last executing test programs: 1m37.007930807s ago: executing program 0 (id=2965): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x75, 0x6}, {0x3, 0xb3d, 0x1}, {0x1, 0x2, 0x2}, {0x2, 0x9, 0x80000000}, {0x3, 0x7f, 0x7}], "8e92"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0xe, 0x5}, {0xa, 0x4}]}, @volatile={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/168, 0x117, 0xa8, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r2, r3, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x6, 0xfffff001, 0x80, 0x200, r5, 0xf7c3, '\x00', r2, r7, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "df4c26f37e9339cb", "e093298983089d4a21535c9a5c4911eb", "98869f09", "124490ba92c902fd"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tgkill(0x0, 0x0, 0x2) r9 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7fffffff, 0x40) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 1m16.449907936s ago: executing program 0 (id=2965): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x75, 0x6}, {0x3, 0xb3d, 0x1}, {0x1, 0x2, 0x2}, {0x2, 0x9, 0x80000000}, {0x3, 0x7f, 0x7}], "8e92"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0xe, 0x5}, {0xa, 0x4}]}, @volatile={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/168, 0x117, 0xa8, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r2, r3, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x6, 0xfffff001, 0x80, 0x200, r5, 0xf7c3, '\x00', r2, r7, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "df4c26f37e9339cb", "e093298983089d4a21535c9a5c4911eb", "98869f09", "124490ba92c902fd"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tgkill(0x0, 0x0, 0x2) r9 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7fffffff, 0x40) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 1m5.546639857s ago: executing program 3 (id=3221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="e7ff0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x1000000, 0x0, 0x40000}, 0x4080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd04d94dca5653aad}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xd8}, 0x40010) 53.313045435s ago: executing program 0 (id=2965): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x75, 0x6}, {0x3, 0xb3d, 0x1}, {0x1, 0x2, 0x2}, {0x2, 0x9, 0x80000000}, {0x3, 0x7f, 0x7}], "8e92"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0xe, 0x5}, {0xa, 0x4}]}, @volatile={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/168, 0x117, 0xa8, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r2, r3, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x6, 0xfffff001, 0x80, 0x200, r5, 0xf7c3, '\x00', r2, r7, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "df4c26f37e9339cb", "e093298983089d4a21535c9a5c4911eb", "98869f09", "124490ba92c902fd"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tgkill(0x0, 0x0, 0x2) r9 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7fffffff, 0x40) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 48.275064909s ago: executing program 3 (id=3221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="e7ff0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x1000000, 0x0, 0x40000}, 0x4080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd04d94dca5653aad}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250100000008000200020000002c010c802c000b8008000900c0ef162f08000900e532c476080009001e93810b08000900dffde75608000a00ef3400000c000b800800090011a1e5092c000b80080009005773187408000900bd08126408000a00c267000008000a00fef1000008000a00a65d000024000b800800090002f1dc7008000a0077840000080009004eab253b08000a0059c6000014000b8008000a009a70000008000a0026b300000c000b8008000a0027dd000034000b8008000900fa3f6d1b08000a000acc000008000900cddb084e080009006932e75908000a0042ee000008000a00633100004c000b8008000a00f882000008000a00a60e000008000a00621e0000080009004018234708000a00e2cc000008dfb123dbcd071d07000a00cced000008000900130316630800090091df8435"], 0x148}, 0x1, 0x0, 0x0, 0xd8}, 0x40010) 43.850224906s ago: executing program 3 (id=3221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="e7ff0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x1000000, 0x0, 0x40000}, 0x4080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd04d94dca5653aad}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xd8}, 0x40010) 38.483401089s ago: executing program 0 (id=2965): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x75, 0x6}, {0x3, 0xb3d, 0x1}, {0x1, 0x2, 0x2}, {0x2, 0x9, 0x80000000}, {0x3, 0x7f, 0x7}], "8e92"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0xe, 0x5}, {0xa, 0x4}]}, @volatile={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/168, 0x117, 0xa8, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r2, r3, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x6, 0xfffff001, 0x80, 0x200, r5, 0xf7c3, '\x00', r2, r7, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "df4c26f37e9339cb", "e093298983089d4a21535c9a5c4911eb", "98869f09", "124490ba92c902fd"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tgkill(0x0, 0x0, 0x2) r9 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7fffffff, 0x40) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 33.327575349s ago: executing program 3 (id=3221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="e7ff0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x1000000, 0x0, 0x40000}, 0x4080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd04d94dca5653aad}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xd8}, 0x40010) 21.707052185s ago: executing program 0 (id=2965): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x75, 0x6}, {0x3, 0xb3d, 0x1}, {0x1, 0x2, 0x2}, {0x2, 0x9, 0x80000000}, {0x3, 0x7f, 0x7}], "8e92"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0xe, 0x5}, {0xa, 0x4}]}, @volatile={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/168, 0x117, 0xa8, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r2, r3, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x6, 0xfffff001, 0x80, 0x200, r5, 0xf7c3, '\x00', r2, r7, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "df4c26f37e9339cb", "e093298983089d4a21535c9a5c4911eb", "98869f09", "124490ba92c902fd"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tgkill(0x0, 0x0, 0x2) r9 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7fffffff, 0x40) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 16.128500725s ago: executing program 3 (id=3221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="e7ff0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x1000000, 0x0, 0x40000}, 0x4080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd04d94dca5653aad}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xd8}, 0x40010) 11.017046123s ago: executing program 1 (id=3458): openat$iommufd(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r0 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 10.841170137s ago: executing program 1 (id=3459): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), 0x0, 0x35, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000014) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11032bbd7000fbdbdf2500000000140002007767320000000000000040"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) 9.887765073s ago: executing program 1 (id=3461): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x14b042, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098f", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2, &(0x7f0000006680)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000002020101000000000000083c0002802c00018014000300fe801d000000000000000000000000aa1400040000000000000000000000ffffac1414aa0c100236030000000000000000000000000000000000000000007ca3ac924533bb3cb9f733c1d7d4d4ffb67092e5d00858a3bd4056dfc3498ebd6bbcb2019eb8fedce73a15e75d4655a13828083d18c556e26ced719df2edfcabd67974772c35ea32b336c46bf9229e0a87fd9956429fabbdf2a75dc3396b59472a7e2ac816e5987dc171a176f9d38fa50ea136a4f56c94b3946dbbc1de4a77464783c8d3d35428765e6cd09d973db9fe57be7b5ca3370edc4c7c4761d2113689dac0b8d1259a35b44e6d6363e007bf0dd924d05df4a0ddd1"], 0x50}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.817550604s ago: executing program 0 (id=2965): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x75, 0x6}, {0x3, 0xb3d, 0x1}, {0x1, 0x2, 0x2}, {0x2, 0x9, 0x80000000}, {0x3, 0x7f, 0x7}], "8e92"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0xe, 0x5}, {0xa, 0x4}]}, @volatile={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/168, 0x117, 0xa8, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r2, r3, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x6, 0xfffff001, 0x80, 0x200, r5, 0xf7c3, '\x00', r2, r7, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "df4c26f37e9339cb", "e093298983089d4a21535c9a5c4911eb", "98869f09", "124490ba92c902fd"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) tgkill(0x0, 0x0, 0x2) r9 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7fffffff, 0x40) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000200)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 6.996060443s ago: executing program 1 (id=3464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 6.988434101s ago: executing program 4 (id=3466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000080000000800000006"], 0x48) r5 = socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r5}, 0x20) recvfrom$rose(r5, 0x0, 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x8000000063) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r10, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r10, 0x7a6, &(0x7f00000009c0)={0x9, 0x7, 0x9, 0x4, 0x2, 0xc1e7}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x6, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc4f6afd2a00000b000000000000faffffffffffffff00e5fff67e8378dcbde7feb74f0000628b", @ANYRESDEC=r1, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000ff01000000000000000000000000000100"/204], 0x174}}, 0x20008800) ioctl$VIDIOC_G_INPUT(r8, 0x80045626, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000280)) 6.633204911s ago: executing program 1 (id=3467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010fbff0700395032303030"], 0x15) dup(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, 0xfffffffffffffffd, 0x1000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') read$FUSE(r7, &(0x7f0000001c00)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="0c009900040000006800000008006b006801000008006b006e00000008006b00b400000008006b001400000008006b00e001000008006b0014000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000080)=0x14) 3.849844929s ago: executing program 4 (id=3470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x3000000000000, 0x48001}, 0x0) 3.439099417s ago: executing program 4 (id=3471): mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0xf0ffff, 0x0) 3.375169819s ago: executing program 2 (id=3472): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = io_uring_setup(0x51b6, &(0x7f0000000300)={0x0, 0xb755, 0x10, 0x1, 0x340}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000500)={0x1, 0x1, 0x0, &(0x7f00000000c0)=[{0x0}], 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) mknod(0x0, 0x8001420, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r4, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r5) mq_open(&(0x7f0000000100)='!selinuxselinux\x00\xd1\xed\xc4\xf8\xb7\x88(\xcd@5l\x96\xbch\xbc\x7fP\xe6m\bf\x83\xc0\xcf\xbb3\x9b\xcf\x1a(\x016h\'\xf5\xd8\x80\x1f\xc8&x`\xa0\xce\x90|\\\xfa7\xb4\xda\xc5tq\xfa\xdd\xf9\xb5Z\x85\x91uz\x83\x1a\xdf h\xa1\xe8k\x0f\xcdF\xf1/\x81\xb0\x9c\xb1\\\x92\xfd0\x93\xd7<\xb9\xd8\xd6\xb9\xd9 \xd3*\x01@\x05\xa9xV\xcau\x01\xbf u@\x7fC\\\x88\xa3\xed\x19x\x1d\xf4\x10K\xc9\x80\xda\x811\x18\v\xbe\xdd5', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000000)={0x9, 0x4, 0x100, 0x10}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000003c0)=""/114) 3.3584222s ago: executing program 4 (id=3473): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x7f, 0x5, 0x84) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1d, &(0x7f00000014c0)=ANY=[@ANYBLOB="180800000f370000004a000000000000001811000057d733abebf79f8178cb4e99ff10fb8d42", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000002b32000004000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000240)='macvlan0\x00') r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r7, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) 3.086924152s ago: executing program 2 (id=3474): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80000) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffac21}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000000740)={0x28, 0x0, r4, {{0x7, 0x4000005, 0x1, r5}}}, 0x28) tgkill(0x0, r5, 0x1c) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000005e000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x306d, &(0x7f0000000300)={0x0, 0x5014, 0x20, 0x0, 0x160}, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x28, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.666227423s ago: executing program 1 (id=3475): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x14b042, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098f", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2, &(0x7f0000006680)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x50}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.624137776s ago: executing program 2 (id=3476): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000003840)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed39", 0x10}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000180)="709e369ed3085af12f3e5927d33f25f5d2af499a8fd1363f9a3471027b57c4972bce83ba8363bc9305e27d75a3d67798d55cd6b0d30ca551ae017532a1322ce053df4df9", 0x44}, {&(0x7f0000000200)="b51c1b", 0x3}, {&(0x7f0000000240)="6b443e15b95ff469a575036cd2a6396a62590524fdc298d95937e3a1937861ec56cca5565fe6a7fc1b149e9055f41b98b8f7f3cb9485730070f161fb834716746f1de5e22980ebe01141bdfdd3c192cd2b8d68a94e91c4b2a2b373585f88434783c474e0a02c2f5c756b5e5b955d320cd534af", 0x73}, {&(0x7f00000002c0)="5dc9d48737251bd248776d1138015a8099c3", 0x12}, {&(0x7f0000000380)="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", 0x1000}], 0x5, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x30}}, {{&(0x7f0000001400)={0x2, 0xd7c3, @multicast2}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000001440)="bf7a0b576d50049a6fd372a7ec65bc2da4ff9190a574dfc8ac999dd7afb033eccca2201d5dd271e1ec0b669955ec9bd852dbfe7959da79992feb9c35678c19942617290c6175f20829ae1113570a50bddf77773a5476", 0x56}, {&(0x7f00000014c0)="6cac5788a7b9d436e1148832fd2fb1a7a54d8722a52997392c09abc6c14691f4732d4fcfca96271ace062cab7a622b220178fb0c733eacd16ab53c74c9c0036bdbaef4b8a0a9e26103abdaea9f7b18020d9d431ae925b995992b443d8451d69ea7e012d1e6c56e2e3843c5ab248ce0c858e326526f79fe0017b9a62f72e4e3f64d2f500213dd8b49a6644d5a5770ab44b58e057eb66af4e568ce06e4dcac52418388996240ed4b1198717512865e", 0xae}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="3782565a8f626467d44e1e51feb6f701b95dc256715c696050539cf0b2b4571da5301ed3e4e3981d3d56e3751016a8db3c12be907d6a2e2e452103ad478dd49ae0f03753424a054edc9789a9f38e8af0fd1888859b71223487157ab89458e93b0f17ff7d1a82fbdcae1edb769457c4b5cd9931a1f47e59ab17c929ea1f72a307204f05376a1205ae3b7e59e89cd029d4f507ab2e5b5419b1ff3d7acb4b8fb8d3a5554c", 0xa3}, {&(0x7f0000002640)="30e6f1656a78b3d67efe24a5ff2e6439471b1c96784f4e8f4a3962100afac68a9d5d151714f24daab71e18ea5fb4576346c8676bfa5a4bd81674c728a8f9400970c6612b5e1cba6ce87d3710c3b4f520eb0b018337c53700cc95227aeba18f919bea5987710ae950a4fcfe3f4c4996234a95c3c642d15ad53384f486d183b97882e185dc1330a0893e19abc670c0ee45a882c7219c32cb6fc0001e74e9cf3ebe00492fa68224bb9e80", 0xa9}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="0ad0454e4237b621d58669ec50212727ecd073a2b74b6b0e4cfe0b37497fd311004ed8fa69b0f8b25c57838a37e85140fc277b07445e636929349670877a02909938fc0c19d41f780076fa48b373e93c04995cd1950e6a08566a72a9466cf79901c9ef768585265d1d2bec87b1b63cbaaeea09b2d0", 0x75}, {&(0x7f0000003780)="ca2d580d24ec5e8973ee", 0xa}], 0x8}}], 0x3, 0x20008000) 1.51186426s ago: executing program 4 (id=3477): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (rerun: 32) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2c70493f7907efa, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0xfd201000) (async) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 64) 1.398392784s ago: executing program 2 (id=3478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 1.1267114s ago: executing program 3 (id=3221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="e7ff0000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x1000000, 0x0, 0x40000}, 0x4080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read(r4, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd04d94dca5653aad}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xd8}, 0x40010) 1.12542017s ago: executing program 2 (id=3479): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000065d0d9de6033fb26872c2e8a9d2bd7dbe43d4951393c14c0cbcfd6d8b19db756b2988e0d77118ed45f2485e70ddf20867738dbe3ab61870c52bc73a73844cdec2ecdd9112cb0f043a2ed8723b8987c196b2ad0084d3c6fba7314ad286cc67ee80dc9ca179cb5279d1964100d6e91f203ec98dd24540f6141175db2a593c06dacba853d56a39f21f589d1f05d4b2b54c7feb58c3dd192a8723a98a89a6e7c94b1c56a6c7adfa765e5278646f43662efe6d871e98473f58e49a82ff41d"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0x980902, 0x4003, @value}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141182) writev(r1, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "4da99e744786055bc2afb4a9085c9a2b"}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 446.521µs ago: executing program 2 (id=3480): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)=""/190, 0xbe}], 0x2, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000480), 0xd21, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xb44}, 0x38) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) close_range(r2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x700, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) 0s ago: executing program 4 (id=3481): socket(0x2a, 0x2, 0x0) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000caafc91f9d4aa110000000000000c00000000000000000000cf2b00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r5, 0x0) r6 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r5, 0x0, 0x0, 0x800) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x8000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x100000000000000) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r0) kernel console output (not intermixed with test programs): 0000000000000246 R12: 0000000000000001 [ 1174.414150][T17949] R13: 0000000000000000 R14: 00007f8b6d7b6160 R15: 00007ffed35674d8 [ 1174.414174][T17949] [ 1174.635119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.802837][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1174.802857][ T30] audit: type=1400 audit(1749091163.420:1943): avc: denied { create } for pid=17947 comm="syz.1.