last executing test programs: 12m39.987109835s ago: executing program 1 (id=499): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000fb"], 0x830200) syz_usb_connect(0xfb57e25f17f69235, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092dd5e5579b2000000000000090400000103fd00000905040000000057fee34ac9293a206b7da885802ff21f6fc0ada091980000000004215d4eb49d181217ba5012f6f37081cd16529eadfc809cf3b2565e5f2d736bf2", @ANYRES16=r0, @ANYRES16=r0], 0x0) 12m39.422259316s ago: executing program 1 (id=503): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7ecde70d4a28452d79a711000002", @ANYRES16=r3, @ANYBLOB="010c2abd7000fedbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000031c0)=ANY=[@ANYBLOB="58000000020601040000e0000000000005000003140007800500140080ff00000800084000000018050001000700000005000400040000000900020073797a300000000005000500020000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) (async) preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6963766630320500"], 0x9) (async) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6963766630320500"], 0x9) unshare(0x28040600) (async) unshare(0x28040600) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) (async) bind$alg(r9, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 12m38.451304059s ago: executing program 1 (id=505): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40014) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40014) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 12m37.951089577s ago: executing program 1 (id=508): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000001480)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x14, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000e00000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = socket(0x10, 0x803, 0x0) getsockopt(r4, 0x7, 0x1, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) read$char_usb(0xffffffffffffffff, &(0x7f0000000240), 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) io_uring_setup(0x7cac, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1f58a3bfabbe084c284fb7069320278f56d099915bbb98c39a2fcd4a12a6108ece84ee0351adae71e79df02f0acbf4afbd9fb7b681c98f184ae6c445d67da153336e2dbb4c1710083675199dbe43a1339fb9db7626c37df4904e8c96808e7637c7fcb61d2a6b068a3d81cb984ae403ce00e7b53fd1ab36016ac68f6fbf88b5a332553fde57fd58c63beb1a756cf525382a8eeed0490ffeb37b3b1e993c1843fcb31f92cfd170a10b9156efcb26a8ceb8a28d4a3ebbbcaaf295f9a05454fd790639bc5be6cad7b0862a5f4c1c87ec7c6ae9cd70acd06dc2c8df2df3392f32e60be9720b8d03bac9358d09ca4c14bde3cedfc48d", 0xf3}, {&(0x7f0000000840)="f7d5c56b689379ef7b073d065d9968b82d858f814fafb77a68fa302ff82420cd7771dacd2d7c0f4ae0b706e9f00289f3c94085b023b769916e8527a926b9d0f8404aab7351dd9d213a5a377da34fa7f195226f637ac4e8e5e0142bdcd52e7573c37a3861e56c899f15e6331b1858ced0d7c0b1cc3bccd7a20d84c755bb3dc58fa124d5fb5962", 0x86}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x0) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000180)=""/104, 0x68}], 0x3}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvfrom$inet(r7, &(0x7f00000003c0)=""/4096, 0x1000, 0x10100, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x3, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000370401000000fddbdf2500000000", @ANYRES16=r0, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) 12m36.46600893s ago: executing program 1 (id=517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x300000000}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2404c004) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000003c0)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x6}, {0x0, 0x8, 0xfffffffd}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x1, 0x1, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x20000}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 12m35.00920053s ago: executing program 1 (id=521): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1fffffffffffffb) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) splice(r2, 0x0, r1, 0x0, 0x80000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000032680)=""/102376, 0x18fe8) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) write$UHID_CREATE(r5, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x101, 0x2, 0x2, 0x8, 0xfca7}}, 0x11c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00'}, 0x11) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 12m20.656678502s ago: executing program 32 (id=521): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1fffffffffffffb) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) splice(r2, 0x0, r1, 0x0, 0x80000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000032680)=""/102376, 0x18fe8) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) write$UHID_CREATE(r5, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x101, 0x2, 0x2, 0x8, 0xfca7}}, 0x11c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='devlink_hwerr\x00'}, 0x11) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 6m27.001053185s ago: executing program 3 (id=1918): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 6m25.199851678s ago: executing program 3 (id=1926): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x3, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x9, 0xfffffffffffffffe, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc135, 0x0, 0x3, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x3, 0x0, 0x0, 0x2, 0x198, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x4, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7fff, 0xe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8e, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) r1 = getpid() socket(0x10, 0x80002, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540), 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)="d930a945"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000580)=0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x41, 0x3, 0x220, 0x98, 0x50020000, 0x0, 0x0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'veth0_to_team\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@empty, @multicast2, 0xff0000ff, 0x0, 'sit0\x00', '\x00', {}, {}, 0xc}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) 6m24.203187693s ago: executing program 3 (id=1928): socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000180)={0x0, 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) read(r3, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000300)=ANY=[]) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r8 = syz_io_uring_setup(0x59a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xa, &(0x7f0000000100), 0x1, 0x4}) io_uring_enter(r8, 0x627, 0xc1040000, 0x43, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 6m19.809251526s ago: executing program 3 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x7d, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 6m19.550056328s ago: executing program 3 (id=1948): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x2, r3}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r6 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r8}) (async) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0xce, &(0x7f0000000000)=0xa2, 0x4) (async) ioctl(r10, 0x8916, &(0x7f0000000000)) ioctl(r10, 0x8936, &(0x7f0000000000)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r11, 0x0, 0x8000f28, 0x0) 6m18.928848646s ago: executing program 3 (id=1950): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @broadcast, @void, {@generic={0xa01}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x7fffffff, 0x2002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf54b}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x3, 0x1, 0x8, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x6, 0x22abd9deb747bf2a, 0xb, 0xffffffffffffffe0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0xb4, &(0x7f0000000480)=""/180, 0x41000, 0xf, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x4, 0x9, 0x7}], 0x10, 0xfffffffa}, 0x94) fcntl$addseals(r8, 0x409, 0xc) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x54, 0x4, 0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 6m4.54149929s ago: executing program 33 (id=1950): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @broadcast, @void, {@generic={0xa01}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x7fffffff, 0x2002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf54b}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x3, 0x1, 0x8, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x6, 0x22abd9deb747bf2a, 0xb, 0xffffffffffffffe0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0xb4, &(0x7f0000000480)=""/180, 0x41000, 0xf, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x4, 0x9, 0x7}], 0x10, 0xfffffffa}, 0x94) fcntl$addseals(r8, 0x409, 0xc) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x54, 0x4, 0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 5m17.748218081s ago: executing program 5 (id=2184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 5m16.493676039s ago: executing program 5 (id=2186): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x2596af01, 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0]) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) mount(0x0, 0x0, 0x0, 0x200, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x240, 0x1000, 0x0, 0x8, 0x0, {0x0, 0x9}, {0x9, 0x2, 0xfffffdfd}, {0xf4ef, 0xfffffffe}, {0x3, 0x4}, 0x1, 0x100, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x16e3, 0x0, 0xfffffffd, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x4}) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x105, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="8c8d1dfd0688e72400a7a05e167770f43d567103fedb75860345a4558dbb946e3097cf4b9c308354eb529f1be509d5c7b6ef9539326ac10d42764d53192479f91e3e974b5ac2f24962170d38c1219ce28b1feab47c3d9154cdffa7eef105a075a73d255e555170b6db460564b85950e89882200c864943442fcead5af5e93915645c6a71ef5dfe0addb8c2b1d023c3ab3d65ebfc416f5d22db3641b13dce5d52a38992e9fe8808aa6f6694321da2241ff101ebde76351b55b7387c1914bffe164b9ad32fb24f51b9"}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 5m16.385717012s ago: executing program 5 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) 5m15.472423097s ago: executing program 5 (id=2192): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008890) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) rt_sigqueueinfo(r4, 0x37, &(0x7f00000003c0)={0x6, 0x8000, 0x77d}) close(r3) ioctl$EVIOCGLED(r1, 0x541b, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x4}, 0x10) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x3}, 0x1c) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 5m14.991219683s ago: executing program 5 (id=2194): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x10000007, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) 5m13.991134923s ago: executing program 5 (id=2200): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x7d, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 4m59.660062533s ago: executing program 34 (id=2200): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x7d, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 2m30.461245252s ago: executing program 7 (id=2781): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfea8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4, 0x0, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000011c0)={0xffffffff, 0x1, 0x4, {0x1, @pix_mp={0xc0000000, 0x7, 0x4745504d, 0x4, 0x6, [{0x4, 0x2}, {0xfffff801, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x2c, 0xffff8000}, {0x6, 0x6}, {0x7, 0xef}], 0x10, 0x2, 0x3, 0x0, 0x6}}, 0x2}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2021080000000811e4ff14eca81fffb066cb572f3454e6891257db78e9d119d3201ef6ddb787b38298967361bd862b"], 0x0}, 0x0) 2m28.767272974s ago: executing program 7 (id=2787): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67720400000069643d", @ANYRES8]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) semctl$SETVAL(0x0, 0x1, 0x10, 0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8000001, @private0, 0x2003}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x5, @private1, 0x5f}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="b3", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r5, 0x4}, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000200)={0x40000001}) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1686dd60f53a0400883a76fe880000000000000000000000000001fe8000000000000000000000000000bb010690780200000062e493ad094f2fff20010000000000000000000000000000fc0100000000000000000000000000013a0a000100000000fe8000000000000000000000000000aa00000000000000000000000000000001fe8000000000000000000000000000aafc0200813dc25400000000000000000020010000000000000000000000000001"], 0x0) 2m28.593206787s ago: executing program 7 (id=2788): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 