff8880338aaf80 R08: 0000000000000000 R09: fffffbfff20c4c02 [ 913.170094][ C0] R10: ffffffff90626017 R11: 0000000000000002 R12: ffffffff8e1bd0c0 [ 913.170106][ C0] R13: 0000000000000003 R14: ffff8880338aaf28 R15: ffff8880338aa440 [ 913.170118][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 913.170136][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 913.170148][ C0] CR2: 00007f225905ef98 CR3: 000000000df80000 CR4: 00000000003526f0 [ 913.170160][ C0] Call Trace: [ 913.170168][ C0] [ 913.170175][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 913.170206][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 913.170230][ C0] ? nmi_handle+0x1ac/0x5d0 [ 913.170259][ C0] ? lock_release+0x264/0x6f0 [ 913.170285][ C0] ? default_do_nmi+0x6a/0x160 [ 913.170314][ C0] ? exc_nmi+0x170/0x1e0 [ 913.170341][ C0] ? end_repeat_nmi+0xf/0x53 [ 913.170371][ C0] ? lock_release+0x264/0x6f0 [ 913.170395][ C0] ? lock_release+0x264/0x6f0 [ 913.170420][ C0] ? lock_release+0x264/0x6f0 [ 913.170445][ C0] [ 913.170450][ C0] [ 913.170456][ C0] ? batadv_nc_worker+0x887/0x1060 [ 913.170481][ C0] ? __pfx_lock_release+0x10/0x10 [ 913.170506][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 913.170533][ C0] ? lock_acquire+0x2f/0xb0 [ 913.170557][ C0] ? batadv_nc_worker+0x164/0x1060 [ 913.170584][ C0] batadv_nc_worker+0x88c/0x1060 [ 913.170612][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 913.170637][ C0] ? rcu_is_watching+0x12/0xc0 [ 913.170657][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 913.170678][ C0] ? process_one_work+0x921/0x1ba0 [ 913.170704][ C0] ? lock_acquire+0x2f/0xb0 [ 913.170728][ C0] ? process_one_work+0x921/0x1ba0 [ 913.170753][ C0] process_one_work+0x9c5/0x1ba0 [ 913.170781][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 913.170806][ C0] ? __pfx_process_one_work+0x10/0x10 [ 913.170835][ C0] ? assign_work+0x1a0/0x250 [ 913.170858][ C0] worker_thread+0x6c8/0xf00 [ 913.170885][ C0] ? __pfx_worker_thread+0x10/0x10 [ 913.170910][ C0] kthread+0x3af/0x750 [ 913.170931][ C0] ? __pfx_kthread+0x10/0x10 [ 913.170953][ C0] ? lock_acquire+0x2f/0xb0 [ 913.170978][ C0] ? __pfx_kthread+0x10/0x10 [ 913.171000][ C0] ret_from_fork+0x45/0x80 [ 913.171023][ C0] ? __pfx_kthread+0x10/0x10 [ 913.171045][ C0] ret_from_fork_asm+0x1a/0x30 [ 913.171071][ C0] [ 913.499417][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 913.506284][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 913.516782][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 913.526842][ T30] Call Trace: [ 913.530119][ T30] [ 913.533044][ T30] dump_stack_lvl+0x3d/0x1f0 [ 913.537639][ T30] panic+0x71d/0x800 [ 913.541540][ T30] ? __pfx_panic+0x10/0x10 [ 913.545958][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 913.551341][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 913.557325][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 913.562703][ T30] ? watchdog+0xdcc/0x12b0 [ 913.567141][ T30] ? watchdog+0xdbf/0x12b0 [ 913.571576][ T30] watchdog+0xddd/0x12b0 [ 913.575832][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.580518][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 913.585726][ T30] ? __kthread_parkme+0x148/0x220 [ 913.590754][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.595437][ T30] kthread+0x3af/0x750 [ 913.599501][ T30] ? __pfx_kthread+0x10/0x10 [ 913.604085][ T30] ? __pfx_kthread+0x10/0x10 [ 913.608660][ T30] ret_from_fork+0x45/0x80 [ 913.613064][ T30] ? __pfx_kthread+0x10/0x10 [ 913.617642][ T30] ret_from_fork_asm+0x1a/0x30 [ 913.622399][ T30] [ 913.625592][ T30] Kernel Offset: disabled [ 913.629896][ T30] Rebooting in 86400 seconds..