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1175.075915][ T30] audit: type=1400 audit(1749091163.680:1944): avc: denied { connect } for pid=17947 comm="syz.1.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1175.206744][T17100] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1175.257859][ T30] audit: type=1400 audit(1749091163.880:1945): avc: denied { map } for pid=17955 comm="syz.1.3098" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1175.311358][ T30] audit: type=1400 audit(1749091163.930:1946): avc: denied { create } for pid=17953 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1175.355982][ T30] audit: type=1400 audit(1749091163.950:1947): avc: denied { execute_no_trans } for pid=17953 comm="syz.3.3097" path="/601/file1" dev="tmpfs" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1175.408324][T17100] usb 5-1: device descriptor read/64, error -71 [ 1175.707266][T17100] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1175.938492][T17100] usb 5-1: device descriptor read/64, error -71 [ 1176.057112][T17100] usb usb5-port1: attempt power cycle [ 1176.068584][ T30] audit: type=1400 audit(1749091164.680:1948): avc: denied { mounton } for pid=17970 comm="syz.3.3101" path="/syzcgroup/unified/syz3" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1176.092416][ T5831] Bluetooth: hci1: command tx timeout [ 1176.111048][T17971] qnx4: no qnx4 filesystem (no root dir). [ 1176.606687][T17100] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1176.811065][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.857261][T17100] usb 5-1: device descriptor read/8, error -71 [ 1176.858384][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1177.203764][T17992] FAULT_INJECTION: forcing a failure. [ 1177.203764][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.481419][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.2.3104 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1177.481445][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1177.481455][T17992] Call Trace: [ 1177.481461][T17992] [ 1177.481468][T17992] dump_stack_lvl+0x16c/0x1f0 [ 1177.481506][T17992] should_fail_ex+0x512/0x640 [ 1177.481529][T17992] should_failslab+0xc2/0x120 [ 1177.481555][T17992] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1177.481580][T17992] ? skb_clone+0x190/0x3f0 [ 1177.481615][T17992] skb_clone+0x190/0x3f0 [ 1177.481642][T17992] netlink_deliver_tap+0xabd/0xd30 [ 1177.481667][T17992] netlink_unicast+0x6b2/0x7f0 [ 1177.481690][T17992] ? __pfx_netlink_unicast+0x10/0x10 [ 1177.481724][T17992] netlink_ack+0x696/0xb80 [ 1177.481752][T17992] netlink_rcv_skb+0x332/0x420 [ 1177.481772][T17992] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1177.481796][T17992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1177.481825][T17992] ? ns_capable+0xd7/0x110 [ 1177.481846][T17992] nfnetlink_rcv+0x1b3/0x430 [ 1177.481868][T17992] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1177.481888][T17992] ? netlink_deliver_tap+0x1ae/0xd30 [ 1177.481910][T17992] netlink_unicast+0x53d/0x7f0 [ 1177.481932][T17992] ? __pfx_netlink_unicast+0x10/0x10 [ 1177.481957][T17992] netlink_sendmsg+0x8d1/0xdd0 [ 1177.481978][T17992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1177.482005][T17992] ____sys_sendmsg+0xa98/0xc70 [ 1177.482026][T17992] ? copy_msghdr_from_user+0x10a/0x160 [ 1177.482051][T17992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1177.482083][T17992] ___sys_sendmsg+0x134/0x1d0 [ 1177.482109][T17992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.482132][T17992] ? __lock_acquire+0x622/0x1c90 [ 1177.482190][T17992] __sys_sendmsg+0x16d/0x220 [ 1177.482216][T17992] ? __pfx___sys_sendmsg+0x10/0x10 [ 1177.482259][T17992] do_syscall_64+0xcd/0x4c0 [ 1177.482277][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.482294][T17992] RIP: 0033:0x7f8b6d58e929 [ 1177.482309][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.482325][T17992] RSP: 002b:00007f8b6e36c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.482342][T17992] RAX: ffffffffffffffda RBX: 00007f8b6d7b5fa0 RCX: 00007f8b6d58e929 [ 1177.482352][T17992] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 1177.482363][T17992] RBP: 00007f8b6e36c090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.482373][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.482382][T17992] R13: 0000000000000000 R14: 00007f8b6d7b5fa0 R15: 00007ffed35674d8 [ 1177.482407][T17992] [ 1177.566915][ T30] audit: type=1400 audit(1749091166.170:1949): avc: denied { unlink } for pid=17994 comm="syz.4.3105" name="#5f" dev="tmpfs" ino=3431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1177.572147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.715930][T17920] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 1177.876247][ T30] audit: type=1400 audit(1749091166.320:1950): avc: denied { mount } for pid=17994 comm="syz.4.3105" name="/" dev="overlay" ino=3426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1178.028779][T17920] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 1178.191692][ T5831] Bluetooth: hci1: command tx timeout [ 1178.424870][ T30] audit: type=1400 audit(1749091167.030:1951): avc: denied { create } for pid=17994 comm="syz.4.3105" name="#61" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1178.491038][ T30] audit: type=1400 audit(1749091167.100:1952): avc: denied { link } for pid=17994 comm="syz.4.3105" name="#61" dev="tmpfs" ino=3435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1178.520037][T17920] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 1178.580242][T17920] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 1179.326382][T18030] trusted_key: encrypted_key: keyword 'updatͶ\ault' not recognized [ 1179.381357][T18037] qnx4: no qnx4 filesystem (no root dir). [ 1179.606708][T17100] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1179.791481][T17100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.186831][T17100] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1180.226652][T17100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.237751][ T5831] Bluetooth: hci1: command tx timeout [ 1180.289455][T17100] usb 4-1: config 0 descriptor?? [ 1180.575231][T17920] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1180.602350][T17920] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1180.806368][T17920] wireguard: wg0: Could not create IPv4 socket [ 1180.958208][T17920] wireguard: wg1: Could not create IPv4 socket [ 1181.088699][T17100] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1181.113618][T17100] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0016/input/input65 [ 1181.700162][T17920] wireguard: wg2: Could not create IPv4 socket [ 1181.968711][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1181.968727][ T30] audit: type=1400 audit(1749091170.430:1957): avc: denied { mount } for pid=18067 comm="syz.1.3120" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1182.012650][ T30] audit: type=1400 audit(1749091170.630:1958): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=3787 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1182.026863][T10705] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1182.128624][T18074] overlayfs: failed to resolve './file1': -2 [ 1182.371095][ T30] audit: type=1400 audit(1749091170.630:1959): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3787 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1182.470904][T17100] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1182.606651][ T30] audit: type=1400 audit(1749091170.630:1960): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3787 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1182.652456][T10705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.782875][T10705] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.058121][T10705] usb 5-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1183.078192][T10705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1183.109646][T10705] usb 5-1: Product: syz [ 1183.117503][T10705] usb 5-1: Manufacturer: syz [ 1183.138439][T10705] usb 5-1: SerialNumber: syz [ 1183.160527][T10705] usb 5-1: config 0 descriptor?? [ 1183.279819][T17100] usb 4-1: USB disconnect, device number 87 [ 1183.698660][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1184.439631][ T30] audit: type=1400 audit(1749091172.500:1961): avc: denied { write } for pid=18090 comm="syz.3.3125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1184.458779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.624720][T18098] FAULT_INJECTION: forcing a failure. [ 1184.624720][T18098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.645821][T10705] usb 5-1: USB disconnect, device number 80 [ 1184.668154][T18098] CPU: 1 UID: 0 PID: 18098 Comm: syz.2.3126 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1184.668181][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1184.668192][T18098] Call Trace: [ 1184.668198][T18098] [ 1184.668205][T18098] dump_stack_lvl+0x16c/0x1f0 [ 1184.668236][T18098] should_fail_ex+0x512/0x640 [ 1184.668259][T18098] _copy_from_user+0x2e/0xd0 [ 1184.668279][T18098] iommufd_fops_ioctl+0x2e7/0x4e0 [ 1184.668298][T18098] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1184.668318][T18098] ? hook_file_ioctl_common+0x145/0x410 [ 1184.668348][T18098] ? selinux_file_ioctl+0x180/0x270 [ 1184.668365][T18098] ? selinux_file_ioctl+0xb4/0x270 [ 1184.668383][T18098] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1184.668408][T18098] __x64_sys_ioctl+0x18b/0x210 [ 1184.668430][T18098] do_syscall_64+0xcd/0x4c0 [ 1184.668446][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.668464][T18098] RIP: 0033:0x7f8b6d58e929 [ 1184.668479][T18098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.668495][T18098] RSP: 002b:00007f8b6e36c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.668512][T18098] RAX: ffffffffffffffda RBX: 00007f8b6d7b5fa0 RCX: 00007f8b6d58e929 [ 1184.668524][T18098] RDX: 00002000000004c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1184.668534][T18098] RBP: 00007f8b6e36c090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.668544][T18098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.668554][T18098] R13: 0000000000000000 R14: 00007f8b6d7b5fa0 R15: 00007ffed35674d8 [ 1184.668579][T18098] [ 1184.708323][T14545] udevd[14545]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.791663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.832253][T18108] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3130'. [ 1184.846711][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1184.902822][T18112] qnx4: no qnx4 filesystem (no root dir). [ 1185.296689][T10705] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1185.636679][T10705] usb 5-1: Using ep0 maxpacket: 8 [ 1185.668455][T10705] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 1185.756070][T10705] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1185.839747][T10705] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1185.883517][ T30] audit: type=1400 audit(1749091174.490:1962): avc: denied { open } for pid=18120 comm="syz.2.3132" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1185.907221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1185.917323][T10705] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1186.003413][T10705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.134077][ T30] audit: type=1400 audit(1749091174.500:1963): avc: denied { ioctl } for pid=18120 comm="syz.2.3132" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1186.159677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1186.169878][T10705] usb 5-1: config 0 descriptor?? [ 1186.566901][T10705] usb 5-1: string descriptor 0 read error: -71 [ 1186.612038][T10705] usbhid 5-1:0.0: can't add hid device: -71 [ 1186.636891][T10705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1186.671343][T10705] usb 5-1: USB disconnect, device number 81 [ 1189.059354][T16819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1189.076911][T16819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1189.087308][T16819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1189.095237][T16819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1189.105816][T16819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1189.108485][T18164] qnx4: no qnx4 filesystem (no root dir). [ 1189.150787][T18161] Failed to initialize the IGMP autojoin socket (err -2) [ 1190.283859][ T30] audit: type=1400 audit(1749091178.900:1964): avc: denied { create } for pid=18175 comm="syz.3.