2m27.230665434s ago: executing program 7 (id=2789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2m26.081503802s ago: executing program 7 (id=2790): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0x82, 0x70, 0x20, 0x6e1, 0xa190, 0x3a1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0x20, 0x0, [{{0x9, 0x4, 0x50, 0xb, 0x0, 0x8f, 0xf5, 0x9c, 0x4}}]}}]}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00180400406806001c0012800b00010067726574617000000c00028008000700ffffffff0800040000050000869ddaee0e206ba43f99c3745623f1a2d6a1b4f051b97715623af0d572fe265b20aa4b04346bdf7b4b35aaf03b047622dee351ec4b4ede73b8547e2448e90842313bab64a11ad9b2dcc120c268d115c642a0c24b7daec15fe62ad28cd9c18031e14d7a1b"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000280)=0x1c) fcntl$setlease(r4, 0x400, 0x1) syz_pidfd_open(r3, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='romfs\x00', 0x43017, 0x0) 2m24.457267158s ago: executing program 7 (id=2802): r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='nolazytime\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_USERDATA={0xf5, 0xd, 0x1, 0x0, "3f118a28fc2342a5e85192085bd91a77fe61938236ccf8f040aec37db119cb48f6ef81eeee1b6d1f750b72cbcc0ea8fdab8f74e68df9dbaf1583b584eb4c8fb13cea1962330b33b1c964296af3339ed88713ab703fc3874d28ab66a48cce72d8e5c3b20cfee359fe4362cf68df6b893db5b40450c032b5e2542a46bbe068f8423f5e039f8cf2209d9e4e22927f96eed0ac04dc1bf8eeeb5fe6a5d0b29608cd9e454c0908255a4944ec48515fbac936cfda210444dbcba00cffcb0cb63c1bf4f23d94a9459ae21202f4d0b9e61b9a596f9bb828fee7d4dd2f4d2378f9ed13869fa7b6f7cc2b515bb69f4052ebdf6dfa988c"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x26f4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2690, 0x3, 0x0, 0x1, [{0x24e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x360, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4ca00000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3d6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x200}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4399}]}}}, {0x2a0, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x294, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x290, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "88e25819dd76d18e77e08ec80f3777791c07440a1ebf7341f0988dadbb3583781f3ed25905f5be2feb9c5bf0f001c05d996f8c78127192981b956be5287aff219e3ac54508318fd8a8f2a2d3c799ed24ff481c59d8d9c0b9acda3bc0d7056c7c58801f944babdd05b25e3232d3669b61c677b3e083"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x78, 0x1, "ae2a011c5fe658f872de2197c7fb431d801a0f611b4a8de943c277851e71852cd7267672eeba9143eb2baef158f4800ddbe7e95d49d07f70527f8fc4ed496bc8b6f3b620573b47fdf67369ed1fb7cce5111e412f6b9c9eb71c4f9addb85deb02851bbc4e15a0ac4193d682dada7a61985dd064f4"}, @NFTA_DATA_VALUE={0xc1, 0x1, "5ce1202be4d54162a2bd78a5b2a916c4d685e909119b2bac9fc35296b0c65e99e93fd5897bdbcd11ce7f7730a345b99d07341f563d247c83b8528de30cddaaf65aa95cd8fbe5d6955ddca53672c46c4d07f5e37e2584fea14060bf40b5139a0be4b88268fa363eb73ec80af7bb95bfc5afef330f36664be40703dcd78976a956b7f6bda0485101aa11704708914ba55dc325fd81ed63d5855effe57b87ced9ceaff84115f0cb70717c672320d82abe3c2be76e9d83ca4f0f479894b2dd"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x83, 0x1, "4aad427033b7a72b7e8e067e813b329a3a6ccab3c7011c77576de68ba8911a0c3ed91170e0fef46cae4a08734a4e190c4dc8ea82764c88a85824f607d488b5dd0273537bdbb614270f1df301eae113ba17018931bc09ff292258a3514afd0f84ed645bb2b6ec6a378896723bad9a0cbc040a2971d290f1e2c905deb4fc4896"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x206c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x4}, {0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "355cd7564689010f7ae412a6f895d77925a1e3d068c487f21390fb"}, @NFTA_DATA_VALUE={0x59, 0x1, "cd92707d50784b80d7d8b37008a06fd00a3f19b06cd56db293c579b3ab39ce09058684e98fa010357b31ccc3202557a89b9610f01743f9982b8200cef7ddb0a28043427d5aa29924c18362625d28108b0801503f5f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xed, 0x1, "14700941b6ad2d37242c0839eb0b20693ab8cf46116004fda79a8c60589dae9a05094d6d4a058179bb5a84db3bc03cf1312c74dd28ec22acfd6debb1fe0e1eda45697433ed86a0394102f9bdac87082c24eadf7ac8d4f2b6a19e875b606bca968d89560eae1ba3ae0c658688e4cd0d0bb888c762c4a0faa6a38e2c1696e25eee616c05d92952cbed34f792c9ffea77974c8c97ac233be023e302a9d4327480d014ea721eff46f9865b700c0faf877eb7b69f9b9eb56f85ee7ad7b25b0c11751f0d0681253a0b0464dd444c74bf6c0dbb31111fcca78b9c706e0302829071474b065c94c5a459a3b241"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x285c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000003000000400001802c00040014000100020000010000000000000000000000001400020002000000ffffffff00000000000000000d0001007564703a"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800050000020900020073797a3200000400000000000000fffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001001b000000000000000100000adb4906b917129f35a3857fa9ea9ccb13abc1af6ca14744cebcff129595cacd4a3899f82741d408b8d630f932864e073cbc99884639c1d11f9ead5b11379b7ab4781bcc04e83876e5318bbee8f04e41174befa043b866388c7b0ac0116081bb8c8487a91ba28609b97870eab73e8d4cf43226a891bdd06761"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1b0, &(0x7f0000000700)={@empty, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x17a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x6, '\x00', [@pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0xeddb, [0x80000000, 0x401, 0xfffffffffffffff9, 0xffffffffffffffff, 0xe]}}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @remote]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x27, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m9.613901398s ago: executing program 35 (id=2802): r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='nolazytime\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_USERDATA={0xf5, 0xd, 0x1, 0x0, "3f118a28fc2342a5e85192085bd91a77fe61938236ccf8f040aec37db119cb48f6ef81eeee1b6d1f750b72cbcc0ea8fdab8f74e68df9dbaf1583b584eb4c8fb13cea1962330b33b1c964296af3339ed88713ab703fc3874d28ab66a48cce72d8e5c3b20cfee359fe4362cf68df6b893db5b40450c032b5e2542a46bbe068f8423f5e039f8cf2209d9e4e22927f96eed0ac04dc1bf8eeeb5fe6a5d0b29608cd9e454c0908255a4944ec48515fbac936cfda210444dbcba00cffcb0cb63c1bf4f23d94a9459ae21202f4d0b9e61b9a596f9bb828fee7d4dd2f4d2378f9ed13869fa7b6f7cc2b515bb69f4052ebdf6dfa988c"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x26f4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2690, 0x3, 0x0, 0x1, [{0x24e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x360, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4ca00000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3d6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x200}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4399}]}}}, {0x2a0, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x294, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x290, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "88e25819dd76d18e77e08ec80f3777791c07440a1ebf7341f0988dadbb3583781f3ed25905f5be2feb9c5bf0f001c05d996f8c78127192981b956be5287aff219e3ac54508318fd8a8f2a2d3c799ed24ff481c59d8d9c0b9acda3bc0d7056c7c58801f944babdd05b25e3232d3669b61c677b3e083"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x78, 0x1, "ae2a011c5fe658f872de2197c7fb431d801a0f611b4a8de943c277851e71852cd7267672eeba9143eb2baef158f4800ddbe7e95d49d07f70527f8fc4ed496bc8b6f3b620573b47fdf67369ed1fb7cce5111e412f6b9c9eb71c4f9addb85deb02851bbc4e15a0ac4193d682dada7a61985dd064f4"}, @NFTA_DATA_VALUE={0xc1, 0x1, "5ce1202be4d54162a2bd78a5b2a916c4d685e909119b2bac9fc35296b0c65e99e93fd5897bdbcd11ce7f7730a345b99d07341f563d247c83b8528de30cddaaf65aa95cd8fbe5d6955ddca53672c46c4d07f5e37e2584fea14060bf40b5139a0be4b88268fa363eb73ec80af7bb95bfc5afef330f36664be40703dcd78976a956b7f6bda0485101aa11704708914ba55dc325fd81ed63d5855effe57b87ced9ceaff84115f0cb70717c672320d82abe3c2be76e9d83ca4f0f479894b2dd"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x83, 0x1, "4aad427033b7a72b7e8e067e813b329a3a6ccab3c7011c77576de68ba8911a0c3ed91170e0fef46cae4a08734a4e190c4dc8ea82764c88a85824f607d488b5dd0273537bdbb614270f1df301eae113ba17018931bc09ff292258a3514afd0f84ed645bb2b6ec6a378896723bad9a0cbc040a2971d290f1e2c905deb4fc4896"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x206c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "b19f56751864e3080ab5769cf9f1905df912e58d94d0815106b2e19cf0026c17063e5076885c496e1cd27bf9c22f5564186b7b0823b54797c5968194a7fab39f29afc539627bfe8ef39850814fbb28b269a5f775e449adc118d3282ddfcae96254dc7e985b28f8511d1b16d467c5318d0ccf9995221137c8e9fad10921deee6316f9ec439323caa797bdf0470f110d1c916591c95c4c5c2b1be40039ea5a518312bf6e93ecff1e3cf4b3d401ab16545cdcc4d3a3963c4fc38bfcd27b1a62cb365341beef313cb1ca9ad51ed2226f2ea025b8be233b450eabdb351cce6e01c83182171dcdc273d87f03284e8d56669a5968fdfdc962024107ef1952abeb93307094dc6fcc0da9f19fd8ea8d62e3832f908d7588d348f5944d24e0a523bfc0c41f81529c4b026bcbc42a1ba9c014d0a828650dd7ad450d4417353495fa616a9c7d4eb670321193d78410f42909467a197fb0631d36077659ad82a3e842d012f7deb6d70ee221f5edbde53b1f78f0e00c512de25bc8469e982b08c44795636e44b3c83f69d302ecc5feca06712877076a96f430062b1da593aaa58c2a9e921885586aaa71de9147cfd377a38d595ee162250cc79c7107407bf9f208dbe31f9f183f3def7eeaa41f6d0bcc8b26f5d3bdb3153463c6ab538def68b7050ca76895aadb3a3174c32e65b6e03ccd18e5d44db5c57a1981308829e22d531f58dd14d973af34cb7d484cb51cc2734713dd4b64aa4747157028b288338025155b1f7b5829a35d171af429f94accc86770148ee372b633c63e7a77a0f6964bcadd2545dbf37fb284dd791abce124b745158f6e7b9c797fdf26934888608454bffe698b8131ca1e06d9359aeb7e6463f93fe2336170f1f09b65a2b3a246f470c7d70f7b5cf713907d58e324900db4fd84be09c4b8d35c1f44478d894a838b944b9a18232aa79346ba6a69a71c338743f60e795abacaeefd622056273f09e7a69fd16c244743b6018a60f899ff91981509dd42a9502c250fd785a0fcdce857059d9547d4c121c90f21a759ce1e348725a74d1cb975b13b41cbfbd1108a90d2c43c06034026d1c785e9ad6e30a665d6e0272004f469354f73076e13849c78a8be46c22d3f179bfe880504a1646453ce5544e77e8eaaf84e5b1c3a563a37a52502e536df155715f5cd519400ee4f20f9bf9a58348be0345c7cb04e407c5cc3d13d0af000239eeb3156eeab333c3a28396fe221e2ecbb11be3fa7d9222a2f39a245091cffa3f881f1448de7680d7e6770101987ece024845c21682a9ef169a842e9937e1f73603521128f76592161ce947fbd54e0933ca957f763f071df01c9b62a2c38de8b529881c50b45414b15fdef22c618c14c319970985d52a797322b9a5d5c9e40b0ed03f46478ab878dc2dab25e76c60c4e3e5815fa164dc4fe62c9da134f46df343ecd1ce5b3aa8d19df5d0875529665e4a24cdd8f225ab4aeab9f58dfbc0b3fa30ca8733ff2f11333f2a74433e53c96ebf22ccf614eb1582f53cc0bd362ec501338853380cfdf69bbf118e1f31bca0a2ccb1c900e4f821c2ad17c731918786d0eff8f6827faf89bf5981e371850e73c65cee63246c7175ebc70ba4d4ecb019d3a155f6fd5599b031b75fc0209b51dabe216aeb5b882085e080415b33bee3eccc7d4a337e1ffe2455ad38d6088ff23ec9a10dab5013823bee282e623537d26e061c407c85dd0998b5d5d652db06a0f6c3ffc44891d2aaef8e492096db6fad5941d444529eef1417737a4e7291e1b6663f8834a2239ac0635d2114d6ffdf88fe936f6d29ecf647ff4e032e90cd121c9a099ff2dca7e0609d2cc22c704a846bebbac27594e68f01af4b44044b462bcfeb590d031b74ac493eeef1b4aace1c82c10580cbc3cf108a87f7763daf1b2217ea5c5c473c7ff7ba1f0f34cc3dd1ef91e0b31fd93a179bbbeb2c28fa75d9b391c6cd6444e0370960d7d376e41dd7edb7e275300cc6f384b697bc2103f0f92364990473364ba8b10b0d63bc19bfee73f953303f70b7c064c83f6ae29fed44d9423caacfb3020e72f3f5fa21ea4ca6a78ff478b854130a4ad6c5ff90abb5506745f139b7382476f37f2c4ba9600aa36cd69b365c1ed88160492bc774c0319863de6b6b9a2a06692199033e0dfe7d0bc9d3bd9c42ea55cb1af052896a1a5cc2d51d92226e04dc902bfd65ff5aae814390aff55f23280f3d6c34755e7ca11eacac0080bec4598f1abba97b226e0daa11101fcafa393c59630f64c20b0cacda822a8d47b4fb021b7533ecda7e2403eee41f900b3e493e1597aaa09bacf5154392fb55e02ae7ddb22c3d3706c5d62e88719a679c0797fb78df562aa406fdeb274c2ba72691a80cf2ebee9a398cf8f1b13727e875cc8cd67e58a6a796bc753a38e19b24ac2fe1f871acb8868adc82a9d17edc50131c93c64571adfca35f7c156bd1b52b4651572b887f7bb0b28d0b3570a2008129a29fae258a10b3a0e39b6980a6054784cc91476a60a1e639bc08cff3e08c50aae8a5cda8265745eeb066d3f6fcfe08ad5ea9ee3a695d46ee7aa7cc5f84a54323be62ea9ab9a9b4b33bd5bd7997e48763f5136bb9e1e84bb2be8f137c8e4a0552650326f87e3ec31cf560d09f9bd7764f533edb6fe42372b1e32fd3acaa0b2920b71214ff11cd332aedacb4d0f0f0a9a9ab2125e5f5f847cd6dd9656fc80ee700b2a07cb4313dec724ada1174a43185c0a91ab37025289509a5bb98a943cefcbca75d7bcc13766691afcaa81ce34f0234d213b9467612c5a6db88a30c28738bd7bbf91c101d6893a2b3d6f8738510932d775183fd4ee285c01a3389ed49999790865e2e1f1d26136ce3910c3ea416a985ace8eb56e6951e175cfd4b57f4af6877b44d5907cf28d1511c5be614dd32b90b6aabb7dc1b2a5d30109aa38aae8cf27165b2cce8754023467f265d2cb6da968cdae697518e38c5f05c9bd060e66e8fbdc003fbed2a2b1403277eb0bbe05cb570ec8f19901a0731f12af3ddec696f8512823d84a68ad485fc1c0d7ca681c7ad4b8ecbfeb51b1f2322858c2df86190f5f8ccc33053523a7da64a0ef8120bd88fa5d50c3f976feaa90ee058743284c3fc7ff9d564167f89eaa00642862ad3c116a1b7a978e10ff040e4b5b3a98c2c734a408e002950e116ae62abf0cc46077e63a6bf89bb485d546f6988d25f7a1dfcacaab562da635379868cce055ad618f0b03948835119fda76f9065e54233568c8c66027357340d8e2bca9c97362cf3294b8869bccef5c055b3ade3c62d54e13d55c5af30e1398a17cdacbc2606753fd9d343c8814b3c6435f2b051a4a70f3d3804492c891c116241e9b98bc62c76663de35c5f076e5c9f1064d00bf772a13840f7ae16ba273ff75ff5e257feeadada620ce3cc7077fdf3d1b30093e85d014bc4eb5bbe6956b85edfc26ef83305c5ecf904eb1c387d124b9dfd2c256d8b766c112ae4a8fc04adc63307ae7fb0e8100a0b035faec5454849f23bddcfe9ff2035fce1ddc3dca89abe331b2e817a84aa7cd61ce571a3f62f5938e40c3c11509444ee7f26572c4dec7649d6ba439a4703ab93bd45c578d2ff8be8732c3866beaea505bd5796b44f648064491f5b0df2257268c15e89cbc9cd46c33507434f935ea07ef1078175ccdc6e64086774ec49a265845acd27232e301c0fe7e7e04613501ed76a59a1f690586287a2e6415dd34b15d6bda12207eff2a6706936a6d71e2115ceb5a799a80f3d756071712be21c4fd3e15c6249de96425a4490068d0b799957dcd372a68968ed3e17182226f11503ebe251b63245cae4e124d02f0ad893fc246cb6c4ff0825a74d5fa124aad6196bc311821763b29c1ea5082422924d9d417f9f2d958d336bc02ccfee57db4c8070e7d3487099b291b3a9e155a0babf72f64b62dee9b8b2074859c6df2e0b24236c6cc484543286b3add71f58b702c7dcdbc7a813b72b298f52797698897ece81826fcbb775011fa54f54d148fec2f48a1ea8cca95f6ea31cbae3f535e0f81f85aacd1425b0913cbe2a20cddd8139d45657af123f103ff19681a9a28ca5fd4b1c2c40cf00a2dcf3009e0fd21808cb838139d7924cb014894bed80d24b05dddcf4014a61571f5458adcf93291e553759470d7d29b6fb933b08105a27f14c3c8380b9632b20abf3e1c5cd2330d779d6cdf0423be02b7e4f5e672d26cade6be5275f0a2a07b905dc6d54c4b7a23fad1c2d7741bccacfa8c19af2837e9afa8c217d1877b38c72ea05f5316f91dfd08230284dcc45c32ef6e9e06af0937c405dd3b0755fef505deb2225c442e656f2f49b969a8f7d97a93d50372489e0eecdc867fad7d6d6daf7c28c7071d954a54458736dfeb78f51997b41b9aa5382700fda7957af06f4b5b22af364d265e3c7f161f248a3ca894c3a8cecdf292463f788112b80e7f1fb6c57f48912e1226a2ccec51cabe9c1320e26a7672c57910248e16316bda9039298f0c68bee5682b0c5e99e45712b94804b78d88521350c339b90933170fbac91d7f6de2ec17b2410421fd1924fe39f90dd74c2a2944a3844c61718c7ba091628f9815d763f511d9d90018533035874d8dfbf52addb9ada3529236b9f386d5b33093d097757ed4cc80ea17797ab16704486ff19636ee26f86ba01f783452c39be9789614ca4c55c15639b5b3677ac99cc96254ce357cd11a2877badcaa5026da0ffaf1cefec45d98205015015f54c4765f47084f5f8309ea9330d1fa4f3eee68ad7c2332dd36d4434d810ba89ec4dea79c3af6adcfaad2c3cb2f60c9625a5108f1d906d03a08cf043bcae8ad8f85cafaa0f13832e18756a9902b64d939e3e598ce97337b70c7bbc625b47a46790dc41d04be85f79a8993a77e6a6d1adcb1bf8b8b60c1a05335b55da012cca6787d8aabec0e836cfb54324c6acf80d1cbe7c345e918041c5a3324a0a6cdee29c58e3d0b875b9a5d6b22ce1ffd895df62271492e62fef13ab5bab3e03437e6ab4e635ea84e9f4c0448f784774c95ade0b1854799b7532f30b293c15905e33d8c583976819da05d8cfb3c1fc16f3cf80728571d6a185abf1aa481c84b3d23497cb41f6bf2860a870b7e27fb4747c9122dd3e7cffd3e8de768a3757d27e79c53d47f2c024b9b9debc2398c400b08535f47aff4c3d3ac7aed190a14d93732fa7819330b522b8384ae094382a6def01851675a0df238a91c1aff39ff1ca1fdd6b29bb8255cdbb2654c4e1515ffe2c6225c0fc16a7c1079266ebb44c1e7d027958a92a51959534e332e8e92e67bf4d5212484b5f89c40716c57149b0d7bd41957204a9067fae328538e76e1d443492ebdfe590456c8679a94c35842d44dda7d966db409dcb94ee5ef87434e067dec993e6bfebb082c7b27bb81391bfa3988994aaed2deea7e5471047d597455180dbb7670b92de99c061ab278c0810c16f8c1888f283dafa5ab650d859cd451241add73dd3c038ad29c8557a1fd8953f37c315f428dde3aec186c2f241e56c96ee9c70714882642c7ebc431b1b50e8e4e9645bd06c6c279918d3500492296db2e01afecd7236959e561267453adcda01bc72e0519b1bc1e84517fb16c798342e9afd1cfd001d9a68e0958d5982a85e9594d64d2cafbd49f11194b6fd43d661784b200885eececf7224b2d5403699762eab7bfbeceb40980f23d32aa9e399bf1b70bff7d305a2e76ffc97b5bcefe3d9c9a68fea9037867c974cc26208b5de1d67ccb44ebb14a65c86745aea690db7903631eff66e5e37b45b4198aaa287d8d4d46a3"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x4}, {0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "355cd7564689010f7ae412a6f895d77925a1e3d068c487f21390fb"}, @NFTA_DATA_VALUE={0x59, 0x1, "cd92707d50784b80d7d8b37008a06fd00a3f19b06cd56db293c579b3ab39ce09058684e98fa010357b31ccc3202557a89b9610f01743f9982b8200cef7ddb0a28043427d5aa29924c18362625d28108b0801503f5f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xed, 0x1, "14700941b6ad2d37242c0839eb0b20693ab8cf46116004fda79a8c60589dae9a05094d6d4a058179bb5a84db3bc03cf1312c74dd28ec22acfd6debb1fe0e1eda45697433ed86a0394102f9bdac87082c24eadf7ac8d4f2b6a19e875b606bca968d89560eae1ba3ae0c658688e4cd0d0bb888c762c4a0faa6a38e2c1696e25eee616c05d92952cbed34f792c9ffea77974c8c97ac233be023e302a9d4327480d014ea721eff46f9865b700c0faf877eb7b69f9b9eb56f85ee7ad7b25b0c11751f0d0681253a0b0464dd444c74bf6c0dbb31111fcca78b9c706e0302829071474b065c94c5a459a3b241"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x285c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000003000000400001802c00040014000100020000010000000000000000000000001400020002000000ffffffff00000000000000000d0001007564703a"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800050000020900020073797a3200000400000000000000fffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001001b000000000000000100000adb4906b917129f35a3857fa9ea9ccb13abc1af6ca14744cebcff129595cacd4a3899f82741d408b8d630f932864e073cbc99884639c1d11f9ead5b11379b7ab4781bcc04e83876e5318bbee8f04e41174befa043b866388c7b0ac0116081bb8c8487a91ba28609b97870eab73e8d4cf43226a891bdd06761"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1b0, &(0x7f0000000700)={@empty, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x17a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x6, '\x00', [@pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0xeddb, [0x80000000, 0x401, 0xfffffffffffffff9, 0xffffffffffffffff, 0xe]}}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @remote]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x27, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 13.462383063s ago: executing program 6 (id=3288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) (async) r7 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r9, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x17, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 12.922698913s ago: executing program 6 (id=3291): setpriority(0x0, 0x1, 0xa7a8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) pipe(&(0x7f0000000000)) io_setup(0x6, &(0x7f0000000540)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route_sched(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x4, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000005, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x9ab, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x0, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) 11.891948355s ago: executing program 6 (id=3294): syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x480382) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) (async) io_setup(0x4fe, &(0x7f0000000100)) (async) listen(0xffffffffffffffff, 0x3) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000400)=ANY=[@ANYBLOB="894b5486c523f5d79953e8c89eac66da0734000000347c2e4f6a90017e6ecbc184db096096231783c4ab3f8d12dedbce431aa11612dbca6a8c727a6678c4e71135d5faece88a07491060ed242d8a979ffc3bb503a782cd01a0fcd9c5a1bb5c780d00000000003b544301d7dc841ff6379ab8dcf54c7796c3b7f435b4ec6506ec91f3a6c1ca457c5bd00bcf8f20e7c8bdc4da3293af39dac071b3f4ce7a23e2b31451a1ca7da097b213b5a7ed130f776a44504877d2a151681f4a97aca80fd3128eae37c737a8c5dae3358b8bac40b32b54975844f7b31b246100"/229, @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25190000002000018008000300040000001400020067726574617030000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) 11.171292307s ago: executing program 6 (id=3298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x242, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000180)=0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f00000029c0), 0x400006d, 0x20000004) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x14, 0x2, 0x4}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xa, "8bd8f29b966070f61d22"}, &(0x7f0000000080)=0x12) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r11, 0x89e1, &(0x7f0000001040)={'sit0\x00', 0x70, 0x6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x1, 0x1, 0x9, r10}, &(0x7f0000000100)=0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="002d8aa2640f797c7000128009000100626f6e64000000000c00028008001c0009000000285a611fb6886a0e2cef212c9263acb3e635bfdfa88451993438"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 7.151108645s ago: executing program 0 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0xa, 0x1, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/214, 0xd6}], &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0xb239, 0xfffffffffffffffd, 0x5]}], 0x1) (async) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x6, 0x8c}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (async) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) (async) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000d80)={r7, 0x2}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) (async) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 7.129769478s ago: executing program 0 (id=3314): unshare(0x4040600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r3 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) 7.052933298s ago: executing program 0 (id=3315): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6e855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) unshare(0x28040680) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r4, &(0x7f0000000ac0), &(0x7f0000000a00)=@tcp6, 0x1}, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 7.001847001s ago: executing program 2 (id=3316): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x209b, 0x8, 0x0, 0x7096}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xfffffffc, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x80000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xc}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xffff, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa0}}, 0x0) 6.899086084s ago: executing program 2 (id=3317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f00007c4000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x3b6ef000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x9, 0x70bd24, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0x8004510a, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) 6.175518668s ago: executing program 8 (id=3321): syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x0, 0x14, 0x1df}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2084) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000c80)) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="030f00000000000000000701000030000280"], 0x44}}, 0x0) lseek(r0, 0xffffeffffffffffe, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x798011ccc5908918, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94) 5.153051272s ago: executing program 2 (id=3322): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x20, 0x31, 0xc, "df5da021791f31f27ae101d8"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "1e72"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="36e22842a2e1"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "e4dc"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xa}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x40, 0xd, 0x5, "3008611232"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, 0x0}) 4.833727923s ago: executing program 8 (id=3324): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x40005}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10006, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000011000010800000000fba5b7069d7d1e623924ffd41ca1ac3f9bdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0004000000"], 0x30}}, 0x801) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x840) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x46, 0x0, &(0x7f0000000240)="01112f6c192713f54fa63dbe960d549997eaa54028fca57fa736383ab1a866a40134b90fcd014f345c765cc855e44833e06ed74b3e94933efdbaa84aff84d54829ecbeb1e251", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x6a163e986af056d) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x400c1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) close(r9) 4.796926901s ago: executing program 6 (id=3325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex:\x88\xfe\xf7\x01') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = dup(r2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xfffffffb, 0x29, 0x0, 0x100, r0, 0xffff25a4, '\x00', r3, r4, 0x3, 0x2, 0x3, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.683365847s ago: executing program 8 (id=3326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) connect$inet6(r7, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 4.66258931s ago: executing program 4 (id=3327): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) syz_socket_connect_nvme_tcp() fsopen(0x0, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x3554000) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3, 