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1190.345523][T18180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1190.415615][T18180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1190.534155][T18190] FAULT_INJECTION: forcing a failure. [ 1190.534155][T18190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.593643][T18190] CPU: 0 UID: 0 PID: 18190 Comm: syz.4.3145 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1190.593669][T18190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1190.593680][T18190] Call Trace: [ 1190.593686][T18190] [ 1190.593693][T18190] dump_stack_lvl+0x16c/0x1f0 [ 1190.593723][T18190] should_fail_ex+0x512/0x640 [ 1190.593746][T18190] _copy_to_user+0x32/0xd0 [ 1190.593767][T18190] simple_read_from_buffer+0xcb/0x170 [ 1190.593793][T18190] proc_fail_nth_read+0x197/0x270 [ 1190.593816][T18190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1190.593840][T18190] ? rw_verify_area+0xcf/0x680 [ 1190.593860][T18190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1190.593881][T18190] vfs_read+0x1e4/0xc60 [ 1190.593906][T18190] ? __pfx___mutex_lock+0x10/0x10 [ 1190.593922][T18190] ? __pfx_vfs_read+0x10/0x10 [ 1190.593951][T18190] ? __fget_files+0x20e/0x3c0 [ 1190.593982][T18190] ksys_read+0x12a/0x250 [ 1190.594003][T18190] ? __pfx_ksys_read+0x10/0x10 [ 1190.594025][T18190] ? fput+0x70/0xf0 [ 1190.594044][T18190] do_syscall_64+0xcd/0x4c0 [ 1190.594062][T18190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.594080][T18190] RIP: 0033:0x7f8433b8d33c [ 1190.594094][T18190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1190.594111][T18190] RSP: 002b:00007f84319f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1190.594127][T18190] RAX: ffffffffffffffda RBX: 00007f8433db5fa0 RCX: 00007f8433b8d33c [ 1190.594139][T18190] RDX: 000000000000000f RSI: 00007f84319f60a0 RDI: 0000000000000004 [ 1190.594148][T18190] RBP: 00007f84319f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.594159][T18190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.594168][T18190] R13: 0000000000000000 R14: 00007f8433db5fa0 R15: 00007ffc9c611288 [ 1190.594193][T18190] [ 1190.780757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.068136][ T30] audit: type=1400 audit(1749091179.690:1965): avc: denied { write } for pid=18203 comm="syz.4.3149" path="socket:[67716]" dev="sockfs" ino=67716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1191.068244][T18204] Bluetooth: MGMT ver 1.23 [ 1191.092016][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.201085][T16819] Bluetooth: hci1: command tx timeout [ 1191.267337][ T5856] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1191.489122][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 1191.499507][T18215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1191.505059][ T5856] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1191.519136][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1191.605299][T18214] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3151'. [ 1191.620123][ T5856] usb 2-1: config 179 has no interface number 0 [ 1191.627005][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1191.682358][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 1191.728818][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1191.827813][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1191.897781][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1191.956155][ T5856] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1192.010643][ T5856] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1192.027502][T18222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1192.053683][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1192.068815][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.151472][T18201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1192.861797][T15256] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1193.027344][T15256] usb 5-1: Using ep0 maxpacket: 8 [ 1193.039440][T15256] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1193.290705][T16819] Bluetooth: hci1: command tx timeout [ 1193.394082][T15256] usb 5-1: config 179 has no interface number 0 [ 1193.410678][T15256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1193.456469][T15256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1193.495737][T15256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1193.532517][T15256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1193.585352][T15256] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1193.634694][T18161] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 1193.645394][T15256] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1193.655651][T15256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.683319][T18228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1193.714520][T18161] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 1193.789415][T18161] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 1193.797246][T17100] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1193.909993][T18161] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 1193.984458][T17100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.013860][T18246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1194.033521][T17100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.083646][T17100] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1194.120746][T17100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.178825][T17100] usb 3-1: config 0 descriptor?? [ 1195.265927][ T30] audit: type=1400 audit(1749091183.250:1966): avc: denied { write } for pid=18250 comm="syz.3.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1195.356929][T16819] Bluetooth: hci1: command tx timeout [ 1195.753595][ T30] audit: type=1400 audit(1749091184.360:1967): avc: denied { read } for pid=18236 comm="syz.2.3155" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1195.776995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1195.802887][T18237] 9pnet_fd: Insufficient options for proto=fd [ 1195.821743][ T5856] usb 2-1: USB disconnect, device number 59 [ 1195.827746][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1195.827792][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1195.943786][ T30] audit: type=1400 audit(1749091184.360:1968): avc: denied { open } for pid=18236 comm="syz.2.3155" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1196.105628][T17100] usbhid 3-1:0.0: can't add hid device: -71 [ 1196.131429][ T30] audit: type=1400 audit(1749091184.680:1969): avc: denied { create } for pid=18236 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1196.151346][T17100] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1196.160241][ T30] audit: type=1400 audit(1749091184.690:1970): avc: denied { write } for pid=18236 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1196.189585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.206100][T17100] usb 3-1: USB disconnect, device number 61 [ 1197.076691][T10392] usb 5-1: USB disconnect, device number 82 [ 1197.077058][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1197.090985][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1197.518156][T16819] Bluetooth: hci1: command tx timeout [ 1197.529590][ T30] audit: type=1800 audit(1749091186.130:1971): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3162" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1197.615075][T18292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1198.091737][T18161] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1198.314216][T18161] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1198.797755][ T30] audit: type=1400 audit(1749091187.030:1972): avc: denied { write } for pid=18296 comm="syz.2.3164" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1198.838945][T18161] wireguard: wg0: Could not create IPv4 socket [ 1198.845150][T18307] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1198.845247][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1198.885596][T18161] wireguard: wg1: Could not create IPv4 socket [ 1198.907834][ T30] audit: type=1400 audit(1749091187.530:1973): avc: denied { map } for pid=18300 comm="syz.1.3166" path="socket:[68895]" dev="sockfs" ino=68895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.011636][T18313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.249934][ T30] audit: type=1400 audit(1749091187.530:1974): avc: denied { read } for pid=18300 comm="syz.1.3166" path="socket:[68895]" dev="sockfs" ino=68895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.268422][T18161] wireguard: wg2: Could not create IPv4 socket [ 1199.273692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.406242][ T5868] hid (null): unknown global tag 0xd [ 1199.407356][T18323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1199.421981][ T5868] hid (null): unknown global tag 0xc [ 1199.425270][T18323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1199.489601][ T5868] hid-generic 3307:FFFFFFFF:0401.0017: collection stack underflow [ 1199.517223][ T5868] hid-generic 3307:FFFFFFFF:0401.0017: item 0 0 0 12 parsing failed [ 1199.549738][ T5868] hid-generic 3307:FFFFFFFF:0401.0017: probe with driver hid-generic failed with error -22 [ 1199.688570][T17100] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1199.846680][T17100] usb 3-1: Using ep0 maxpacket: 32 [ 1199.861338][T17100] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 1199.916400][ T30] audit: type=1400 audit(1749091188.520:1975): avc: denied { ioctl } for pid=18331 comm="syz.3.3171" path="/dev/sg0" dev="devtmpfs" ino=763 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1199.941915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.982692][T17100] usb 3-1: config 1 has no interface number 0 [ 1200.124625][T17100] usb 3-1: config 1 interface 242 has no altsetting 0 [ 1200.161169][T17100] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1200.171809][T17100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.181171][T17100] usb 3-1: Product: syz [ 1200.189376][T17100] usb 3-1: Manufacturer: syz [ 1200.195380][T17100] usb 3-1: SerialNumber: syz [ 1201.565165][ T30] audit: type=1400 audit(1749091189.540:1976): avc: denied { read write } for pid=18349 comm="syz.3.3175" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1201.565221][ T30] audit: type=1400 audit(1749091189.540:1977): avc: denied { open } for pid=18349 comm="syz.3.3175" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1201.565263][ T30] audit: type=1400 audit(1749091189.550:1978): avc: denied { setopt } for pid=18349 comm="syz.3.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1201.845862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.877222][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.836960][T17100] aqc111 3-1:1.242: probe with driver aqc111 failed with error -22 [ 1202.899861][T17100] usb 3-1: USB disconnect, device number 62 [ 1204.053358][T18377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1205.028723][ T30] audit: type=1400 audit(1749091193.650:1979): avc: denied { create } for pid=18385 comm="syz.4.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1207.276647][ T5856] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1207.509204][ T5856] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1207.518826][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.296196][ T5856] usb 2-1: config 0 descriptor?? [ 1208.410229][ T5856] usb 2-1: can't set config #0, error -71 [ 1208.453867][ T5856] usb 2-1: USB disconnect, device number 61 [ 1209.063926][ T30] audit: type=1400 audit(1749091197.680:1980): avc: denied { bind } for pid=18442 comm="syz.2.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1209.177765][T18444] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1209.186992][T18444] SELinux: failed to load policy [ 1209.315561][T18448] SELinux: ebitmap: truncated map [ 1209.353400][T18448] SELinux: failed to load policy [ 1209.783508][T11785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1209.806345][T11785] Bluetooth: hci0: command 0x0406 tx timeout [ 1209.910085][T18447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1209.939573][T18447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1210.057260][T16819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1210.064906][T16819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1210.143011][T18445] Failed to initialize the IGMP autojoin socket (err -2) [ 1210.670585][ T30] audit: type=1400 audit(1749091199.290:1981): avc: denied { read } for pid=18458 comm="syz.4.3194" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1210.694954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.350149][ T30] audit: type=1400 audit(1749091199.320:1982): avc: denied { open } for pid=18458 comm="syz.4.3194" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1211.374969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.675008][ T30] audit: type=1400 audit(1749091200.290:1983): avc: denied { mount } for pid=18475 comm="syz.1.3197" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1211.706104][T18479] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 1211.755696][ T30] audit: type=1400 audit(1749091200.320:1984): avc: denied { mounton } for pid=18475 comm="syz.1.3197" path="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1212.157132][ T5831] Bluetooth: hci1: command tx timeout [ 1212.452329][T18468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.552900][T18468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.647904][T10392] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1212.720730][T18468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.816992][T10392] usb 4-1: Using ep0 maxpacket: 16 [ 1212.835503][T10392] usb 4-1: config 1 interface 0 altsetting 162 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.856521][T18468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.885200][T18505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1212.935105][T18468] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.950046][T18468] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.962519][T18468] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.974982][T18468] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.049191][T10392] usb 4-1: config 1 interface 0 altsetting 162 bulk endpoint 0x82 has invalid maxpacket 8 [ 1213.110516][T10392] usb 4-1: config 1 interface 0 altsetting 162 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1213.111081][T18507] FAULT_INJECTION: forcing a failure. [ 1213.111081][T18507] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.168551][ T30] audit: type=1400 audit(1749091201.790:1985): avc: denied { append } for pid=18509 comm="syz.4.3202" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1213.176723][T10392] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1213.192349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.222250][T18507] CPU: 0 UID: 0 PID: 18507 Comm: syz.2.3201 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1213.222277][T18507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1213.222287][T18507] Call Trace: [ 1213.222293][T18507] [ 1213.222300][T18507] dump_stack_lvl+0x16c/0x1f0 [ 1213.222329][T18507] should_fail_ex+0x512/0x640 [ 1213.222346][T18507] ? __kmalloc_noprof+0xbf/0x510 [ 1213.222368][T18507] ? lsm_blob_alloc+0x68/0x90 [ 1213.222387][T18507] should_failslab+0xc2/0x120 [ 1213.222410][T18507] __kmalloc_noprof+0xd2/0x510 [ 1213.222430][T18507] ? __might_fault+0x13b/0x190 [ 1213.222457][T18507] lsm_blob_alloc+0x68/0x90 [ 1213.222480][T18507] security_msg_msg_alloc+0x25/0x230 [ 1213.222511][T18507] load_msg+0x354/0x4a0 [ 1213.222533][T18507] do_msgsnd+0x1a7/0x17b0 [ 1213.222555][T18507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1213.222584][T18507] ? __pfx_do_msgsnd+0x10/0x10 [ 1213.222604][T18507] ? find_held_lock+0x2b/0x80 [ 1213.222622][T18507] ? __might_fault+0xe3/0x190 [ 1213.222641][T18507] ? __might_fault+0xe3/0x190 [ 1213.222660][T18507] ? __might_fault+0x13b/0x190 [ 1213.222684][T18507] ? __x64_sys_msgsnd+0xe5/0x130 [ 1213.222702][T18507] __x64_sys_msgsnd+0xe5/0x130 [ 1213.222725][T18507] do_syscall_64+0xcd/0x4c0 [ 1213.222741][T18507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.222757][T18507] RIP: 0033:0x7f8b6d58e929 [ 1213.222771][T18507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.222786][T18507] RSP: 002b:00007f8b6e36c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 1213.222802][T18507] RAX: ffffffffffffffda RBX: 00007f8b6d7b5fa0 RCX: 00007f8b6d58e929 [ 1213.222812][T18507] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 1213.222822][T18507] RBP: 00007f8b6e36c090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.222831][T18507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.222839][T18507] R13: 0000000000000000 R14: 00007f8b6d7b5fa0 R15: 00007ffed35674d8 [ 1213.222860][T18507] [ 1213.430139][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.496644][T10392] usb 4-1: string descriptor 0 read error: -71 [ 1213.502951][T10392] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1213.513555][ T30] audit: type=1400 audit(1749091202.100:1986): avc: denied { connect } for pid=18509 comm="syz.4.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1213.581485][T10392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.678198][T10392] usb 4-1: can't set config #1, error -71 [ 1213.731527][T10392] usb 4-1: USB disconnect, device number 89 [ 1213.786735][ T5868] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1214.238820][ T5831] Bluetooth: hci1: command tx timeout [ 1214.469953][ T5868] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1214.488973][ T5868] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1214.544619][ T5868] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1214.575025][ T5868] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1214.659272][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.717571][T10392] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1214.750984][T18510] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1214.764024][ T5868] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1214.898317][T10392] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1214.946947][T17100] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1214.958266][T10392] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1214.990314][T10392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1215.024491][T10392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1215.066530][T10392] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1215.115160][T17100] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.130122][ T5868] usb 5-1: USB disconnect, device number 83 [ 1215.144517][T17100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1215.149232][T10392] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1215.185726][T17100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1215.216981][T17100] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1215.231081][T17100] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1215.237024][T10392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.241627][T17100] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1215.257485][T17100] usb 3-1: Manufacturer: syz [ 1215.289912][T10392] usb 4-1: Product: syz [ 1215.295820][T17100] usb 3-1: config 0 descriptor?? [ 1215.313964][T10392] usb 4-1: Manufacturer: syz [ 1215.343250][T10392] usb 4-1: SerialNumber: syz [ 1215.412181][T10392] usb 4-1: config 0 descriptor?? [ 1215.440334][T10392] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input66 [ 1215.650436][ T10] usb 4-1: USB disconnect, device number 90 [ 1215.858509][T18445] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 1215.962146][T18445] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 1215.984688][T18544] input: syz1 as /devices/virtual/input/input68 [ 1216.096690][T17100] rc_core: IR keymap rc-hauppauge not found [ 1216.316681][ T5831] Bluetooth: hci1: command tx timeout [ 1216.376838][T18445] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 1217.336691][T17100] Registered IR keymap rc-empty [ 1217.341758][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1217.776913][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1218.110328][T17100] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1218.257059][T18556] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1218.408175][ T5831] Bluetooth: hci1: command tx timeout [ 1218.451409][T17100] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input67 [ 1218.476664][T18445] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 1218.520773][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1218.556977][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1218.594719][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1218.650131][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1218.700783][ T30] audit: type=1400 audit(1749091207.310:1987): avc: denied { setopt } for pid=18560 comm="syz.1.