0xde, 0xc, {0xc, 0x1, 0x0, 0x400, 0x0, 0x10000}, {0xd, 0x0, 0xb4, 0x7af1}, 0x401, 0xff, 0x5}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x94}}, 0x24040084) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @multicast2, r7}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21007ad02dac9fcbaa0000000000001c00123f6775a25b800900ce8b1e9cf61f68080100626f6e64000000000c00028008"], 0x3c}}, 0x4000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r3, 0x85f5, 0x4000000005, 0x4) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x1800, 0x3b3) 4.168377893s ago: executing program 4 (id=3328): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) (async) io_setup(0x1, &(0x7f0000000040)=0x0) (async) r2 = eventfd2(0x80000000, 0x80000) io_submit(r1, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r0, 0x0, 0x0, 0x400, 0x0, 0x1, r2}]) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001040), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={0x0, r7, 0x0, 0xd, &(0x7f0000001080)='/dev/urandom\x00'}, 0x30) (async) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r9, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) 3.647067251s ago: executing program 0 (id=3329): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xc, 0x4}, {0x6}}}}, 0x11) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f00000198c0)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x82) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_open_dev$vim2m(0x0, 0xe, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) 3.220658526s ago: executing program 0 (id=3330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x8c66) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x20400, 0x20) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000580)=""/133, 0x85, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd0000", 0x23) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) 3.206403052s ago: executing program 6 (id=3331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000200000008000a0000000000060002000100000008"], 0x3c}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="70000000ffffffffffffc144c84aa68365584500002c0000e0000002002c6558"], 0x3e) 3.068222227s ago: executing program 4 (id=3332): r0 = socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0xc) mount(0x0, 0x0, 0x0, 0x14020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005500)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}}, 0x84084) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffff", 0x42}], 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r4, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200a00000a0900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r10 = socket(0x10, 0x3, 0x0) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.416273946s ago: executing program 2 (id=3333): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='xen_mmu_flush_tlb_one_user\x00', r1}, 0x18) (async) r2 = fcntl$getown(r0, 0x9) prlimit64(r2, 0xa, &(0x7f0000000140)={0x3ff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000200208000240000000000800044000000003080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x6, 0x0, 0x9d7, 0xfffffffffffffe00, 0x3, 0x0, 0x6, 0x7fffffff}) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x0) (async) syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) (async) socketpair(0xf, 0x3, 0x2, 0x0) (async) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 2.159234922s ago: executing program 4 (id=3334): syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x0, 0x14, 0x1df}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2084) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000c80)) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="030f00000000000000000701000030000280"], 0x44}}, 0x0) lseek(r0, 0xffffeffffffffffe, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x798011ccc5908918, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94) 1.426213085s ago: executing program 8 (id=3335): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800", @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000dc0)={{@host, 0x3}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418, 0x1000404}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0}], 0x1, 0x4, 0x1ff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r7) sendmsg$IPSET_CMD_DESTROY(r7, 0x0, 0x4) pipe(0x0) 1.290924674s ago: executing program 4 (id=3336): mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x1200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/snmp6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000100)={0x2710, 0x2, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x18) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000008c0)={{0x2, 0x82, 0x7, 0x5, 0x7f, 0xffffffff}, 0x63, [0x6, 0x5, 0xd777, 0x9, 0x1, 0xfff, 0x0, 0x1000, 0x1, 0x9, 0x0, 0xd0, 0x19a2, 0xc0000, 0x5, 0x2, 0x677f, 0xb2, 0x3, 0x8, 0x5, 0xfffffffe, 0x1, 0x7, 0x80000000, 0xe, 0x2, 0x2, 0x9, 0x5d4100, 0x8001, 0x4, 0xfffffff9, 0x1, 0x4, 0x0, 0x800, 0x46, 0xc0, 0x0, 0x869, 0x6, 0x5d70, 0x4, 0x1, 0x3, 0x0, 0x0, 0xff, 0x3, 0x2, 0x8001, 0x6, 0x3, 0x6, 0xff, 0x4, 0x6, 0x7, 0x532, 0x1, 0x7ff, 0x5, 0x1, 0x8, 0xd, 0xf99c, 0x8000, 0x4, 0x1, 0x12d, 0x6, 0x80000000, 0x8, 0x3, 0x2040, 0xf97, 0x0, 0x1, 0x0, 0x4, 0x7, 0x3, 0x5, 0x4, 0x1, 0x5, 0x9, 0x1, 0xfffffffd, 0x1, 0x6, 0x1, 0x400, 0x0, 0xdf5b3ee1, 0x5, 0x9, 0x9, 0x9, 0xb935, 0x1, 0x6, 0x9, 0x100, 0x9, 0x18, 0x0, 0x4, 0x1, 0x3, 0x8, 0x4, 0x4, 0x7f, 0x6, 0x3, 0x40, 0x323, 0x1000, 0x5, 0xbbe, 0x100, 0x9, 0x5, 0x7, 0x8, 0x800, 0x9, 0x81, 0x5, 0x7, 0x8001, 0x0, 0x7, 0x8, 0x8, 0xc026, 0x7, 0x0, 0xfffff40c, 0x8, 0xaf, 0x7f, 0xffffff72, 0x8, 0x800, 0x6, 0xffffff81, 0x5, 0x1, 0x3, 0x2, 0x1, 0x8, 0x9, 0x9, 0x3, 0xffff0000, 0x6, 0x7fff, 0xc, 0xf, 0x2, 0x33, 0x8000, 0x4, 0x7, 0x80000001, 0xa, 0x2, 0xffffffff, 0x1bdc, 0x6, 0x40, 0x28, 0x2, 0x6, 0x0, 0x0, 0xfff, 0x1, 0x100, 0x8000, 0x4, 0x81, 0x4, 0x3, 0x3e, 0x80000001, 0x1ff, 0x9, 0x7f, 0x2, 0x8, 0x6, 0xfffffff9, 0x0, 0xffff8001, 0x3, 0x1, 0x5, 0x10, 0x4, 0x7, 0x0, 0x8, 0x9, 0xc, 0x8, 0x0, 0x8, 0x2, 0x7ff, 0x9, 0x8001, 0xfffff431, 0xffffffff, 0x0, 0x800, 0x3, 0x4, 0xcd, 0x4, 0x9, 0x1, 0x59, 0x10, 0x6, 0x7759e95, 0x8001, 0x4, 0xfffffff7, 0x8, 0x8, 0x57e3, 0x77, 0xe, 0x6, 0x309b, 0x9, 0x8, 0x10000, 0x9, 0x280, 0x1, 0x100, 0x3f, 0x7, 0xc82e, 0x1, 0x5, 0x9, 0x401, 0x1000000, 0x3, 0x7ff, 0x1, 0x9009, 0x7, 0x1, 0x7, 0x2, 0xa14, 0x0, 0x4, 0x8, 0x2, 0x2, 0xb, 0x7, 0x7fffffff, 0x9bd0, 0x7ff, 0x7, 0x6, 0xc, 0xfffffffd, 0x7, 0x6, 0x9, 0xb1, 0x6, 0x4, 0x97, 0x1ff, 0x9, 0xb71, 0x1, 0x4, 0x937, 0x9, 0x360, 0xffffffff, 0x7, 0x2, 0x1, 0x3, 0x5, 0x6e85, 0xe, 0x3, 0x7, 0x4, 0x3ffc000, 0x4, 0xfa87, 0x1, 0x80000000, 0x5, 0x8, 0x6, 0x3, 0x35df, 0x0, 0x3, 0x800, 0x80000001, 0xfbb3, 0x0, 0x7, 0x8000, 0x4, 0x9, 0x3, 0xffffffff, 0xfffffeff, 0xb, 0xd6, 0x7, 0x7, 0x9, 0x8, 0x1, 0xffff, 0x9, 0x0, 0xfffffff9, 0x9, 0xa7b, 0x2, 0x4, 0x2e, 0x3, 0x7, 0x7fffffff, 0x3ff, 0x8, 0x81, 0x7, 0x9, 0x2, 0x9, 0x299b, 0x9, 0x6, 0x50f9, 0x8, 0x401, 0x8000, 0x7, 0x2, 0x9, 0x7b1c, 0x7, 0x9, 0x8000, 0x0, 0xbd, 0x260, 0x7, 0x9, 0x9e2, 0x8, 0x84, 0x8, 0x5, 0x3, 0x8f1, 0xdcdc, 0x1, 0x9, 0x0, 0x5, 0x7, 0x1, 0xffff, 0x400, 0x9, 0x401, 0x3, 0x6, 0x1, 0xffff, 0x3, 0x3, 0x8, 0x7, 0x88b, 0x3a, 0x100, 0x7, 0x9, 0x10000, 0xffffff17, 0xfff, 0x200, 0x2, 0xe, 0x0, 0x1, 0x2, 0x20000, 0xea7, 0x10000, 0x2, 0x1, 0x2, 0x0, 0x2c, 0xaf, 0x739, 0x81, 0x4, 0x4, 0xd7, 0x4b2, 0x1, 0x7, 0x4, 0x0, 0x9, 0x2, 0x6136, 0x3, 0x2, 0x8, 0x1, 0x9, 0xfffffff7, 0x6, 0x0, 0x6, 0xe, 0x0, 0x7, 0x11b, 0x5, 0x5, 0x7, 0x6, 0x100, 0x4, 0x6, 0x7e55, 0x7, 0x9, 0x2, 0x0, 0x6, 0x1000, 0x1, 0xa, 0x7, 0xfffffffe, 0x9, 0x0, 0xc33a, 0x5, 0x6, 0x1, 0x4, 0x0, 0xb548, 0x80000, 0x7, 0x6, 0x1, 0x101, 0x8, 0x7, 0x800, 0xfffffffd, 0x2, 0x1, 0x6, 0x5, 0x40, 0x0, 0x5, 0x3, 0x6, 0xfff, 0x5, 0x8, 0xce0, 0x6, 0x8, 0xd, 0x7, 0xf8e8, 0x101, 0x0, 0x8, 0x6941, 0x8, 0xb, 0x889, 0x8, 0xb, 0x4, 0x2, 0xfffffff7, 0x0, 0xfffffffd, 0x5, 0x5d5, 0x2, 0x7, 0x5, 0x5, 0xfff, 0x10000, 0xf, 0x7, 0x2, 0x4, 0xffffffff, 0x2, 0xfffffffe, 0x5, 0x80, 0x80000001, 0xfffff000, 0x8, 0x7fffffff, 0x4, 0x0, 0x2, 0x9, 0xff, 0x8, 0x8, 0x1596a5f3, 0x1, 0x5812, 0xf, 0xfffffffd, 0x6, 0x8, 0xda8b, 0x7f, 0xfff, 0xe, 0x8, 0x7, 0xe0, 0x5, 0xbb, 0x10, 0x4, 0x2bfb, 0x5, 0x3, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8000, 0x0, 0xf8, 0x8, 0x1ff, 0x4, 0x3, 0x2, 0x6, 0xd9, 0x5, 0x7, 0x7ff, 0x4, 0x1, 0x7, 0xffffffff, 0xc, 0x1, 0x1ff, 0x1ff, 0x8, 0x8, 0x81, 0x401, 0x7f, 0xfffffffe, 0x8000, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x847, 0x0, 0x8, 0x5, 0x10000, 0xffffffff, 0xe2, 0x5, 0x3, 0x7, 0x1000, 0x1, 0x1b1c, 0x7, 0x10000, 0x2, 0x9, 0xcab, 0x3, 0xe93, 0x1, 0x3, 0x1, 0x4, 0x5, 0xff, 0x800, 0x46, 0x9, 0xd, 0x101, 0xc, 0x2, 0x7, 0x6, 0xffff0000, 0x7fffffff, 0x4, 0x0, 0x0, 0x100, 0x10001, 0x2, 0x10001, 0x7ef69411, 0xfffffff7, 0x8, 0x5, 0x8, 0x8, 0x2, 0x3ff, 0x1, 0x100, 0x6, 0x0, 0x6, 0x9, 0x2, 0xeec4, 0x40, 0x3, 0x4, 0x5, 0x0, 0x4, 0x7, 0x3, 0x0, 0xb912, 0xfff, 0x10001, 0xbf5, 0x2, 0x8, 0x2, 0x3, 0x400, 0x6, 0x0, 0x7ff, 0x5, 0x2, 0x5581, 0x0, 0x2, 0x1ff, 0x55a5e0b8, 0x970, 0x8, 0xfffffff8, 0x2, 0x40000000, 0x2800, 0x5, 0x0, 0x7, 0xfffffff9, 0x80000000, 0x5, 0x8b, 0x3ff, 0x0, 0x5, 0xb6e4, 0x0, 0xc0d, 0x3, 0x4, 0x0, 0xfffffffd, 0x9, 0x9, 0xfffffff8, 0x200, 0x0, 0x2, 0x6, 0x10, 0xb, 0x8, 0xb, 0xfff, 0x8, 0x2, 0x401, 0x3ff, 0x0, 0x9, 0x8, 0xf, 0xa, 0xd, 0x5, 0x9, 0x7, 0x8000, 0x8, 0x9, 0x1, 0x109, 0x7, 0xb, 0x276, 0xfff, 0x0, 0x10, 0x8000, 0x8, 0xbdb, 0x4, 0x8, 0x8, 0x8000, 0x4, 0x3ff, 0x7bb, 0x1, 0x1, 0x8, 0x1, 0xf62e, 0x10001, 0x8, 0x9, 0x1, 0x8, 0xfffffffa, 0x8, 0x3, 0x7a1c, 0x3, 0x0, 0x9, 0x1000, 0x1, 0xc9d, 0x9, 0x10001, 0x4, 0x4, 0x8, 0x2, 0x682, 0x8001, 0x7ff, 0x7ff, 0x101, 0xb3eb, 0x1, 0xff, 0x9, 0x9, 0x8e4, 0x1000, 0x0, 0x80000000, 0x6, 0xffff, 0x6, 0x8, 0x1, 0x6, 0x570, 0xb289, 0x1, 0xca0, 0xa9, 0xf4, 0x6, 0x5, 0x1, 0x0, 0x20000, 0x7, 0x1e45, 0x5, 0x5, 0x80000000, 0x9, 0x6, 0x7, 0x1, 0x1, 0x4, 0x0, 0x8, 0x80, 0xfff, 0xc3e8, 0xb4, 0x539, 0x6, 0x800, 0xfd7, 0x2, 0x7f, 0x9, 0x5, 0x1, 0x7, 0x7, 0xf, 0x1, 0x2, 0xfffffffa, 0x101, 0xfffffff5, 0x8000, 0x9, 0x8001, 0x4, 0x10000, 0xff, 0xecd, 0xfa, 0x7fffffff, 0xd75, 0x16, 0x1000, 0x3, 0xffffff80, 0xb, 0x2, 0x81, 0x2, 0x0, 0x7, 0x8, 0xff, 0x10000, 0x7ff, 0x5, 0x7, 0x5, 0x1ff, 0x9, 0x653b, 0x8000, 0x4, 0x4, 0x1dd, 0x7, 0x6, 0x6, 0x7ff, 0x800, 0x7, 0xffffffff, 0x2, 0x6, 0x9, 0x9, 0x0, 0x8, 0x7fff, 0x9, 0x4, 0x7, 0x2, 0xfffffdaa, 0xd9, 0x6908, 0x1ccf, 0x1, 0x5, 0x6, 0x0, 0x1, 0x7ed9, 0x7, 0xf, 0x53, 0x9, 0xee0f, 0x4, 0x5, 0xfffffff9, 0x1, 0x80, 0x4, 0x6, 0x5, 0x3, 0xfffffb02, 0xa, 0x6, 0xffffe292, 0x49, 0x5, 0x0, 0x326f, 0x19, 0x631, 0x7, 0xd, 0x8, 0x9, 0x1, 0x12, 0x8, 0x8000, 0x0, 0x3, 0x3, 0x2d, 0x6, 0x27cac4f1, 0x400, 0x52a56364, 0x9, 0x6, 0x4, 0x6, 0x5, 0x1, 0x9, 0x3, 0x1, 0xfff, 0xf7, 0x3, 0x5da, 0x400, 0x3, 0x6, 0x0, 0x352, 0x2, 0xffc, 0x6, 0x80000000, 0x1, 0x6, 0x7ff, 0x4, 0x3, 0x0, 0x7, 0xfffffff7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffffa, 0xffff, 0xa1a, 0xffff, 0x10, 0x5, 0xfe, 0x47, 0x7fffffff, 0x5, 0x9, 0x7, 0x1, 0xfffffff8, 0x12000000, 0x9, 0x8, 0x6, 0x5, 0x4, 0x7c9, 0x557, 0x9, 0x7, 0x7, 0x5, 0x8, 0x400, 0x3, 0xc9, 0x5, 0x7c, 0x400, 0x8, 0x3, 0x3fe0, 0xc]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000140a030000000000000000000a0000080c0006400000000000000005080003d350bfa2915e191e3946582a1e40000000090d00064000000000000000030900010073797a31e63600000000000073797a31000000000900010073797a300000000028000000030a010800000000000000000200000208000540fffffffb0900010073797a310000000014000000110001000000e2ffffff00000300000a"], 0xa8}}, 0x4000) r4 = open$dir(&(0x7f0000000040)='./cgroup\x00', 0x191000, 0x189) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r0, r5, &(0x7f0000000380)=0x5, 0x80000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x4, "de0f9b19e2e96ede2b18dde90b7ddfde365dbfdb401f7392cc769e12db488aeb9c0027e2d595a303e5e63de5797fe25d4421f949d6a51af9906cd6b345c63a268e02c226332f8513cf58dedd6255dc0bf5290906636da9d61382a8f23162b1041760c11b4d54e41e4eb819a775ea8c262f4f9e5e54bbdaf9dc95d9110cfe11d32fe57936fb1561dac4095107b36b4b5beb49ac1b4fb0c011ec379b2823f9dfb866c48da8728f75efe74285047740b7326bfe5d123cfa659772ed095c24ef088fef5f4472305a91d59ba0db692124cdf385ae71d4b8ddb55fab29d78bf167494054434a8d37f1511914f895a5754988e46e9e49802a03b600"}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) getdents64(r4, &(0x7f0000000140)=""/148, 0x94) 719.191718ms ago: executing program 2 (id=3337): iopl(0x3) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc7e14fca69783b68}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002dbd7000ffdbdf250300000008000800010000000c00030003000000e3ffffff04000d000a00000008000400e00000020800090000000000060006000000000005000d002300000014000c00000000000000000000000000000000017aaaa99e4bac13b5b1ddd5c31bbc2bdefcef557100ad0303d0c1f49c"], 0x64}}, 0x8084) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x24, 0x2000000, 0x0) 560.554591ms ago: executing program 8 (id=3338): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x44) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c", 0x64}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cd", 0x61}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d", 0x78}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10", 0x63}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @multicast2}, &(0x7f0000000380)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb"], 0x0, 0x58, 0x0, 0xa, 0x3}, 0x28) 539.257259ms ago: executing program 2 (id=3339): add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661f020000006f72ca6ae2a44829bfa79ec13499f8ec9077d85d68b0ce1500e6be0e7ecabfdfde0dfa00b100", 0x1}, 0x48, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000070000e3ff0000090000000100000000c796eddcfe2a9b8da9d7b6fc76024da0bb05a7193a80b0603aa8d41efb630f7cb3db9415e2d70fff93cb430928789d273bd70924702cf8ecd865b3d788b3a035e38d44dc7a16ab2ac3623f1b4403a5db332216fc332074140313b1942acd7b488a3998e84075ac2f506e97da68e3c6c4350efa7015bd502818c46b9799d537b1ef38ea37ab93054ffabc6d9ed87b663bc67ca23f56c4e7990d941c11bd6338088a64c73666592fc229858194e11c35cc1a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000768000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x40010, r3, 0x732b0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r9 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$user(&(0x7f00000001c0), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000700)="5d8784daf4f7594b195da5cd159e6506e6b1d62dbc4ff9a3e793a5189a9e76e6f6a8fe1b4cf20084ebc7576b2ac7d858888b6349a5757dac89e67c9ae4c90d2733d0b0f29dcf32ef449d62e0ecc151cbd928982fd8dd14e12476b0fa3289a82e47504bec859642dc80089529d9f0e042cd6b9b47521ccca5243dc6a493d61f50a3f1b1140925f0e14811909e", 0x8c, 0xfffffffffffffff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 211.109719ms ago: executing program 4 (id=3340): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000100)='./file0/file1\x00') r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) setreuid(0x0, 0xee00) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffc, 0x6, 0x93, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="2aa0a15ac720", 0x0, 0x8, 0x10004, 0x2, 0x0}) 171.204503ms ago: executing program 8 (id=3341): socket$inet(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r2, r2, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 0 (id=3342): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FREEZING\x00', 0x9) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000040c0)=[{{&(0x7f0000002740)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002680)=[{&(0x7f00000027c0)="339cd80f369220bcc769dbbbc3baa4fb511ddae372eee30387da56294477200a8cbe0b71cc244e88bf5fbfbfb09eceac1cf92da2077e5ef07e513235e3099bbf3589348fe022060cdd42d0a28445bf8743c882e47f1514acdaa44cbcb8bdeee17986b261aadddbf2a28815aa014c150d0639fb7ef6ced1de853606217a1957b05670124492957072070ef4f6bb2b5bb51c06dc4e265c80a337f94617ef7b0cdb83b88d619564d1aa55b10d20eb1573", 0xaf}, {&(0x7f0000002880)="e19cbf4faf6be8360efdf210b8d8da8eacf6bf55dbf75d5bf936a2ce4512be7d51bb0846e25c2c09e597fee7a03bf6cef08d6d86ffcf05e570f8661847eaff34eb251ed93d91e7d44406852cc1a5c04a57307e9a1fe8cfefa63c52c2037939d2075be22a253fab4f20d3f1f7930fb7d3142de5ef8e351a0bce151476085839c12ea40fcfe3f486c2664dac2ed14014d7", 0x90}, {&(0x7f0000004180)="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", 0x1027}], 0x3, &(0x7f0000003940)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x80}}, {{&(0x7f00000039c0)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a40)="3543af7254db012895522a73aa843f57b5a5b2b22fe7050a61778d3b5e70165255b5423d3d1a39aada52c153c4b83992b98897cacf16542aaafad1a401ecf4d9fb59406503f30d55d3260ef42d87c2213752d9387caae4c8022814717328787dcf1da43662a903516c7541eddf27447fe9e1856c", 0x74}, {&(0x7f0000003ac0)="84ccb50d95b2237d9a934cf5ffba29196a", 0x11}, {&(0x7f0000003b80)="d6b4832c10bb40a0208e3e09fa107cda7a2df8addaf41a89f0a0257d5c98c68d56f974b47fec9f7c7d7440b7fa6049c40ad3180cb2a910a3ea140e78455fa64f9c37c2854f83f2bf2ffdc6e76ba0efca07d255e3692dc740f11f800c94e98fe330189e75db21f508a318b29d8832e79238fa755f", 0x74}], 0x3, &(0x7f0000003dc0)=[@rights={{0x2c, 0x1, 0x1, [r10, r9, r7, r1, r9, r9, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x88, 0x4}}, {{&(0x7f0000003e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f00)="67222589037ec5d01228261bb92fc7165e695819ac5d7097c49687fe6cfa54e072a4f3e38294915542317938731a0265e5ef3eb3f82a7c7e02", 0x39}, {&(0x7f0000003f40)="5e96718bc406f058dc1c2a8575c905333b23270ddce625921aef73e0827551166cb18df50479de96ad27edfdd80bdc21a714b19eacbc1db13fffd0389c0e707d1e0e870a03720b0867847a40c2ee156203334e6c8105dcb802aae49128a069c345a5f1e5681cbbccf231442656251ee9b5bf055249d38247b249962f388ec77833d0a76fba9641c73ed7551d91c69ef9a5b36edcfe480cd723eda588154bab413b33c81a5f0131d92f65fcf810734f96eee4a1a93e6c96d504676579590bb8ffe23dee609367313d76a5b2983f", 0xcd}], 0x2, &(0x7f0000004080)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x40, 0x4004050}}], 0x3, 0x800) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) process_vm_writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000400)=""/171, 0xab}], 0x4, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/71, 0x47}, {&(0x7f0000000500)=""/11, 0xb}, {&(0x7f0000000540)=""/66, 0x42}, {&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x6, 0x0) kernel console output (not intermixed with test programs): 5875] em28xx 3-1:0.132: Registering V4L2 extension [ 862.002761][T14193] usb 3-1: USB disconnect, device number 88 [ 862.011308][T14193] em28xx 3-1:0.132: Disconnecting em28xx [ 862.601289][T19132] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 862.687450][ T5875] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 862.716097][ T5875] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 862.740438][ T5875] em28xx 3-1:0.132: No AC97 audio processor [ 862.754321][ T5822] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 862.774934][ T5875] usb 3-1: Decoder not found [ 862.796864][ T5875] em28xx 3-1:0.132: failed to create media graph [ 862.833779][ T5875] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 862.872849][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 862.897764][ T5875] em28xx 3-1:0.132: Remote control support is not available for this card. [ 862.934208][T19150] netlink: 'syz.2.2984': attribute type 10 has an invalid length. [ 862.942542][T14193] em28xx 3-1:0.132: Closing input extension [ 862.966464][ T5822] usb 5-1: USB disconnect, device number 9 [ 862.983334][T19150] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2984'. [ 863.012027][T14193] em28xx 3-1:0.132: Freeing device [ 863.054887][T11687] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 863.236752][T11687] usb 7-1: Using ep0 maxpacket: 32 [ 863.246978][T11687] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 863.271698][T11687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.289161][T11687] usb 7-1: config 0 descriptor?? [ 863.302135][T11687] gspca_main: sunplus-2.14.0 probing 041e:400b [ 863.521637][ T6536] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 863.674948][ T6536] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.694898][T19141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.703458][ T6536] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 863.717144][ T6536] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.726554][T19141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.733840][T19204] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 863.734650][ T6536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.753942][ T6536] usb 5-1: Product: syz [ 863.758152][ T6536] usb 5-1: Manufacturer: syz [ 863.764839][ T6536] usb 5-1: SerialNumber: syz [ 863.775478][ T6536] cdc_mbim 5-1:1.0: skipping garbage [ 864.137325][T19185] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 864.201274][T19215] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 864.213784][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2990'. [ 864.225316][T19215] sch_tbf: burst 88 is lower than device batadv0 mtu (1514) ! [ 864.235220][T11687] gspca_sunplus: reg_r err -71 [ 864.240119][T11687] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 864.259240][T11687] usb 7-1: USB disconnect, device number 40 [ 864.656504][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 864.656520][ T30] audit: type=1400 audit(26245.766:2162): avc: denied { unmount } for pid=18488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 864.806548][T19185] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 864.817844][ T6536] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 864.836235][ T6536] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 864.845971][ T6536] wwan wwan0: port wwan0mbim0 attached [ 864.876664][ T6536] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, aa:85:5c:23:6c:56 [ 865.145560][T11687] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 865.163944][T19254] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 865.267464][T14193] usb 5-1: USB disconnect, device number 10 [ 865.278881][T14193] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 865.324330][T14193] wwan wwan0: port wwan0mbim0 disconnected [ 865.331448][T11687] usb 3-1: Using ep0 maxpacket: 32 [ 865.344766][T11687] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 865.357130][T11687] usb 3-1: config 0 has no interface number 0 [ 865.366958][T11687] usb 3-1: config 0 interface 80 has no altsetting 0 [ 865.375975][T11687] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice=3a.1a [ 865.385586][T11687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.394551][T11687] usb 3-1: Product: syz [ 865.400272][T11687] usb 3-1: Manufacturer: syz [ 865.404880][T11687] usb 3-1: SerialNumber: syz [ 865.411291][T11687] usb 3-1: config 0 descriptor?? [ 865.559820][ T6536] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 865.702608][ T6536] usb 1-1: Using ep0 maxpacket: 8 [ 865.715687][ T6536] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 865.741971][ T6536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.762029][ T6536] usb 1-1: config 0 descriptor?? [ 865.824899][T11687] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 865.899770][T19289] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 865.941311][T11687] usb 3-1: USB disconnect, device number 89 [ 865.992675][ T30] audit: type=1400 audit(26247.163:2163): avc: denied { write } for pid=19301 comm="syz.2.3000" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 866.027547][ T30] audit: type=1400 audit(26247.194:2164): avc: denied { open } for pid=19301 comm="syz.2.3000" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 866.249891][ T6536] a4tech 0003:09DA:001A.0023: hidraw0: USB HID v0.05 Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0 [ 866.476639][T19265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.518967][T19265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.588265][ T6536] usb 1-1: USB disconnect, device number 117 [ 866.828541][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3000'. [ 866.839174][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3000'. [ 867.064666][ T30] audit: type=1400 audit(26248.286:2165): avc: denied { execute } for pid=19293 comm="syz.4.2998" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 867.146622][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3002'. [ 867.945302][ T30] audit: type=1400 audit(26249.220:2166): avc: denied { write } for pid=19336 comm="syz.2.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 867.986049][ T30] audit: type=1400 audit(26249.252:2167): avc: denied { shutdown } for pid=19336 comm="syz.2.3004" lport=43298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 868.027778][ T30] audit: type=1400 audit(26249.262:2168): avc: denied { create } for pid=19293 comm="syz.4.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 868.047786][ T30] audit: type=1400 audit(26249.283:2169): avc: denied { write } for pid=19293 comm="syz.4.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 868.490757][ T30] audit: type=1400 audit(26249.787:2170): avc: denied { ioctl } for pid=19359 comm="syz.2.3007" path="socket:[68663]" dev="sockfs" ino=68663 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 868.566466][ T30] audit: type=1400 audit(26249.871:2171): avc: denied { create } for pid=19363 comm="syz.2.