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1218.726808][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1218.842536][ T30] audit: type=1400 audit(1749091207.350:1988): avc: denied { read } for pid=18562 comm="syz.3.3211" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1218.848875][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1219.012308][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1219.021288][T18567] netlink: 'syz.3.3211': attribute type 5 has an invalid length. [ 1219.029054][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1219.306653][ T30] audit: type=1400 audit(1749091207.350:1989): avc: denied { open } for pid=18562 comm="syz.3.3211" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1219.337855][T18569] 9pnet_fd: Insufficient options for proto=fd [ 1219.354838][ T30] audit: type=1400 audit(1749091207.500:1990): avc: denied { bind } for pid=18560 comm="syz.1.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1219.374468][T18567] geneve3: entered promiscuous mode [ 1219.380152][T18567] geneve3: entered allmulticast mode [ 1219.387814][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1219.396506][ T30] audit: type=1400 audit(1749091207.960:1991): avc: denied { write } for pid=18560 comm="syz.1.3210" path="socket:[69630]" dev="sockfs" ino=69630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1219.423282][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1219.462110][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1219.497945][T17100] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1219.683662][T17100] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1219.691877][T17100] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1219.912132][T17100] usb 3-1: USB disconnect, device number 63 [ 1220.215739][ T30] audit: type=1400 audit(1749091208.830:1992): avc: denied { create } for pid=18580 comm="syz.3.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1220.525233][ T30] audit: type=1400 audit(1749091209.130:1993): avc: denied { write } for pid=18580 comm="syz.3.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1221.900277][T18602] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1221.933613][T18445] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1222.484802][T18445] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1222.520608][ T30] audit: type=1400 audit(1749091211.130:1994): avc: denied { bind } for pid=18601 comm="syz.3.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1222.540692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.566011][T18445] wireguard: wg0: Could not create IPv4 socket [ 1222.600947][T18445] wireguard: wg1: Could not create IPv4 socket [ 1222.679767][T18445] wireguard: wg2: Could not create IPv4 socket [ 1222.977957][ T30] audit: type=1400 audit(1749091211.600:1995): avc: denied { read } for pid=18619 comm="syz.4.3220" path="socket:[68472]" dev="sockfs" ino=68472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1222.978907][T18620] tmpfs: Unknown parameter 'opol5:E' [ 1223.074203][T18623] loop6: detected capacity change from 0 to 524287999 [ 1223.133562][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.166336][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.176167][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.186325][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.205266][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.223784][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.243330][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.269603][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.287327][T17103] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1223.289157][T18623] ldm_validate_partition_table(): Disk read failed. [ 1223.322176][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.342453][T18623] Buffer I/O error on dev loop6, logical block 0, async page read [ 1223.379441][T18623] Dev loop6: unable to read RDB block 0 [ 1223.385483][T18623] loop6: unable to read partition table [ 1223.419657][T18623] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1223.468507][T17103] usb 2-1: Using ep0 maxpacket: 16 [ 1223.492172][T17103] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1223.525710][T17103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1223.565245][T17103] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1223.591636][T17103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.626637][T17103] usb 2-1: Product: syz [ 1223.643298][T17103] usb 2-1: Manufacturer: syz [ 1223.664284][T18447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1223.675717][T18447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1223.686837][T18447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1223.700690][T18447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1223.710750][T17103] usb 2-1: SerialNumber: syz [ 1223.715629][T18447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1223.741825][T17103] usb 2-1: config 0 descriptor?? [ 1223.766916][T17103] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1223.777147][T17103] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1223.783955][T18632] Failed to initialize the IGMP autojoin socket (err -2) [ 1224.090419][ T1320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.193563][ T1320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.301382][ T1320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.365052][T17103] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1224.375885][T17103] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1225.034255][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1225.046242][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1225.055230][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1225.064854][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1225.072924][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1225.112713][T18662] Failed to initialize the IGMP autojoin socket (err -2) [ 1225.132658][T17103] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1225.626805][T17103] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 1225.717904][ T30] audit: type=1400 audit(1749091214.320:1996): avc: denied { relabelfrom } for pid=18662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1225.738020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.755335][T17103] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1225.757289][T18447] Bluetooth: hci1: command tx timeout [ 1225.790842][ T30] audit: type=1400 audit(1749091214.320:1997): avc: denied { relabelto } for pid=18662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1225.843212][ T1320] macvlan0: left allmulticast mode [ 1225.848896][ T1320] team0: left allmulticast mode [ 1225.854018][ T1320] team_slave_0: left allmulticast mode [ 1225.862775][ T1320] team_slave_1: left allmulticast mode [ 1225.895602][ T1320] macvlan0: left promiscuous mode [ 1225.932411][ T1320] bridge0: port 3(macvlan0) entered disabled state [ 1225.949772][T17103] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 1225.967711][T17103] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1225.983450][ T1320] bridge_slave_1: left allmulticast mode [ 1225.989858][ T1320] bridge_slave_1: left promiscuous mode [ 1225.995479][T17103] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1225.999753][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.009272][T17103] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1226.021848][T17103] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1226.335854][T17103] usb 2-1: USB disconnect, device number 62 [ 1226.537673][ T1320] bridge_slave_0: left allmulticast mode [ 1226.543434][ T1320] bridge_slave_0: left promiscuous mode [ 1226.551256][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.690153][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.702493][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.715536][ T1320] bond0 (unregistering): Released all slaves [ 1227.844208][T18447] Bluetooth: hci1: command tx timeout [ 1227.875934][ T1320] bond1 (unregistering): Released all slaves [ 1227.893900][ T1320] bond2 (unregistering): Released all slaves [ 1228.305434][ T1320] bond3 (unregistering): (slave vlan0): Releasing active interface [ 1228.383418][ T1320] bond3 (unregistering): Released all slaves [ 1229.761025][ T1320] hsr_slave_0: left promiscuous mode [ 1229.769513][ T1320] hsr_slave_1: left promiscuous mode [ 1229.775395][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.793010][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.801015][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.811069][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.833925][ T1320] veth1_macvtap: left promiscuous mode [ 1229.839617][ T1320] veth0_macvtap: left promiscuous mode [ 1229.916723][T18447] Bluetooth: hci1: command tx timeout [ 1230.258909][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1230.536918][T17100] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1230.706675][T17100] usb 3-1: Using ep0 maxpacket: 8 [ 1230.713452][T17100] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1230.722078][T17100] usb 3-1: config 179 has no interface number 0 [ 1230.739571][T17100] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1230.753441][T17100] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1230.809354][T17100] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1230.852771][T17100] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1230.872311][T17100] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1230.885760][T17100] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1230.894948][T17100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.934786][T18742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1231.007069][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1231.017226][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1231.033838][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1231.042994][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1231.051312][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1232.026813][ T5831] Bluetooth: hci1: command tx timeout [ 1232.642361][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 1232.723789][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 1232.752513][ T54] smc: removing ib device syz! [ 1232.886701][T15143] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1233.050353][T15143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.062782][T15143] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1233.072804][T15143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.085990][T15143] usb 5-1: config 0 descriptor?? [ 1233.325040][T15143] usbhid 5-1:0.0: can't add hid device: -71 [ 1233.354974][T15143] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1233.401452][T15143] usb 5-1: USB disconnect, device number 84 [ 1233.674806][T15143] usb 3-1: USB disconnect, device number 64 [ 1233.674818][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1233.674977][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1233.838151][ T5831] Bluetooth: hci4: command tx timeout [ 1233.889065][T18745] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1233.890523][T18746] unknown channel width for channel at 909000KHz? [ 1233.895871][T18757] Failed to initialize the IGMP autojoin socket (err -2) [ 1233.948353][T18746] unknown channel width for channel at 909000KHz? [ 1234.292490][ T30] audit: type=1400 audit(1749091222.890:1998): avc: denied { write } for pid=18802 comm="syz.1.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1234.312223][T15143] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1235.376579][T15143] usb 3-1: Using ep0 maxpacket: 8 [ 1235.395391][T15143] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1235.414437][T15143] usb 3-1: config 179 has no interface number 0 [ 1235.424314][T15143] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1235.534609][ T30] audit: type=1400 audit(1749091224.080:1999): avc: denied { create } for pid=18812 comm="syz.4.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1235.659004][T15143] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1235.829974][T15143] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1235.874247][T15143] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1235.969259][T15143] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1235.999333][T15143] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1236.013689][T15143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.169163][T18800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1236.520125][T18632] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1236.829203][ T1320] IPVS: stop unused estimator thread 0... [ 1236.839146][T18632] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1237.304344][T18632] wireguard: wg0: Could not create IPv4 socket [ 1237.328016][T18632] wireguard: wg1: Could not create IPv4 socket [ 1237.350988][T18632] wireguard: wg2: Could not create IPv4 socket [ 1237.925547][T18860] FAULT_INJECTION: forcing a failure. [ 1237.925547][T18860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.968880][T18447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1237.979068][T18447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1237.989052][T18447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1237.993436][T18860] CPU: 1 UID: 0 PID: 18860 Comm: syz.1.3241 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1237.993460][T18860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1237.993469][T18860] Call Trace: [ 1237.993474][T18860] [ 1237.993480][T18860] dump_stack_lvl+0x16c/0x1f0 [ 1237.993512][T18860] should_fail_ex+0x512/0x640 [ 1237.993531][T18860] _copy_from_iter+0x29f/0x16f0 [ 1237.993550][T18860] ? __alloc_skb+0x200/0x380 [ 1237.993572][T18860] ? __pfx__copy_from_iter+0x10/0x10 [ 1237.993591][T18860] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1237.993615][T18860] netlink_sendmsg+0x829/0xdd0 [ 1237.993636][T18860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.993661][T18860] ____sys_sendmsg+0xa98/0xc70 [ 1237.993680][T18860] ? copy_msghdr_from_user+0x10a/0x160 [ 1237.993702][T18860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.993730][T18860] ___sys_sendmsg+0x134/0x1d0 [ 1237.993753][T18860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.993773][T18860] ? __lock_acquire+0x622/0x1c90 [ 1237.993824][T18860] __sys_sendmsg+0x16d/0x220 [ 1237.993846][T18860] ? __pfx___sys_sendmsg+0x10/0x10 [ 1237.993883][T18860] do_syscall_64+0xcd/0x4c0 [ 1237.993899][T18860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.993915][T18860] RIP: 0033:0x7fe8def8e929 [ 1237.993929][T18860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.993943][T18860] RSP: 002b:00007fe8dfe2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.993958][T18860] RAX: ffffffffffffffda RBX: 00007fe8df1b5fa0 RCX: 00007fe8def8e929 [ 1237.993969][T18860] RDX: 0000000040000044 RSI: 0000200000000180 RDI: 0000000000000003 [ 1237.993978][T18860] RBP: 00007fe8dfe2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.993987][T18860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.993996][T18860] R13: 0000000000000000 R14: 00007fe8df1b5fa0 R15: 00007ffc200ab048 [ 1237.994021][T18860] [ 1238.139319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.201431][T18447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.210078][T18447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.244277][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.250370][T18861] Failed to initialize the IGMP autojoin socket (err -2) [ 1239.335807][ T5900] usb 3-1: USB disconnect, device number 65 [ 1239.341824][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1239.341865][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1240.316959][T18447] Bluetooth: hci1: command tx timeout [ 1241.314116][T18892] random: crng reseeded on system resumption [ 1241.348289][ T30] audit: type=1400 audit(1749091229.930:2000): avc: denied { append } for pid=18881 comm="syz.2.3244" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1241.575891][ T30] audit: type=1400 audit(1749091229.930:2001): avc: denied { open } for pid=18881 comm="syz.2.3244" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1241.599911][ T30] audit: type=1400 audit(1749091230.070:2002): avc: denied { ioctl } for pid=18881 comm="syz.2.3244" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1241.625163][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.176866][ T5900] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1242.347124][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 1242.381027][ T5900] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1242.403561][T18447] Bluetooth: hci1: command tx timeout [ 1242.417631][ T5900] usb 5-1: config 179 has no interface number 0 [ 1242.429374][T18902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3248'. [ 1242.461082][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1242.535544][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1242.584759][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1242.623216][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1242.667045][ T5900] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1242.703282][ T5900] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1242.717366][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.753267][T18899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1244.725015][T18447] Bluetooth: hci1: command tx timeout [ 1244.796832][ T30] audit: type=1400 audit(1749091232.690:2003): avc: denied { ioctl } for pid=18922 comm="syz.2.3250" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1244.847816][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.859507][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.867796][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1244.888831][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1244.913045][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1245.053413][T10392] usb 5-1: USB disconnect, device number 85 [ 1245.059424][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1245.059474][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1245.408752][T18932] Failed to initialize the IGMP autojoin socket (err -2) [ 1245.417410][T18861] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1245.487504][T18861] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1245.781880][T18861] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1245.801348][T18861] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1245.842883][T18929] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1245.850683][T18929] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1245.858900][T18929] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1245.866621][T18929] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1246.126100][T18953] qnx4: no qnx4 filesystem (no root dir). [ 1246.396729][T10392] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1246.688677][T10392] usb 2-1: Using ep0 maxpacket: 8 [ 1246.766246][T10392] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1246.805865][T18447] Bluetooth: hci1: command tx timeout [ 1246.882718][T10392] usb 2-1: config 179 has no interface number 0 [ 1246.951134][T10392] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1247.020248][T10392] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1247.055855][T10392] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1247.101216][T10392] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1247.140997][T10392] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1247.238578][T10392] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1247.463064][T10392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.477776][T18954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1247.793867][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1248.771011][T18979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.929010][T18861] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1249.107737][T18861] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1249.342748][T18861] wireguard: wg0: Could not create IPv4 socket [ 1249.433171][T18861] wireguard: wg1: Could not create IPv4 socket [ 1249.474656][T18861] wireguard: wg2: Could not create IPv4 socket [ 1249.743930][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1249.755448][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1249.769081][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1249.779573][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1249.787508][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1250.076756][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1250.085072][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1250.093720][T10392] usb 2-1: USB disconnect, device number 63 [ 1250.367251][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 1250.450607][T18991] Failed to initialize the IGMP autojoin socket (err -2) [ 1251.388140][T19025] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1251.836695][T18447] Bluetooth: hci4: command tx timeout [ 1252.563062][T18991] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1252.746607][T18991] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1252.790189][T18991] wireguard: wg0: Could not create IPv4 socket [ 1253.251166][ T30] audit: type=1400 audit(1749091241.470:2004): avc: denied { sqpoll } for pid=19051 comm="syz.4.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1253.269953][T19058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1253.304119][T18991] wireguard: wg1: Could not create IPv4 socket [ 1253.894090][T18991] wireguard: wg2: Could not create IPv4 socket [ 1253.927008][T18447] Bluetooth: hci4: command tx timeout [ 1255.017561][T19060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1255.188945][T19082] netlink: 'syz.2.3276': attribute type 1 has an invalid length. [ 1255.216814][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 1255.381767][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1255.397023][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1255.409329][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1255.927204][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1255.935641][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.234401][T19086] Failed to initialize the IGMP autojoin socket (err -2) [ 1256.250473][T19099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3278'. [ 1257.598243][T19118] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1258.015304][T19126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3282'. [ 1258.053999][ T5831] Bluetooth: hci1: command tx timeout [ 1258.560980][T19137] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1258.561159][T19137] SELinux: failed to load policy [ 1258.745934][T19140] SELinux: ebitmap: truncated map [ 1258.798903][T19140] SELinux: failed to load policy [ 1260.086808][ T5831] Bluetooth: hci1: command tx timeout [ 1260.870847][T19163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.266996][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1261.394316][T19170] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1261.414538][T19086] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1261.794175][T19086] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1261.862078][T19086] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1261.923845][T19086] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1261.991737][T18447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1262.003588][T18447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1262.012950][T18447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1262.031924][T18447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1262.042225][T18447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1262.072604][T19179] Failed to initialize the IGMP autojoin socket (err -2) [ 1262.169825][T18447] Bluetooth: hci1: command tx timeout [ 1262.910011][ T30] audit: type=1400 audit(1749091251.520:2005): avc: denied { append } for pid=19187 comm="syz.4.3292" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1263.080407][ T30] audit: type=1400 audit(1749091251.690:2006): avc: denied { bind } for pid=19189 comm="syz.1.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1263.221626][T19199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1263.257135][T15143] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1263.465388][T15143] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1263.506686][T15143] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.550055][T15143] usb 5-1: config 0 has no interface number 0 [ 1263.575536][T15143] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1263.599502][T15143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.626708][T15143] usb 5-1: Product: syz [ 1263.646630][T15143] usb 5-1: Manufacturer: syz [ 1263.671482][T15143] usb 5-1: SerialNumber: syz [ 1263.691777][T15143] usb 5-1: config 0 descriptor?? [ 1263.867075][T19086] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1263.927236][T15143] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1263.935010][T15143] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 1263.946593][T19086] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1263.977837][T15143] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1263.998152][T19086] wireguard: wg0: Could not create IPv4 socket [ 1264.006676][T15143] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1264.014488][T15143] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1264.025565][T19086] wireguard: wg1: Could not create IPv4 socket [ 1264.039099][T19086] wireguard: wg2: Could not create IPv4 socket [ 1264.060746][T15143] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1264.108494][T15143] usb 5-1: USB disconnect, device number 86 [ 1264.171082][T15143] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1264.211932][T15143] keyspan 5-1:0.133: device disconnected [ 1264.236773][T18447] Bluetooth: hci1: command tx timeout [ 1265.138328][T19228] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1265.147530][T19228] SELinux: failed to load policy [ 1265.238524][T19228] SELinux: ebitmap: truncated map [ 1265.276616][T19228] SELinux: failed to load policy [ 1265.980701][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1265.989704][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1265.998295][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1266.007012][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1266.014312][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1266.628222][T19235] Failed to initialize the IGMP autojoin socket (err -2) [ 1268.078477][T18447] Bluetooth: hci1: command tx timeout [ 1268.147193][T19260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.580635][T19235] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1269.601078][T19235] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1269.620933][T19235] wireguard: wg0: Could not create IPv4 socket [ 1269.629737][T19235] wireguard: wg1: Could not create IPv4 socket [ 1269.639654][T19235] wireguard: wg2: Could not create IPv4 socket [ 1270.085517][ T30] audit: type=1400 audit(1749091258.700:2007): avc: denied { create } for pid=19317 comm="syz.4.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1270.948384][ T30] audit: type=1400 audit(1749091259.530:2008): avc: denied { setopt } for pid=19319 comm="syz.2.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1270.967950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.371054][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1271.390144][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1271.408961][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1271.419277][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1271.428923][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1271.452216][T19333] Failed to initialize the IGMP autojoin socket (err -2) [ 1272.562694][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1272.585221][ T30] audit: type=1400 audit(1749091261.170:2009): avc: denied { read } for pid=19337 comm="syz.2.3311" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1272.727123][ T30] audit: type=1400 audit(1749091261.170:2010): avc: denied { open } for pid=19337 comm="syz.2.3311" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1272.817765][ T30] audit: type=1400 audit(1749091261.180:2011): avc: denied { bind } for pid=19337 comm="syz.2.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1273.003224][T19347] /dev/nullb0: Can't open blockdev [ 1273.053919][T19351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.202663][ T30] audit: type=1400 audit(1749091261.820:2012): avc: denied { execute } for pid=19342 comm="syz.4.3312" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1273.550061][ T5831] Bluetooth: hci1: command tx timeout [ 1274.581083][ T30] audit: type=1400 audit(1749091263.200:2013): avc: denied { ioctl } for pid=19360 comm="syz.1.3318" path="socket:[74134]" dev="sockfs" ino=74134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1275.142883][ T30] audit: type=1326 audit(1749091263.760:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19360 comm="syz.1.3318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8def8e929 code=0x0 [ 1275.213954][T19369] can0: slcan on ttyS3. [ 1275.599118][ T5831] Bluetooth: hci1: command tx timeout [ 1275.604762][T19369] can0 (unregistered): slcan off ttyS3. [ 1276.299625][T19384] bond0: (slave bond_slave_0): Releasing backup interface [ 1276.343916][T19384] bond_slave_0: left promiscuous mode [ 1276.350767][ T30] audit: type=1400 audit(1749091264.960:2015): avc: denied { read } for pid=19370 comm="syz.2.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1276.370306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1277.322495][T19384] bond0: (slave bond_slave_1): Releasing backup interface [ 1277.333151][T19384] bond_slave_1: left promiscuous mode [ 1277.341885][T19384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.350501][T19384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.687721][ T5831] Bluetooth: hci1: command tx timeout [ 1278.443735][T19384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.505045][T19384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.646278][T19386] lo: entered promiscuous mode [ 1278.651515][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1278.662618][T19386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.160701][ T30] audit: type=1400 audit(1749091267.780:2016): avc: denied { getopt } for pid=19404 comm="syz.2.