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 868.998107][ T6153] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 869.196996][ T6153] usb 1-1: Using ep0 maxpacket: 16 [ 869.218543][ T6153] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 869.230572][ T6153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 869.271194][ T6153] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 869.286095][ T6153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.294776][ T6153] usb 1-1: Product: syz [ 869.299047][ T6153] usb 1-1: Manufacturer: syz [ 869.311235][ T6153] usb 1-1: SerialNumber: syz [ 869.323838][ T6153] usb 1-1: config 0 descriptor?? [ 869.334271][ T6153] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 869.343776][ T6153] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 870.304164][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 870.304179][ T30] audit: type=1400 audit(26251.583:2179): avc: denied { setopt } for pid=19379 comm="syz.6.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 870.304216][ T30] audit: type=1400 audit(26251.688:2180): avc: denied { bind } for pid=19379 comm="syz.6.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 870.304247][ T30] audit: type=1400 audit(26251.688:2181): avc: denied { read write } for pid=19379 comm="syz.6.3012" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.304282][ T30] audit: type=1400 audit(26251.688:2182): avc: denied { open } for pid=19379 comm="syz.6.3012" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.304315][ T30] audit: type=1400 audit(26251.698:2183): avc: denied { ioctl } for pid=19379 comm="syz.6.3012" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.330624][T19385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.331063][T19385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.619847][ T30] audit: type=1400 audit(26252.024:2184): avc: denied { bind } for pid=19382 comm="syz.2.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 870.921268][ T6153] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 870.937631][ T6153] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 870.960372][ T6153] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 870.977380][ T6153] em28xx 1-1:0.0: No AC97 audio processor [ 871.160983][ T6153] usb 1-1: USB disconnect, device number 118 [ 871.326021][ T6153] em28xx 1-1:0.0: Disconnecting em28xx [ 871.365109][ T6153] em28xx 1-1:0.0: Freeing device [ 871.654911][ T30] audit: type=1400 audit(26253.105:2185): avc: denied { create } for pid=19420 comm="syz.8.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 871.774525][T19425] SELinux: policydb magic number 0xcf334487 does not match expected magic number 0xf97cff8c [ 871.785161][ T30] audit: type=1400 audit(26253.242:2186): avc: denied { load_policy } for pid=19420 comm="syz.8.3016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 871.805838][T19425] SELinux: failed to load policy [ 872.028794][T19441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.062346][T19441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.076497][ T30] audit: type=1400 audit(26253.557:2187): avc: denied { connect } for pid=19439 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 872.179519][ T6153] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 872.331932][ T6153] usb 1-1: Using ep0 maxpacket: 32 [ 872.339602][ T6153] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 872.359852][ T6153] usb 1-1: config 0 has no interface number 0 [ 872.372601][ T6153] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 872.397627][ T6153] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 872.419970][ T6153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.438396][ T6153] usb 1-1: Product: syz [ 872.452369][ T6153] usb 1-1: Manufacturer: syz [ 872.466274][ T6153] usb 1-1: SerialNumber: syz [ 872.480884][ T6153] usb 1-1: config 0 descriptor?? [ 872.492474][T19440] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 872.596398][ T30] audit: type=1400 audit(26254.103:2188): avc: denied { read write } for pid=19458 comm="syz.6.3014" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 872.662237][T19461] random: crng reseeded on system resumption [ 872.702834][ T6153] asix 1-1:0.191: probe with driver asix failed with error -71 [ 872.739825][ T6153] usb 1-1: USB disconnect, device number 119 [ 872.950833][ T5923] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 873.093903][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 873.100384][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.112239][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.123609][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 873.142143][ T5923] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 873.151218][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.171000][ T5923] usb 7-1: config 0 descriptor?? [ 873.371099][ T5923] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 873.379247][ T5923] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 873.387526][ T5923] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 873.396297][ T5923] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 873.412286][ T5923] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 873.438846][ T5923] input: HID 0955:7214 Haptics as /devices/virtual/input/input51 [ 873.468756][ T5923] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 873.477259][ T5923] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 873.582804][ T6536] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 873.595135][ T5923] usb 7-1: USB disconnect, device number 41 [ 873.605823][ T6536] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 873.638422][ T6536] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 873.680722][T19518] FAULT_INJECTION: forcing a failure. [ 873.680722][T19518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 873.694321][T19518] CPU: 1 UID: 0 PID: 19518 Comm: syz.0.3025 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.694349][T19518] Tainted: [L]=SOFTLOCKUP [ 873.694355][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.694366][T19518] Call Trace: [ 873.694372][T19518] [ 873.694379][T19518] dump_stack_lvl+0x16c/0x1f0 [ 873.694407][T19518] should_fail_ex+0x512/0x640 [ 873.694427][T19518] _copy_from_iter+0x2a4/0x16c0 [ 873.694456][T19518] ? __build_skb_around+0x278/0x390 [ 873.694482][T19518] ? __pfx__copy_from_iter+0x10/0x10 [ 873.694506][T19518] ? __alloc_skb+0x35d/0x410 [ 873.694522][T19518] ? __pfx___alloc_skb+0x10/0x10 [ 873.694538][T19518] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 873.694573][T19518] pfkey_sendmsg+0x1d1/0x850 [ 873.694600][T19518] ____sys_sendmsg+0xa5d/0xc30 [ 873.694624][T19518] ? copy_msghdr_from_user+0x10a/0x160 [ 873.694643][T19518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.694678][T19518] ___sys_sendmsg+0x134/0x1d0 [ 873.694698][T19518] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.694729][T19518] ? find_held_lock+0x2b/0x80 [ 873.694771][T19518] __sys_sendmmsg+0x200/0x420 [ 873.694794][T19518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 873.694812][T19518] ? __schedule+0x10b9/0x5ee0 [ 873.694853][T19518] ? fput+0x70/0xf0 [ 873.694872][T19518] ? rcu_is_watching+0x12/0xc0 [ 873.694892][T19518] __x64_sys_sendmmsg+0x9c/0x100 [ 873.694911][T19518] ? lockdep_hardirqs_on+0x7c/0x110 [ 873.694933][T19518] do_syscall_64+0xcd/0xf80 [ 873.694958][T19518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.694974][T19518] RIP: 0033:0x7fa9c278f749 [ 873.694989][T19518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.695004][T19518] RSP: 002b:00007fa9c35a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 873.695021][T19518] RAX: ffffffffffffffda RBX: 00007fa9c29e6180 RCX: 00007fa9c278f749 [ 873.695032][T19518] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000006 [ 873.695041][T19518] RBP: 00007fa9c35a4090 R08: 0000000000000000 R09: 0000000000000000 [ 873.695051][T19518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.695061][T19518] R13: 00007fa9c29e6218 R14: 00007fa9c29e6180 R15: 00007ffdcf287f08 [ 873.695086][T19518] [ 873.933362][ T6536] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 875.223618][T19583] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3034'. [ 875.235065][T19583] netlink: 'syz.6.3034': attribute type 9 has an invalid length. [ 875.243015][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'. [ 875.431475][T19586] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 875.455936][T19585] IPVS: stopping master sync thread 19586 ... [ 875.530237][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 875.530251][ T30] audit: type=1400 audit(26257.179:2202): avc: denied { write } for pid=19587 comm="syz.0.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 876.009080][T19597] FAULT_INJECTION: forcing a failure. [ 876.009080][T19597] name failslab, interval 1, probability 0, space 0, times 0 [ 876.021902][T19597] CPU: 0 UID: 0 PID: 19597 Comm: syz.2.3037 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.021933][T19597] Tainted: [L]=SOFTLOCKUP [ 876.021939][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.021950][T19597] Call Trace: [ 876.021956][T19597] [ 876.021963][T19597] dump_stack_lvl+0x16c/0x1f0 [ 876.021992][T19597] should_fail_ex+0x512/0x640 [ 876.022008][T19597] ? kmem_cache_alloc_noprof+0x62/0x770 [ 876.022029][T19597] should_failslab+0xc2/0x120 [ 876.022051][T19597] kmem_cache_alloc_noprof+0x83/0x770 [ 876.022070][T19597] ? skb_clone+0x190/0x3f0 [ 876.022095][T19597] ? skb_clone+0x190/0x3f0 [ 876.022112][T19597] skb_clone+0x190/0x3f0 [ 876.022132][T19597] pfkey_process+0xc6/0x840 [ 876.022154][T19597] ? trace_contention_end+0xdd/0x110 [ 876.022176][T19597] ? __mutex_lock+0x27b/0x1ca0 [ 876.022200][T19597] ? __pfx_pfkey_process+0x10/0x10 [ 876.022243][T19597] ? pfkey_sendmsg+0x1a4/0x850 [ 876.022268][T19597] pfkey_sendmsg+0x42c/0x850 [ 876.022294][T19597] ____sys_sendmsg+0xa5d/0xc30 [ 876.022319][T19597] ? copy_msghdr_from_user+0x10a/0x160 [ 876.022338][T19597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.022365][T19597] ? __pfx__kstrtoull+0x10/0x10 [ 876.022391][T19597] ___sys_sendmsg+0x134/0x1d0 [ 876.022411][T19597] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.022443][T19597] ? find_held_lock+0x2b/0x80 [ 876.022485][T19597] __sys_sendmmsg+0x200/0x420 [ 876.022508][T19597] ? __pfx___sys_sendmmsg+0x10/0x10 [ 876.022525][T19597] ? __schedule+0x10b9/0x5ee0 [ 876.022566][T19597] ? fput+0x70/0xf0 [ 876.022585][T19597] ? rcu_is_watching+0x12/0xc0 [ 876.022606][T19597] __x64_sys_sendmmsg+0x9c/0x100 [ 876.022624][T19597] ? lockdep_hardirqs_on+0x7c/0x110 [ 876.022648][T19597] do_syscall_64+0xcd/0xf80 [ 876.022673][T19597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.022690][T19597] RIP: 0033:0x7f456b18f749 [ 876.022704][T19597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.022720][T19597] RSP: 002b:00007f456bf46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 876.022737][T19597] RAX: ffffffffffffffda RBX: 00007f456b3e6180 RCX: 00007f456b18f749 [ 876.022747][T19597] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000006 [ 876.022757][T19597] RBP: 00007f456bf46090 R08: 0000000000000000 R09: 0000000000000000 [ 876.022767][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.022777][T19597] R13: 00007f456b3e6218 R14: 00007f456b3e6180 R15: 00007ffd051f9778 [ 876.022803][T19597] [ 876.927013][ T30] audit: type=1400 audit(26258.649:2203): avc: denied { unlink } for pid=19608 comm="syz.2.3040" name="#72" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 876.949342][T19609] overlayfs: statfs failed on './file0' [ 876.955962][ T30] audit: type=1400 audit(26258.649:2204): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.81 dest=34898 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 876.987784][T19609] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3040'. [ 877.393722][T19630] 9pnet_fd: Insufficient options for proto=fd [ 877.393871][ T30] audit: type=1400 audit(26259.132:2205): avc: denied { block_suspend } for pid=19624 comm="syz.2.3044" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 877.568530][ T30] audit: type=1326 audit(26259.321:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19637 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 877.605938][ T30] audit: type=1326 audit(26259.321:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19637 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 877.741740][ T30] audit: type=1326 audit(26259.321:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19637 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 877.797456][ T30] audit: type=1326 audit(26259.321:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19637 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 877.835864][T19655] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3049'. [ 877.847298][T19655] netlink: 'syz.8.3049': attribute type 9 has an invalid length. [ 877.855051][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3049'. [ 877.927612][ T30] audit: type=1326 audit(26259.321:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19637 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 877.962123][T19658] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 