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1280.033782][ T5831] Bluetooth: hci1: command tx timeout [ 1280.997147][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1281.284086][T19333] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1281.319757][T19333] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1281.336853][T10392] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1281.355793][T19333] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1281.391743][T19333] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1281.498116][T10392] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 1281.520055][T10392] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1281.558330][T10392] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1281.581761][T10392] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1281.609410][T10392] usb 2-1: Manufacturer: syz [ 1281.614176][T10392] usb 2-1: SerialNumber: syz [ 1283.238351][T18447] Bluetooth: hci1: command 0x0405 tx timeout [ 1283.557884][T19421] FAULT_INJECTION: forcing a failure. [ 1283.557884][T19421] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.570790][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.1.3332 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1283.570813][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1283.570823][T19421] Call Trace: [ 1283.570829][T19421] [ 1283.570835][T19421] dump_stack_lvl+0x16c/0x1f0 [ 1283.570866][T19421] should_fail_ex+0x512/0x640 [ 1283.570882][T19421] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1283.570911][T19421] should_failslab+0xc2/0x120 [ 1283.570934][T19421] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1283.570957][T19421] ? __alloc_skb+0x2b2/0x380 [ 1283.570991][T19421] __alloc_skb+0x2b2/0x380 [ 1283.571013][T19421] ? __pfx___alloc_skb+0x10/0x10 [ 1283.571039][T19421] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1283.571063][T19421] netlink_alloc_large_skb+0x69/0x130 [ 1283.571084][T19421] netlink_sendmsg+0x6a1/0xdd0 [ 1283.571106][T19421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.571133][T19421] ____sys_sendmsg+0xa98/0xc70 [ 1283.571153][T19421] ? copy_msghdr_from_user+0x10a/0x160 [ 1283.571177][T19421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1283.571207][T19421] ___sys_sendmsg+0x134/0x1d0 [ 1283.571231][T19421] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.571252][T19421] ? __lock_acquire+0x622/0x1c90 [ 1283.571305][T19421] __sys_sendmsg+0x16d/0x220 [ 1283.571329][T19421] ? __pfx___sys_sendmsg+0x10/0x10 [ 1283.571368][T19421] do_syscall_64+0xcd/0x4c0 [ 1283.571384][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.571400][T19421] RIP: 0033:0x7fe8def8e929 [ 1283.571413][T19421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.571429][T19421] RSP: 002b:00007fe8dfe09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.571445][T19421] RAX: ffffffffffffffda RBX: 00007fe8df1b6080 RCX: 00007fe8def8e929 [ 1283.571456][T19421] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 1283.571466][T19421] RBP: 00007fe8dfe09090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.571475][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.571484][T19421] R13: 0000000000000000 R14: 00007fe8df1b6080 R15: 00007ffc200ab048 [ 1283.571506][T19421] [ 1284.718901][T10392] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1284.771289][T10392] usb 2-1: USB disconnect, device number 64 [ 1284.888908][T19333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1284.932934][T19333] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1284.973327][T19333] wireguard: wg0: Could not create IPv4 socket [ 1285.000003][T18447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1285.001248][T19333] wireguard: wg1: Could not create IPv4 socket [ 1285.015539][T18447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1285.025115][T18447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1285.028127][T19333] wireguard: wg2: Could not create IPv4 socket [ 1285.042835][T18447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.051944][T18447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1285.179636][T17103] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1285.183800][T19456] Failed to initialize the IGMP autojoin socket (err -2) [ 1285.782377][T17103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.793633][T17103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.862207][T17103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1285.875849][T17103] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1285.885559][T17103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.901164][T17103] usb 3-1: config 0 descriptor?? [ 1285.966668][ T30] audit: type=1400 audit(1749091274.580:2017): avc: denied { create } for pid=19463 comm="syz.4.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1285.986247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1286.003467][ T30] audit: type=1400 audit(1749091274.620:2018): avc: denied { ioctl } for pid=19463 comm="syz.4.3341" path="socket:[75304]" dev="sockfs" ino=75304 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1286.032671][T19465] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1286.046715][T19465] SELinux: failed to load policy [ 1286.105981][T19462] SELinux: ebitmap: truncated map [ 1286.154986][T19462] SELinux: failed to load policy [ 1286.323769][T17103] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1286.341064][T17103] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1287.270338][T19485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'. [ 1288.077289][T17103] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 1288.200606][T18447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1288.264107][T18447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1288.636150][T18447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1288.649696][T18447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1288.661615][T18447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1288.695977][T19496] Failed to initialize the IGMP autojoin socket (err -2) [ 1289.021594][T19502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1289.708518][T17100] usb 3-1: USB disconnect, device number 66 [ 1290.488460][T19516] syz.2.3348: attempt to access beyond end of device [ 1290.488460][T19516] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1290.538576][T19516] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 1290.716980][T18447] Bluetooth: hci1: command tx timeout [ 1291.304360][T19496] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1291.324754][T19496] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1291.343367][T19496] wireguard: wg0: Could not create IPv4 socket [ 1291.354528][T19496] wireguard: wg1: Could not create IPv4 socket [ 1291.385059][T19496] wireguard: wg2: Could not create IPv4 socket [ 1292.569996][ T30] audit: type=1400 audit(1749091280.950:2019): avc: denied { ioctl } for pid=19539 comm="syz.1.3349" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1294.140820][ T30] audit: type=1400 audit(1749091281.800:2020): avc: denied { shutdown } for pid=19535 comm="syz.2.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1294.420183][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1294.478357][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1294.487367][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1294.495012][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1294.502711][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1294.545054][T19556] Failed to initialize the IGMP autojoin socket (err -2) [ 1294.557506][T19561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'. [ 1294.763323][T10392] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1294.799473][T19559] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1294.808551][T19559] SELinux: failed to load policy [ 1294.841635][T19555] SELinux: ebitmap: truncated map [ 1294.854052][T19555] SELinux: failed to load policy [ 1294.940246][T10392] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 1294.948781][T10392] usb 5-1: config 252 has no interface number 0 [ 1294.958099][T10392] usb 5-1: config 252 interface 107 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 1294.987345][T10392] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1295.008740][T10392] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1295.048136][T10392] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1295.063298][T10392] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 1295.074675][T10392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.087462][T10392] usb 5-1: Product: syz [ 1295.091654][T10392] usb 5-1: Manufacturer: syz [ 1295.096318][T10392] usb 5-1: SerialNumber: syz [ 1295.268337][T10392] usbtouchscreen 5-1:252.107: probe with driver usbtouchscreen failed with error -90 [ 1296.558326][ T5831] Bluetooth: hci1: command tx timeout [ 1297.278008][T17103] usb 5-1: USB disconnect, device number 87 [ 1298.917735][ T5831] Bluetooth: hci1: command 0x041b tx timeout [ 1299.030713][ T30] audit: type=1326 audit(1749091287.650:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.054217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.216107][ T30] audit: type=1326 audit(1749091287.650:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.242881][ T30] audit: type=1326 audit(1749091287.690:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.260756][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'. [ 1299.266369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.285777][ T30] audit: type=1326 audit(1749091287.690:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.335952][ T30] audit: type=1326 audit(1749091287.690:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.360905][ T30] audit: type=1326 audit(1749091287.690:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.384364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.601114][ T30] audit: type=1326 audit(1749091287.690:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.625535][ T30] audit: type=1326 audit(1749091287.690:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1299.946431][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.143182][ T30] audit: type=1326 audit(1749091287.690:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1300.166747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.210888][ T30] audit: type=1326 audit(1749091287.690:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.4.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8433b8e929 code=0x7ffc0000 [ 1301.076635][ T5831] Bluetooth: hci1: command 0x041b tx timeout [ 1301.532440][T19556] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1301.572780][T19556] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1301.617255][T19556] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1301.656125][T19556] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1301.878969][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1302.351470][T19695] FAULT_INJECTION: forcing a failure. [ 1302.351470][T19695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.406935][T19695] CPU: 0 UID: 0 PID: 19695 Comm: syz.1.3367 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1302.406964][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1302.406975][T19695] Call Trace: [ 1302.406981][T19695] [ 1302.406988][T19695] dump_stack_lvl+0x16c/0x1f0 [ 1302.407020][T19695] should_fail_ex+0x512/0x640 [ 1302.407043][T19695] _copy_to_user+0x32/0xd0 [ 1302.407065][T19695] simple_read_from_buffer+0xcb/0x170 [ 1302.407090][T19695] proc_fail_nth_read+0x197/0x270 [ 1302.407114][T19695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1302.407136][T19695] ? rw_verify_area+0xcf/0x680 [ 1302.407156][T19695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1302.407178][T19695] vfs_read+0x1e4/0xc60 [ 1302.407204][T19695] ? __pfx___mutex_lock+0x10/0x10 [ 1302.407220][T19695] ? __pfx_vfs_read+0x10/0x10 [ 1302.407249][T19695] ? __fget_files+0x20e/0x3c0 [ 1302.407281][T19695] ksys_read+0x12a/0x250 [ 1302.407302][T19695] ? __pfx_ksys_read+0x10/0x10 [ 1302.407331][T19695] do_syscall_64+0xcd/0x4c0 [ 1302.407349][T19695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.407369][T19695] RIP: 0033:0x7fe8def8d33c [ 1302.407384][T19695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1302.407400][T19695] RSP: 002b:00007fe8dfe2a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1302.407417][T19695] RAX: ffffffffffffffda RBX: 00007fe8df1b5fa0 RCX: 00007fe8def8d33c [ 1302.407429][T19695] RDX: 000000000000000f RSI: 00007fe8dfe2a0a0 RDI: 0000000000000004 [ 1302.407440][T19695] RBP: 00007fe8dfe2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.407450][T19695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1302.407460][T19695] R13: 0000000000000000 R14: 00007fe8df1b5fa0 R15: 00007ffc200ab048 [ 1302.407485][T19695] [ 1302.597224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1302.703166][T19556] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1302.802699][T19556] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1302.834011][T19556] wireguard: wg0: Could not create IPv4 socket [ 1302.842438][T19556] wireguard: wg1: Could not create IPv4 socket [ 1303.799239][ T5831] Bluetooth: hci1: command 0x041b tx timeout [ 1303.820868][T19556] wireguard: wg2: Could not create IPv4 socket [ 1303.834447][T18447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1303.850451][T18447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1304.849702][T18447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1304.868437][T18447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1304.876137][T18447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1304.896711][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1305.049041][T19707] Failed to initialize the IGMP autojoin socket (err -2) [ 1306.972246][T18447] Bluetooth: hci4: command tx timeout [ 1309.110208][T18447] Bluetooth: hci4: command tx timeout [ 1309.323228][T19753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1310.306692][ T5900] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1310.560084][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1310.580787][ T5900] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1310.609540][ T5900] usb 2-1: config 179 has no interface number 0 [ 1310.636215][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1310.706665][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1310.730887][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1310.754049][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1310.864446][ T5900] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1310.893354][ T5900] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1310.917008][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.939199][T19764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1311.204962][T18447] Bluetooth: hci4: command tx timeout [ 1311.751036][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1311.751052][ T30] audit: type=1400 audit(1749091300.370:2067): avc: denied { remount } for pid=19765 comm="syz.4.3381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1312.205827][ T30] audit: type=1400 audit(1749091300.820:2068): avc: denied { append } for pid=19765 comm="syz.4.3381" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1312.410686][T19707] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1312.477303][T19707] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1312.524693][T19707] wireguard: wg0: Could not create IPv4 socket [ 1312.546219][T19707] wireguard: wg1: Could not create IPv4 socket [ 1312.578632][T19707] wireguard: wg2: Could not create IPv4 socket [ 1313.236059][T17103] usb 2-1: USB disconnect, device number 65 [ 1313.236072][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1313.250491][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1316.861574][T19856] bond0: (slave batadv0): Releasing backup interface [ 1316.912677][T19861] input input78: cannot allocate more than FF_MAX_EFFECTS effects [ 1316.921780][T19856] bridge_slave_0: left allmulticast mode [ 1316.929080][T19856] bridge_slave_0: left promiscuous mode [ 1316.934780][T19856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.956400][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3384'. [ 1317.011314][T19856] bridge_slave_1: left allmulticast mode [ 1317.018687][T19856] bridge_slave_1: left promiscuous mode [ 1317.030911][T19856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.062025][T19856] bond0: (slave bond_slave_0): Releasing backup interface [ 1317.093038][T19856] bond0: (slave bond_slave_1): Releasing backup interface [ 1317.145822][T19856] team0: Port device team_slave_0 removed [ 1317.146922][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1317.164867][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1317.173676][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1317.187350][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1317.189037][T19856] team0: Port device team_slave_1 removed [ 1317.201555][T19856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.202193][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1317.212170][T19856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.249911][T19856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.257696][T19856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.292682][T19859] team0: Mode changed to "loadbalance" [ 1318.408200][T19873] Failed to initialize the IGMP autojoin socket (err -2) [ 1319.162337][T19873] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1319.224869][T19873] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1319.351664][T19924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3391'. [ 1319.354862][T18447] Bluetooth: hci1: command tx timeout [ 1320.625701][T19873] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1320.832412][T19873] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1321.296084][T19943] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1321.351227][T19943] Failed to initialize the IGMP autojoin socket (err -2) [ 1321.392082][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1321.403674][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1321.418763][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1321.458068][ T5831] Bluetooth: hci1: command tx timeout [ 1321.473346][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1321.484251][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1321.859400][T19944] Failed to initialize the IGMP autojoin socket (err -2) [ 1322.168387][T19873] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1322.214220][T19873] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1322.296319][T19873] wireguard: wg0: Could not create IPv4 socket [ 1322.307147][T19873] wireguard: wg1: Could not create IPv4 socket [ 1322.322857][T19873] wireguard: wg2: Could not create IPv4 socket [ 1323.385945][T20010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.733890][ T30] audit: type=1400 audit(1749091312.350:2069): avc: denied { read } for pid=20012 comm="syz.1.