877.995012][ T30] audit: type=1326 audit(26259.352:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19637 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 878.829001][T19669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3052'. [ 879.280158][ T5875] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 879.449803][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 879.462098][ T5875] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 879.475954][ T5875] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 879.487969][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.555557][ T5875] usb 3-1: Product: syz [ 879.561377][ T5875] usb 3-1: Manufacturer: syz [ 879.595058][ T5875] usb 3-1: SerialNumber: syz [ 880.257643][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3058'. [ 880.304039][T11687] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 880.440088][T19703] FAULT_INJECTION: forcing a failure. [ 880.440088][T19703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.891962][ T5875] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 880.900854][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.8.3060 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.900887][T19703] Tainted: [L]=SOFTLOCKUP [ 880.900894][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 880.900904][T19703] Call Trace: [ 880.900910][T19703] [ 880.900917][T19703] dump_stack_lvl+0x16c/0x1f0 [ 880.900945][T19703] should_fail_ex+0x512/0x640 [ 880.900965][T19703] _copy_from_iter+0x2a4/0x16c0 [ 880.900993][T19703] ? __asan_memset+0x23/0x50 [ 880.901013][T19703] ? __pfx__copy_from_iter+0x10/0x10 [ 880.901039][T19703] ? __alloc_skb+0x220/0x410 [ 880.901057][T19703] ? __pfx___alloc_skb+0x10/0x10 [ 880.901078][T19703] skb_copy_datagram_from_iter+0x124/0x740 [ 880.901114][T19703] tun_get_user+0x1850/0x3cc0 [ 880.901153][T19703] ? __pfx_tun_get_user+0x10/0x10 [ 880.901179][T19703] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 880.901205][T19703] ? find_held_lock+0x2b/0x80 [ 880.901233][T19703] ? tun_get+0x191/0x370 [ 880.901262][T19703] tun_chr_write_iter+0xdc/0x210 [ 880.901280][T19703] vfs_write+0x7d3/0x11d0 [ 880.901303][T19703] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 880.901332][T19703] ? __pfx_vfs_write+0x10/0x10 [ 880.901349][T19703] ? find_held_lock+0x2b/0x80 [ 880.901391][T19703] ksys_write+0x12a/0x250 [ 880.901412][T19703] ? __pfx_ksys_write+0x10/0x10 [ 880.901440][T19703] do_syscall_64+0xcd/0xf80 [ 880.901464][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.901479][T19703] RIP: 0033:0x7f1bac98f749 [ 880.901492][T19703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.901507][T19703] RSP: 002b:00007f1bad7b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.901522][T19703] RAX: ffffffffffffffda RBX: 00007f1bacbe5fa0 RCX: 00007f1bac98f749 [ 880.901532][T19703] RDX: 000000000000003e RSI: 0000200000000280 RDI: 0000000000000003 [ 880.901542][T19703] RBP: 00007f1bad7b2090 R08: 0000000000000000 R09: 0000000000000000 [ 880.901550][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.901559][T19703] R13: 00007f1bacbe6038 R14: 00007f1bacbe5fa0 R15: 00007fff64020088 [ 880.901584][T19703] [ 880.906461][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 880.906475][ T30] audit: type=1400 audit(26262.827:2232): avc: denied { read } for pid=19701 comm="syz.4.3059" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 881.245844][ T30] audit: type=1400 audit(26262.827:2233): avc: denied { open } for pid=19701 comm="syz.4.3059" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 881.249542][T11687] usb 1-1: config 12 has an invalid interface number: 121 but max is 0 [ 881.270189][ T30] audit: type=1400 audit(26263.090:2234): avc: denied { ioctl } for pid=19701 comm="syz.4.3059" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 881.498036][ T30] audit: type=1400 audit(26263.090:2235): avc: denied { set_context_mgr } for pid=19701 comm="syz.4.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 881.526734][ T5875] usb 3-1: device descriptor read/all, error -71 [ 881.547364][T11687] usb 1-1: config 12 has no interface number 0 [ 881.557166][T11687] usb 1-1: config 12 interface 121 has no altsetting 0 [ 881.568755][T11687] usb 1-1: New USB device found, idVendor=0421, idProduct=0154, bcdDevice= 3.9b [ 881.592478][T11687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.607011][T11687] usb 1-1: Product: syz [ 881.611918][T11687] usb 1-1: Manufacturer: syz [ 881.616517][T11687] usb 1-1: SerialNumber: syz [ 881.665202][T19726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3061'. [ 881.667572][ T30] audit: type=1400 audit(26263.615:2236): avc: denied { create } for pid=19722 comm="syz.4.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 881.710858][T19726] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3061'. [ 881.732018][ T30] audit: type=1400 audit(26263.667:2237): avc: denied { create } for pid=19722 comm="syz.4.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 881.778355][ T30] audit: type=1400 audit(26263.741:2238): avc: denied { write } for pid=19722 comm="syz.4.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 881.815666][T19736] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3065'. [ 881.833091][T11687] usb 1-1: bad CDC descriptors [ 882.005093][T11687] usb 1-1: USB disconnect, device number 120 [ 882.031678][ T5971] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 882.183826][ T5971] usb 5-1: descriptor type invalid, skip [ 882.190200][ T5971] usb 5-1: descriptor type invalid, skip [ 882.201160][ T5971] usb 5-1: config 6 has an invalid interface number: 158 but max is 0 [ 882.218424][ T5971] usb 5-1: config 6 has no interface number 0 [ 882.233519][ T5971] usb 5-1: config 6 interface 158 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 882.261421][ T5971] usb 5-1: config 6 interface 158 altsetting 1 endpoint 0xE has invalid maxpacket 1056, setting to 64 [ 882.289449][ T5971] usb 5-1: config 6 interface 158 has no altsetting 0 [ 882.298798][ T5971] usb 5-1: New USB device found, idVendor=1462, idProduct=8807, bcdDevice= d.71 [ 882.316682][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.333609][ T5971] usb 5-1: Product: Б [ 882.337880][ T5971] usb 5-1: SerialNumber: syz [ 882.770538][ T6536] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 882.820292][ T5875] usb 3-1: USB disconnect, device number 90 [ 882.853734][ T5971] usb 5-1: USB disconnect, device number 11 [ 882.886040][ T30] audit: type=1400 audit(26264.906:2239): avc: denied { setopt } for pid=19763 comm="syz.0.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 882.933424][ T6536] usb 7-1: Using ep0 maxpacket: 32 [ 882.944250][ T6536] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 882.965871][ T6536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.001491][ T6536] usb 7-1: Product: syz [ 883.020354][ T6536] usb 7-1: Manufacturer: syz [ 883.024988][ T6536] usb 7-1: SerialNumber: syz [ 883.063677][ T6536] usb 7-1: config 0 descriptor?? [ 883.178546][T19776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3066'. [ 884.234743][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3070'. [ 884.251239][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3070'. [ 884.691114][ T6536] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 884.713267][ T6536] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 884.730197][ T6536] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 884.762210][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'. [ 884.823210][ T30] audit: type=1400 audit(26266.933:2240): avc: denied { create } for pid=19786 comm="syz.4.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 884.859556][ T30] audit: type=1400 audit(26266.933:2241): avc: denied { connect } for pid=19786 comm="syz.4.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 885.051355][ T6536] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 885.098925][T19803] Device name cannot be null; rc = [-22] [ 885.208290][T11687] kernel read not supported for file /media6 (pid: 11687 comm: kworker/0:7) [ 885.284328][T19809] all (unregistering): Released all slaves [ 885.453679][ T6536] usb 7-1: USB disconnect, device number 42 [ 885.716274][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 885.716306][ T30] audit: type=1400 audit(26267.867:2245): avc: denied { create } for pid=19886 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 885.960198][ T30] audit: type=1400 audit(26267.867:2246): avc: denied { bind } for pid=19886 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 886.215900][ T30] audit: type=1400 audit(26268.403:2247): avc: denied { getopt } for pid=19896 comm="syz.2.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 886.262904][T19899] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 886.286990][T19899] SELinux: failed to load policy [ 886.432202][T19892] xt_hashlimit: size too large, truncated to 1048576 [ 886.448130][T19910] openvswitch: netlink: IP tunnel dst address not specified [ 886.537898][ T30] audit: type=1400 audit(26268.728:2248): avc: denied { ioctl } for pid=19908 comm="syz.0.3081" path="socket:[68274]" dev="sockfs" ino=68274 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 886.576838][T19910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3080'. [ 886.599928][ T30] audit: type=1400 audit(26268.812:2249): avc: denied { connect } for pid=19891 comm="syz.6.3076" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 886.632972][T19910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19910 comm=syz.2.3080 [ 886.646732][T19910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3080'. [ 886.670703][ T30] audit: type=1400 audit(26268.833:2250): avc: denied { write } for pid=19891 comm="syz.6.3076" laddr=fe80::13 lport=256 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 887.283471][ T30] audit: type=1400 audit(26269.515:2251): avc: denied { bind } for pid=19924 comm="syz.0.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 887.324549][ T30] audit: type=1400 audit(26269.515:2252): avc: denied { node_bind } for pid=19924 comm="syz.0.3085" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 887.741620][ T30] audit: type=1400 audit(26269.998:2253): avc: denied { ioctl } for pid=19940 comm="syz.6.3088" path="socket:[68301]" dev="sockfs" ino=68301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 888.526886][T19963] fuse: Bad value for 'user_id' [ 888.531840][T19963] fuse: Bad value for 'user_id' [ 888.769522][T19958] IPVS: persistence engine module ip_vs_pe_ not found [ 888.769988][T19965] nfs: Unknown parameter '&[#' [ 889.942899][ T30] audit: type=1400 audit(26271.668:2254): avc: denied { read write } for pid=19968 comm="syz.0.3093" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 890.276490][ T89] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 890.353599][T19987] pim6reg1: entered promiscuous mode [ 890.358988][T19987] pim6reg1: entered allmulticast mode [ 890.489340][T19993] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3098'. [ 890.499310][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.523886][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.542776][ T89] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 890.573886][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.596461][ T89] usb 1-1: config 0 descriptor?? [ 890.604273][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 890.604288][ T30] audit: type=1400 audit(26273.012:2261): avc: denied { write } for pid=19995 comm="syz.2.3100" path="socket:[69242]" dev="sockfs" ino=69242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 890.616036][T19988] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3098'. [ 891.378128][ T89] kye 0003:0458:5017.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 891.390942][ T89] kye 0003:0458:5017.0025: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0 [ 891.411850][ T89] kye 0003:0458:5017.0025: tablet-enabling feature report not found [ 891.460527][ T89] kye 0003:0458:5017.0025: tablet enabling failed [ 891.474570][ T89] usb 1-1: USB disconnect, device number 121 [ 891.603991][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 891.933244][ T5822] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 892.213115][T20047] No such timeout policy "syz0" [ 892.223258][ T30] audit: type=1400 audit(26274.702:2262): avc: denied { getopt } for pid=19985 comm="syz.4.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 892.307661][T20039] futex_wake_op: syz.2.3106 tries to shift op by -1; fix this program [ 892.321526][T19993] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3098'. [ 892.331879][ T5822] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 892.346605][ T30] audit: type=1400 audit(26274.702:2263): avc: denied { setopt } for pid=19985 comm="syz.4.