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1324.690632][T16819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1324.703700][T16819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1324.713865][T16819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1324.722388][T16819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1324.731499][T16819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1324.754179][T20039] Failed to initialize the IGMP autojoin socket (err -2) [ 1325.100433][T20051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3404'. [ 1325.378409][T17100] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1325.620055][T17100] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 1325.645092][T17100] usb 5-1: config 4 has no interface number 0 [ 1325.674004][T17100] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1325.686624][T17100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.719593][T17100] usb 5-1: Product: syz [ 1325.741542][T17100] usb 5-1: Manufacturer: syz [ 1325.756375][T17100] usb 5-1: SerialNumber: syz [ 1325.773248][T20062] overlayfs: missing 'lowerdir' [ 1325.968000][T17100] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1326.116706][ T30] audit: type=1400 audit(1749091314.690:2070): avc: denied { read } for pid=20060 comm="syz.2.3405" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1326.274486][T17100] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1326.367201][ T30] audit: type=1400 audit(1749091314.700:2071): avc: denied { open } for pid=20060 comm="syz.2.3405" path="/725/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1326.426137][T17100] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1326.696699][T20063] sd 0:0:1:0: PR command failed: 1026 [ 1326.704407][T20063] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1326.713321][T20063] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1326.770460][ T30] audit: type=1400 audit(1749091314.880:2072): avc: denied { ioctl } for pid=20060 comm="syz.2.3405" path="/725/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1326.797020][ T5831] Bluetooth: hci1: command tx timeout [ 1326.851701][T17100] usb 5-1: USB disconnect, device number 88 [ 1327.019972][ T30] audit: type=1400 audit(1749091315.640:2073): avc: denied { setopt } for pid=20078 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1327.052570][ T30] audit: type=1400 audit(1749091315.650:2074): avc: denied { connect } for pid=20078 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1328.130451][T20039] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1328.151196][T20039] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1328.173357][T20039] wireguard: wg0: Could not create IPv4 socket [ 1328.184021][T20039] wireguard: wg1: Could not create IPv4 socket [ 1328.193109][T20039] wireguard: wg2: Could not create IPv4 socket [ 1328.973134][T20136] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1328.982490][T20136] SELinux: failed to load policy [ 1329.022882][T20136] SELinux: ebitmap: truncated map [ 1329.054786][T20136] SELinux: failed to load policy [ 1329.867991][T16819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1329.877692][T16819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1329.885842][T16819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1329.894161][T16819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1329.903140][T16819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1329.930080][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3413'. [ 1329.949862][T20142] Failed to initialize the IGMP autojoin socket (err -2) [ 1330.006268][T20148] netlink: 'syz.2.3414': attribute type 1 has an invalid length. [ 1330.168789][T20148] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1330.229629][T20152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.240961][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3415'. [ 1330.250415][ T7817] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1330.290722][T20148] veth3: entered promiscuous mode [ 1330.311489][T20148] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1330.406745][ T5953] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1331.928202][T16819] Bluetooth: hci1: command tx timeout [ 1331.977090][T17103] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1332.855657][T17103] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1334.028522][T16819] Bluetooth: hci1: command tx timeout [ 1334.846768][T17103] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1334.866663][T17103] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 1334.877800][T17103] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 191, setting to 64 [ 1334.888760][T17103] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1334.897914][T17103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.916686][T17103] usb 5-1: can't set config #27, error -71 [ 1334.927978][T17103] usb 5-1: USB disconnect, device number 89 [ 1335.346302][T20142] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1335.375767][T20142] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1335.420792][T20142] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1335.460076][T20142] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1335.773691][T20142] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1335.795707][T20142] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1335.819199][T20142] wireguard: wg0: Could not create IPv4 socket [ 1335.828102][T20142] wireguard: wg1: Could not create IPv4 socket [ 1335.836417][T20142] wireguard: wg2: Could not create IPv4 socket [ 1336.225421][T20252] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1336.233196][T20252] audit: out of memory in audit_log_start [ 1336.640343][T20257] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1336.649867][T20257] SELinux: failed to load policy [ 1336.737972][T20257] SELinux: ebitmap: truncated map [ 1336.791791][T20257] SELinux: failed to load policy [ 1337.513064][T20263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3427'. [ 1338.458074][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1338.472018][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1338.483852][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1338.492356][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1338.496390][T20272] FAULT_INJECTION: forcing a failure. [ 1338.496390][T20272] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.519875][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1338.562500][T20272] CPU: 0 UID: 0 PID: 20272 Comm: syz.2.3428 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1338.562527][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1338.562537][T20272] Call Trace: [ 1338.562543][T20272] [ 1338.562550][T20272] dump_stack_lvl+0x16c/0x1f0 [ 1338.562584][T20272] should_fail_ex+0x512/0x640 [ 1338.562602][T20272] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1338.562627][T20272] should_failslab+0xc2/0x120 [ 1338.562654][T20272] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1338.562678][T20272] ? __alloc_skb+0x2b2/0x380 [ 1338.562707][T20272] __alloc_skb+0x2b2/0x380 [ 1338.562730][T20272] ? __pfx___alloc_skb+0x10/0x10 [ 1338.562753][T20272] ? find_held_lock+0x2b/0x80 [ 1338.562783][T20272] alloc_skb_with_frags+0xe0/0x860 [ 1338.562808][T20272] sock_alloc_send_pskb+0x7fb/0x990 [ 1338.562834][T20272] ? avc_has_perm+0x11a/0x1c0 [ 1338.562853][T20272] ? __pfx_avc_has_perm+0x10/0x10 [ 1338.562873][T20272] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1338.562892][T20272] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1338.562916][T20272] ? sock_has_perm+0x259/0x2f0 [ 1338.562940][T20272] ? __pfx_sock_has_perm+0x10/0x10 [ 1338.562966][T20272] hci_sock_sendmsg+0x1c7/0x25f0 [ 1338.562989][T20272] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1338.563013][T20272] sock_write_iter+0x4fc/0x5b0 [ 1338.563035][T20272] ? __pfx_sock_write_iter+0x10/0x10 [ 1338.563064][T20272] ? bpf_lsm_file_permission+0x9/0x10 [ 1338.563081][T20272] ? security_file_permission+0x71/0x210 [ 1338.563101][T20272] ? rw_verify_area+0xcf/0x680 [ 1338.563124][T20272] vfs_write+0x6c4/0x1150 [ 1338.563147][T20272] ? __pfx_sock_write_iter+0x10/0x10 [ 1338.563169][T20272] ? __pfx_vfs_write+0x10/0x10 [ 1338.563189][T20272] ? find_held_lock+0x2b/0x80 [ 1338.563224][T20272] ksys_write+0x1f8/0x250 [ 1338.563245][T20272] ? __pfx_ksys_write+0x10/0x10 [ 1338.563273][T20272] do_syscall_64+0xcd/0x4c0 [ 1338.563290][T20272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.563307][T20272] RIP: 0033:0x7f8b6d58e929 [ 1338.563321][T20272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1338.563337][T20272] RSP: 002b:00007f8b6e36c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.563355][T20272] RAX: ffffffffffffffda RBX: 00007f8b6d7b5fa0 RCX: 00007f8b6d58e929 [ 1338.563371][T20272] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 1338.563382][T20272] RBP: 00007f8b6e36c090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.563392][T20272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.563401][T20272] R13: 0000000000000000 R14: 00007f8b6d7b5fa0 R15: 00007ffed35674d8 [ 1338.563425][T20272] [ 1338.580007][T20268] Failed to initialize the IGMP autojoin socket (err -2) [ 1340.556768][T16819] Bluetooth: hci1: command tx timeout [ 1342.948260][T16819] Bluetooth: hci1: command tx timeout [ 1343.566978][ T30] audit: type=1400 audit(1749091332.180:2075): avc: denied { create } for pid=20309 comm="syz.4.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1343.672326][T20317] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1343.681414][T20317] SELinux: failed to load policy [ 1343.691024][T20317] SELinux: ebitmap: truncated map [ 1343.699430][T20317] SELinux: failed to load policy [ 1343.736144][ T30] audit: type=1400 audit(1749091332.340:2076): avc: denied { ioctl } for pid=20309 comm="syz.4.3437" path="socket:[80858]" dev="sockfs" ino=80858 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1343.788660][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3437'. [ 1343.837638][T15256] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1344.138332][T20319] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1344.148645][T20319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1344.191070][T15256] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1344.231616][T15256] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1344.270003][T15256] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1344.290352][T15256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.309618][T15256] usb 2-1: Product: syz [ 1344.313849][T15256] usb 2-1: Manufacturer: ప [ 1344.332932][T15256] usb 2-1: SerialNumber: syz [ 1344.550218][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.566238][ T5900] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1344.577698][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.666070][T15256] usb 2-1: 0:2 : does not exist [ 1344.708620][T15256] usb 2-1: USB disconnect, device number 66 [ 1344.717801][T20268] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1344.742424][T20268] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1344.760197][T14545] udevd[14545]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1344.760855][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 1344.805591][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.806257][T20268] wireguard: wg0: Could not create IPv4 socket [ 1344.816753][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.837101][T20268] wireguard: wg1: Could not create IPv4 socket [ 1344.843373][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1344.845221][T20268] wireguard: wg2: Could not create IPv4 socket [ 1344.857862][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.887459][ T5900] usb 3-1: config 0 descriptor?? [ 1344.958411][T16819] Bluetooth: hci1: command tx timeout [ 1345.312146][ T5900] magicmouse 0003:05AC:0265.0019: item fetching failed at offset 3/7 [ 1345.325063][ T5900] magicmouse 0003:05AC:0265.0019: magicmouse hid parse failed [ 1345.332942][ T5900] magicmouse 0003:05AC:0265.0019: probe with driver magicmouse failed with error -22 [ 1346.212598][T20382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3442'. [ 1346.277099][T20385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.076658][ T5900] usb 3-1: USB disconnect, device number 67 [ 1348.084655][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1348.100604][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1348.109091][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1348.121606][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1348.136837][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1348.164697][T20392] Failed to initialize the IGMP autojoin socket (err -2) [ 1348.380387][T20401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1348.436688][T17100] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1348.738101][T17100] usb 5-1: Using ep0 maxpacket: 8 [ 1348.757249][T17100] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1348.779423][T17100] usb 5-1: config 179 has no interface number 0 [ 1348.802557][T17100] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1348.815382][T17100] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1348.827175][T17100] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1348.838616][T17100] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1348.851441][T17100] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1348.892663][T17100] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1348.903301][T17100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.924950][T20400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.237265][ T5831] Bluetooth: hci1: command tx timeout [ 1350.894583][T20392] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1350.923631][T20392] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1350.964885][T20392] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1351.001585][T20392] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1351.286822][T15143] usb 5-1: USB disconnect, device number 90 [ 1351.286997][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1351.306696][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1351.450134][T20392] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1351.475408][T20392] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1351.498888][T20392] wireguard: wg0: Could not create IPv4 socket [ 1351.507602][T20392] wireguard: wg1: Could not create IPv4 socket [ 1351.515979][T20392] wireguard: wg2: Could not create IPv4 socket [ 1351.794356][ T30] audit: type=1400 audit(1749091340.410:2077): avc: denied { create } for pid=20465 comm="syz.4.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1351.917357][ T30] audit: type=1400 audit(1749091340.410:2078): avc: denied { ioctl } for pid=20465 comm="syz.4.3451" path="socket:[81568]" dev="sockfs" ino=81568 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1352.047710][ T30] audit: type=1400 audit(1749091340.410:2079): avc: denied { ioctl } for pid=20465 comm="syz.4.3451" path="socket:[81569]" dev="sockfs" ino=81569 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1352.074872][ T30] audit: type=1400 audit(1749091340.500:2080): avc: denied { kexec_image_load } for pid=20464 comm="syz.2.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1353.841482][T16819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1353.852091][T16819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1353.860682][T16819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1353.868894][T16819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1353.878298][T16819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1354.219293][T20489] Failed to initialize the IGMP autojoin socket (err -2) [ 1354.287235][T20496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 1354.608551][ T30] audit: type=1400 audit(1749091343.230:2081): avc: denied { read } for pid=20497 comm="syz.2.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1354.670011][ T30] audit: type=1400 audit(1749091343.280:2082): avc: denied { write } for pid=20497 comm="syz.2.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1355.998729][T16819] Bluetooth: hci1: command tx timeout [ 1356.156134][T20524] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1356.212246][T20524] SELinux: failed to load policy [ 1356.250802][T20524] SELinux: ebitmap: truncated map [ 1356.260174][T20524] SELinux: failed to load policy [ 1356.412491][T20529] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3461'. [ 1356.599915][ T30] audit: type=1400 audit(1749091345.210:2083): avc: denied { getopt } for pid=20540 comm="syz.4.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1356.633904][ T30] audit: type=1400 audit(1749091345.250:2084): avc: denied { ioctl } for pid=20540 comm="syz.4.3463" path="socket:[82900]" dev="sockfs" ino=82900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1356.704996][T20489] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1356.743919][T20489] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1356.764291][T20489] wireguard: wg0: Could not create IPv4 socket [ 1356.775709][T20489] wireguard: wg1: Could not create IPv4 socket [ 1356.789982][T20489] wireguard: wg2: Could not create IPv4 socket [ 1356.866947][T15143] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1357.046741][T15143] usb 5-1: Using ep0 maxpacket: 32 [ 1357.061652][T15143] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.087715][T15143] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 16 [ 1357.111882][T15143] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 16 [ 1357.152894][T15143] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1357.181601][T15143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1357.203758][T15143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.229021][T15143] usb 5-1: Product: 륋囸癐了露캎ɉ灦੬㛣핸㗫心㈼놾౓蔯ŗﶷῈ蠢좡幥㖴䕽渠蕧꿼〈≼ч譶㰏猿콭땐㽬ꭅ왌೸꽽瘕荂䅙▛韂鰑幧瞏䂜ꮉT⽀㲙䟼꟮鹒ゝ뾡࣢鱛工蓕 [ 1357.289736][T15143] usb 5-1: Manufacturer: ࡡ [ 1357.320323][T15143] usb 5-1: SerialNumber: 밝璅켄鈴넏䚲뿗ઘ趒㘝埋覞狀肘ဎ쩉菱귫橲ᩦ仦璂쇻깓쭈㔃봵⽾唃ィ吜ᵼỎ栃ᕢ臍ޝ꼕〥뗸澰厧塴ᩐ谾摺━ヒꨤ왺婣冂둱疉棤亟ᠼ네噤♫븀脲뚻 [ 1357.400105][T20541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1357.407528][T20541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1357.840088][T15143] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1357.865565][T15143] usb 5-1: USB disconnect, device number 91 [ 1361.121942][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.907810][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1361.917514][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1361.926826][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1361.934621][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1361.942650][T20646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'. [ 1361.957187][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1362.320210][T20642] Failed to initialize the IGMP autojoin socket (err -2) [ 1363.334940][T20667] netlink: 'syz.4.3473': attribute type 1 has an invalid length. [ 1363.495461][ T30] audit: type=1400 audit(1749091352.060:2085): avc: denied { mounton } for pid=20668 comm="syz.2.3474" path="/751/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1364.166910][T16819] Bluetooth: hci1: command tx timeout [ 1364.737877][T20690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1365.484970][T20701] SELinux: policydb version 1956555085 does not match my version range 15-34 [ 1365.494053][T20701] SELinux: failed to load policy [ 1365.509198][T20701] SELinux: ebitmap: truncated map [ 1365.517850][T20701] SELinux: failed to load policy [ 1365.601396][ T8152] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.799740][ T8152] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.945979][ T8152] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.006680][ C1] ------------[ cut here ]------------ [ 1366.012990][ C1] refcount_t: addition on 0; use-after-free. [ 1366.019438][ C1] WARNING: CPU: 1 PID: 20677 at lib/refcount.c:25 refcount_warn_saturate+0x1ca/0x210 [ 1366.028959][ C1] Modules linked in: [ 1366.033417][ C1] CPU: 1 UID: 0 PID: 20677 Comm: syz.1.3475 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1366.045154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1366.055225][ C1] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 1366.061413][ C1] Code: ff 89 de e8 68 e1 e1 fc 84 db 0f 85 e6 fe ff ff e8 7b e6 e1 fc c6 05 35 f0 b5 0b 01 90 48 c7 c7 00 f5 14 8c e8 d7 b1 a0 fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 58 e6 e1 fc c6 05 10 f0 b5 0b 01 90 [ 1366.081045][ C1] RSP: 0018:ffffc90000a088b0 EFLAGS: 00010286 [ 1366.087102][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 1366.095052][ C1] RDX: ffff8880285f8000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 1366.103008][ C1] RBP: ffff88802524c26c R08: 0000000000000001 R09: 0000000000000000 [ 1366.110970][ C1] R10: 0000000000000000 R11: 0000000000002490 R12: ffff88802524c26c [ 1366.118931][ C1] R13: ffff88802524c100 R14: ffff888035084400 R15: ffff8880568f7c00 [ 1366.126908][ C1] FS: 0000000000000000(0000) GS:ffff888124865000(0000) knlGS:0000000000000000 [ 1366.135857][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1366.142487][ C1] CR2: 00005583a0e20ce8 CR3: 00000000223e7000 CR4: 00000000003526f0 [ 1366.150479][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1366.158442][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1366.166396][ C1] Call Trace: [ 1366.169663][ C1] [ 1366.172484][ C1] tipc_crypto_xmit+0x20c1/0x2550 [ 1366.177503][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1366.182868][ C1] ? lock_acquire+0x179/0x350 [ 1366.187537][ C1] ? find_held_lock+0x2b/0x80 [ 1366.192192][ C1] ? net_generic+0xea/0x2a0 [ 1366.196687][ C1] tipc_bearer_xmit_skb+0x15f/0x430 [ 1366.201862][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1366.207568][ C1] ? mark_held_locks+0x49/0x80 [ 1366.212318][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1366.217591][ C1] tipc_disc_timeout+0x5b2/0x850 [ 1366.222507][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1366.227988][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1366.233446][ C1] call_timer_fn+0x19a/0x620 [ 1366.238042][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1366.243138][ C1] ? mark_held_locks+0x49/0x80 [ 1366.247896][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1366.253336][ C1] __run_timers+0x6ef/0x960 [ 1366.257846][ C1] ? __pfx___run_timers+0x10/0x10 [ 1366.262859][ C1] run_timer_base+0x114/0x190 [ 1366.267529][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1366.272706][ C1] run_timer_softirq+0x1a/0x40 [ 1366.277458][ C1] handle_softirqs+0x219/0x8e0 [ 1366.282206][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1366.287483][ C1] __irq_exit_rcu+0x109/0x170 [ 1366.292136][ C1] irq_exit_rcu+0x9/0x30 [ 1366.296355][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1366.301987][ C1] [ 1366.304897][ C1] [ 1366.307818][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1366.313782][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 1366.319924][ C1] Code: 8b 05 b9 99 0f 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 3c 16 00 00 85 c0 74 2b <8b> 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 [ 1366.339529][ C1] RSP: 0018:ffffc900041cf578 EFLAGS: 00000246 [ 1366.345590][ C1] RAX: 0000000080000001 RBX: ffffea0001bb7380 RCX: ffffffff820ee4aa [ 1366.353553][ C1] RDX: ffff8880285f8000 RSI: ffffffff820ee4b8 RDI: 0000000000000005 [ 1366.361510][ C1] RBP: ffffea0001bb7380 R08: 0000000000000005 R09: 0000000000000000 [ 1366.369466][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1366.377426][ C1] R13: 0000000000000000 R14: 000000000006edce R15: 0000000000013cfc [ 1366.385377][ C1] ? __folio_rmap_sanity_checks+0xda/0x680 [ 1366.391172][ C1] ? __folio_rmap_sanity_checks+0xe8/0x680 [ 1366.396973][ C1] __folio_rmap_sanity_checks+0xe8/0x680 [ 1366.402581][ C1] folio_remove_rmap_ptes+0x31/0x970 [ 1366.407854][ C1] unmap_page_range+0x1c4d/0x4380 [ 1366.412865][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1366.418238][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1366.422907][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 1366.428788][ C1] unmap_vmas+0x218/0x470 [ 1366.433090][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1366.437927][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1366.442847][ C1] exit_mmap+0x1b9/0xb90 [ 1366.447165][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1366.451918][ C1] __mmput+0x12a/0x410 [ 1366.455962][ C1] mmput+0x62/0x70 [ 1366.459669][ C1] do_exit+0x7bc/0x2bd0 [ 1366.463803][ C1] ? __pfx___might_resched+0x10/0x10 [ 1366.469079][ C1] ? __pfx_do_exit+0x10/0x10 [ 1366.473647][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1366.478668][ C1] ? find_held_lock+0x2b/0x80 [ 1366.483324][ C1] do_group_exit+0xd3/0x2a0 [ 1366.487819][ C1] get_signal+0x2673/0x26d0 [ 1366.492300][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1366.498180][ C1] ? task_work_add+0x1d5/0x360 [ 1366.502920][ C1] ? __pfx_task_work_add+0x10/0x10 [ 1366.508016][ C1] ? __pfx_get_signal+0x10/0x10 [ 1366.512847][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1366.518381][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1366.524512][ C1] ? ksys_read+0x1ac/0x250 [ 1366.528917][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1366.533659][ C1] exit_to_user_mode_loop+0x84/0x110 [ 1366.538930][ C1] do_syscall_64+0x3f6/0x4c0 [ 1366.543495][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.549384][ C1] RIP: 0033:0x7fe8def8e929 [ 1366.553789][ C1] Code: Unable to access opcode bytes at 0x7fe8def8e8ff. [ 1366.560791][ C1] RSP: 002b:00007fe8dfe2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1366.569206][ C1] RAX: 0000000000018ff8 RBX: 00007fe8df1b5fa0 RCX: 00007fe8def8e929 [ 1366.577173][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 1366.585121][ C1] RBP: 00007fe8df010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1366.593080][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.601037][ C1] R13: 0000000000000000 R14: 00007fe8df1b5fa0 R15: 00007ffc200ab048 [ 1366.609001][ C1] [ 1366.611997][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1366.619253][ C1] CPU: 1 UID: 0 PID: 20677 Comm: syz.1.3475 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1366.630938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1366.640967][ C1] Call Trace: [ 1366.644220][ C1] [ 1366.647040][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1366.651614][ C1] panic+0x71c/0x800 [ 1366.655488][ C1] ? __pfx_panic+0x10/0x10 [ 1366.659882][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 1366.665064][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1366.670161][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 1366.675682][ C1] check_panic_on_warn+0xab/0xb0 [ 1366.680601][ C1] __warn+0xf6/0x3c0 [ 1366.684481][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1366.689482][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 1366.695001][ C1] report_bug+0x3c3/0x580 [ 1366.699308][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 1366.704831][ C1] handle_bug+0x184/0x210 [ 1366.709135][ C1] exc_invalid_op+0x17/0x50 [ 1366.713615][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1366.718441][ C1] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 1366.724568][ C1] Code: ff 89 de e8 68 e1 e1 fc 84 db 0f 85 e6 fe ff ff e8 7b e6 e1 fc c6 05 35 f0 b5 0b 01 90 48 c7 c7 00 f5 14 8c e8 d7 b1 a0 fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 58 e6 e1 fc c6 05 10 f0 b5 0b 01 90 [ 1366.744155][ C1] RSP: 0018:ffffc90000a088b0 EFLAGS: 00010286 [ 1366.750214][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 1366.758166][ C1] RDX: ffff8880285f8000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 1366.766111][ C1] RBP: ffff88802524c26c R08: 0000000000000001 R09: 0000000000000000 [ 1366.774057][ C1] R10: 0000000000000000 R11: 0000000000002490 R12: ffff88802524c26c [ 1366.782008][ C1] R13: ffff88802524c100 R14: ffff888035084400 R15: ffff8880568f7c00 [ 1366.789958][ C1] ? __warn_printk+0x198/0x350 [ 1366.794700][ C1] ? __warn_printk+0x1a5/0x350 [ 1366.799457][ C1] tipc_crypto_xmit+0x20c1/0x2550 [ 1366.804460][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1366.809810][ C1] ? lock_acquire+0x179/0x350 [ 1366.814466][ C1] ? find_held_lock+0x2b/0x80 [ 1366.819120][ C1] ? net_generic+0xea/0x2a0 [ 1366.823603][ C1] tipc_bearer_xmit_skb+0x15f/0x430 [ 1366.828791][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1366.834488][ C1] ? mark_held_locks+0x49/0x80 [ 1366.839231][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1366.844494][ C1] tipc_disc_timeout+0x5b2/0x850 [ 1366.849412][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1366.854854][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1366.860287][ C1] call_timer_fn+0x19a/0x620 [ 1366.864868][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1366.869958][ C1] ? mark_held_locks+0x49/0x80 [ 1366.874700][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1366.880136][ C1] __run_timers+0x6ef/0x960 [ 1366.884621][ C1] ? __pfx___run_timers+0x10/0x10 [ 1366.889646][ C1] run_timer_base+0x114/0x190 [ 1366.894300][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1366.899479][ C1] run_timer_softirq+0x1a/0x40 [ 1366.904220][ C1] handle_softirqs+0x219/0x8e0 [ 1366.908975][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1366.914240][ C1] __irq_exit_rcu+0x109/0x170 [ 1366.918892][ C1] irq_exit_rcu+0x9/0x30 [ 1366.923108][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1366.928733][ C1] [ 1366.931643][ C1] [ 1366.934556][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1366.940511][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 1366.946642][ C1] Code: 8b 05 b9 99 0f 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 3c 16 00 00 85 c0 74 2b <8b> 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 [ 1366.966225][ C1] RSP: 0018:ffffc900041cf578 EFLAGS: 00000246 [ 1366.972266][ C1] RAX: 0000000080000001 RBX: ffffea0001bb7380 RCX: ffffffff820ee4aa [ 1366.980230][ C1] RDX: ffff8880285f8000 RSI: ffffffff820ee4b8 RDI: 0000000000000005 [ 1366.988190][ C1] RBP: ffffea0001bb7380 R08: 0000000000000005 R09: 0000000000000000 [ 1366.996139][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1367.004085][ C1] R13: 0000000000000000 R14: 000000000006edce R15: 0000000000013cfc [ 1367.012037][ C1] ? __folio_rmap_sanity_checks+0xda/0x680 [ 1367.017823][ C1] ? __folio_rmap_sanity_checks+0xe8/0x680 [ 1367.023610][ C1] __folio_rmap_sanity_checks+0xe8/0x680 [ 1367.029222][ C1] folio_remove_rmap_ptes+0x31/0x970 [ 1367.034485][ C1] unmap_page_range+0x1c4d/0x4380 [ 1367.039494][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1367.044879][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1367.049567][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 1367.055440][ C1] unmap_vmas+0x218/0x470 [ 1367.059752][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1367.064584][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1367.069507][ C1] exit_mmap+0x1b9/0xb90 [ 1367.073728][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1367.078484][ C1] __mmput+0x12a/0x410 [ 1367.082528][ C1] mmput+0x62/0x70 [ 1367.086224][ C1] do_exit+0x7bc/0x2bd0 [ 1367.090357][ C1] ? __pfx___might_resched+0x10/0x10 [ 1367.095624][ C1] ? __pfx_do_exit+0x10/0x10 [ 1367.100190][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1367.105189][ C1] ? find_held_lock+0x2b/0x80 [ 1367.109844][ C1] do_group_exit+0xd3/0x2a0 [ 1367.114340][ C1] get_signal+0x2673/0x26d0 [ 1367.118822][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1367.124694][ C1] ? task_work_add+0x1d5/0x360 [ 1367.129433][ C1] ? __pfx_task_work_add+0x10/0x10 [ 1367.134533][ C1] ? __pfx_get_signal+0x10/0x10 [ 1367.139363][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1367.144888][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1367.151019][ C1] ? ksys_read+0x1ac/0x250 [ 1367.155412][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1367.160155][ C1] exit_to_user_mode_loop+0x84/0x110 [ 1367.165418][ C1] do_syscall_64+0x3f6/0x4c0 [ 1367.169984][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.175851][ C1] RIP: 0033:0x7fe8def8e929 [ 1367.180240][ C1] Code: Unable to access opcode bytes at 0x7fe8def8e8ff. [ 1367.187229][ C1] RSP: 002b:00007fe8dfe2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1367.195616][ C1] RAX: 0000000000018ff8 RBX: 00007fe8df1b5fa0 RCX: 00007fe8def8e929 [ 1367.203561][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 1367.211506][ C1] RBP: 00007fe8df010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1367.219456][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.227408][ C1] R13: 0000000000000000 R14: 00007fe8df1b5fa0 R15: 00007ffc200ab048 [ 1367.235373][ C1] [ 1367.238578][ C1] Kernel Offset: disabled [ 1367.242900][ C1] Rebooting in 86400 seconds..