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 892.352833][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.529842][T20051] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 892.607474][T19993] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3098'. [ 892.617485][T19993] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3098'. [ 892.649043][ T30] audit: type=1400 audit(26275.101:2264): avc: denied { write } for pid=20048 comm="syz.0.3109" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 892.743580][ T5822] usb 7-1: Product: syz [ 892.747768][ T5822] usb 7-1: Manufacturer: syz [ 892.752328][ T5822] usb 7-1: SerialNumber: syz [ 892.898414][ T30] audit: type=1400 audit(26275.416:2265): avc: denied { create } for pid=20060 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 892.924087][ T30] audit: type=1400 audit(26275.437:2266): avc: denied { bind } for pid=20060 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 892.943556][ T30] audit: type=1400 audit(26275.437:2267): avc: denied { listen } for pid=20060 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 892.971571][ T30] audit: type=1400 audit(26275.437:2268): avc: denied { connect } for pid=20060 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 893.003050][ T30] audit: type=1400 audit(26275.437:2269): avc: denied { accept } for pid=20060 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 893.036954][ T30] audit: type=1400 audit(26275.437:2270): avc: denied { write } for pid=20060 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 893.223775][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 893.267040][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 893.942765][ T6536] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 894.095207][ T6536] usb 3-1: Using ep0 maxpacket: 8 [ 894.102465][ T6536] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 894.112776][ T6536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.159955][ T6536] pvrusb2: Hardware description: Terratec Grabster AV400 [ 894.177420][ T6536] pvrusb2: ********** [ 894.187348][ T6536] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 894.202313][ T6536] pvrusb2: Important functionality might not be entirely working. [ 894.218073][ T6536] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 894.237709][ T6536] pvrusb2: ********** [ 894.405125][T20080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.421127][T20080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.442641][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 894.465133][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 894.528985][ T2340] pvrusb2: Invalid write control endpoint [ 894.551081][ T6536] usb 3-1: USB disconnect, device number 91 [ 894.635595][ T2340] pvrusb2: Invalid write control endpoint [ 894.645293][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 894.659177][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 894.696831][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 894.746349][T20120] CIFS mount error: No usable UNC path provided in device string! [ 894.746349][T20120] [ 894.757754][T20120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 894.784240][ T2340] pvrusb2: Device being rendered inoperable [ 894.790425][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 894.792344][T20120] netlink: 6716 bytes leftover after parsing attributes in process `syz.2.3119'. [ 894.800280][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 894.862635][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 894.889978][ T2340] pvrusb2: Attached sub-driver cx25840 [ 894.900971][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 894.924053][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 894.924711][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 894.933427][ T6153] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 894.963235][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 895.023936][ T5822] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 895.062517][ T5822] usb 7-1: USB disconnect, device number 43 [ 895.156174][ T6153] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 895.176736][ T6153] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.193416][ T6153] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 895.216470][ T6153] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 895.226424][ T6153] usb 5-1: Product: syz [ 895.232715][ T6153] usb 5-1: Manufacturer: syz [ 895.238664][ T6153] usb 5-1: SerialNumber: syz [ 895.252231][ T6153] usb 5-1: config 0 descriptor?? [ 895.261442][ T6153] usb 5-1: selecting invalid altsetting 0 [ 895.352714][ T89] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 895.487586][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 895.487597][ T30] audit: type=1400 audit(26278.135:2277): avc: denied { append } for pid=20155 comm="syz.6.3121" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 895.536278][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.564640][ T6536] usb 5-1: USB disconnect, device number 12 [ 895.572956][ T89] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 895.603007][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.617840][ T89] usb 1-1: config 0 descriptor?? [ 895.918678][T20193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20193 comm=syz.8.3126 [ 896.258370][T20196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20196 comm=syz.8.3126 [ 896.271094][ T30] audit: type=1400 audit(26278.587:2278): avc: denied { connect } for pid=20180 comm="syz.6.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 896.363817][T20199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=20199 comm=syz.8.3126 [ 896.434158][T20189] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 896.458903][ T89] usbhid 1-1:0.0: can't add hid device: -71 [ 896.591240][ T89] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 896.603525][ T89] usb 1-1: USB disconnect, device number 122 [ 897.038313][ T89] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 897.327084][ T30] audit: type=1400 audit(26280.067:2279): avc: denied { watch } for pid=20211 comm="syz.4.3128" path="/589/file0" dev="tmpfs" ino=3217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 897.601370][ T30] audit: type=1400 audit(26280.067:2280): avc: denied { watch_sb watch_reads } for pid=20211 comm="syz.4.3128" path="/589/file0" dev="tmpfs" ino=3217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 897.647645][T20179] futex_wake_op: syz.2.3123 tries to shift op by -1; fix this program [ 897.752912][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 897.787596][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.841478][ T89] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 897.865877][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.894618][ T89] usb 1-1: config 0 descriptor?? [ 898.025979][ T30] audit: type=1400 audit(26280.802:2281): avc: denied { ioctl } for pid=20228 comm="syz.6.3130" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 898.432200][ T89] usb 1-1: can't set config #0, error -71 [ 898.445063][ T89] usb 1-1: USB disconnect, device number 123 [ 898.457873][ T5142] Bluetooth: hci6: command 0x0406 tx timeout [ 898.477563][ T30] audit: type=1400 audit(26281.275:2282): avc: denied { setopt } for pid=20241 comm="syz.0.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 898.500426][ T30] audit: type=1400 audit(26281.296:2283): avc: denied { bind } for pid=20241 comm="syz.0.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 898.523416][T20240] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 898.740273][ T30] audit: type=1400 audit(26281.359:2284): avc: denied { listen } for pid=20235 comm="syz.2.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 898.762592][ T30] audit: type=1400 audit(26281.359:2285): avc: denied { accept } for pid=20235 comm="syz.2.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 898.841850][T20261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20261 comm=syz.0.3134 [ 898.934947][T20262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 898.960370][ T30] audit: type=1400 audit(26281.779:2286): avc: denied { ioctl } for pid=20266 comm="syz.2.3136" path="socket:[69594]" dev="sockfs" ino=69594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 899.677178][T14193] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 899.838646][T14193] usb 3-1: Using ep0 maxpacket: 32 [ 899.853501][T14193] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 899.943384][T14193] usb 3-1: config 0 has no interface number 0 [ 899.960980][T14193] usb 3-1: config 0 interface 80 has no altsetting 0 [ 900.001883][T20294] futex_wake_op: syz.6.3141 tries to shift op by -1; fix this program [ 900.041566][T14193] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice=3a.1a [ 900.081129][T20304] virt_wifi0 speed is unknown, defaulting to 1000 [ 900.219398][T14193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.378570][T14193] usb 3-1: Product: syz [ 900.398319][T14193] usb 3-1: Manufacturer: syz [ 900.406499][T14193] usb 3-1: SerialNumber: syz [ 900.421819][T14193] usb 3-1: config 0 descriptor?? [ 900.523223][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 900.523239][ T30] audit: type=1400 audit(26283.427:2290): avc: denied { append } for pid=20331 comm="syz.8.3143" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 900.796021][T20340] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 901.095232][ T30] audit: type=1400 audit(26283.994:2291): avc: denied { map } for pid=20341 comm="syz.6.3145" path="pipe:[46328]" dev="pipefs" ino=46328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 901.245313][T14193] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 901.490652][T20354] block nbd2: NBD_DISCONNECT [ 901.506076][T14193] usb 3-1: USB disconnect, device number 92 [ 901.609241][ T30] audit: type=1400 audit(26284.561:2292): avc: denied { write } for pid=20364 comm="syz.2.3148" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 901.897048][T20371] siw: device registration error -23 [ 903.405359][ T30] audit: type=1400 audit(26286.451:2293): avc: denied { read write } for pid=20377 comm="syz.4.3149" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 903.439261][ T30] audit: type=1400 audit(26286.482:2294): avc: denied { open } for pid=20377 comm="syz.4.3149" path="/591/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 903.462741][ T30] audit: type=1400 audit(26286.482:2295): avc: denied { setattr } for pid=20377 comm="syz.4.3149" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 903.863823][ T30] audit: type=1400 audit(26286.902:2296): avc: denied { ioctl } for pid=20426 comm="syz.6.3153" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 904.789965][ T30] audit: type=1400 audit(26287.900:2297): avc: denied { create } for pid=20440 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 904.830427][ T30] audit: type=1400 audit(26287.942:2298): avc: denied { read } for pid=20444 comm="syz.6.3156" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 904.867019][ T30] audit: type=1400 audit(26287.942:2299): avc: denied { open } for pid=20444 comm="syz.6.3156" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 904.977232][T20445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3156'. [ 905.147187][T20433] futex_wake_op: syz.4.3154 tries to shift op by -1; fix this program [ 905.819998][ T5875] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 905.948392][T20463] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 906.076854][ T5875] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 906.096349][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.104357][ T5875] usb 1-1: Product: syz [ 906.118281][ T5875] usb 1-1: Manufacturer: syz [ 906.130052][ T5875] usb 1-1: SerialNumber: syz [ 906.148108][ T5875] usb 1-1: config 0 descriptor?? [ 906.168595][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3159'. [ 906.206982][ T5875] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 124 [ 906.442567][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 906.442581][ T30] audit: type=1326 audit(26289.642:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 906.483308][ T30] audit: type=1326 audit(26289.642:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 906.515548][ T30] audit: type=1326 audit(26289.674:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 906.544865][T20469] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 906.562078][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3158'. [ 906.581605][T20456] block nbd0: Unsupported socket: should be TCP or UNIX. [ 906.625316][ T30] audit: type=1326 audit(26289.674:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bac98f783 code=0x7ffc0000 [ 906.648359][ T30] audit: type=1326 audit(26289.674:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bac98f783 code=0x7ffc0000 [ 906.880083][ T30] audit: type=1326 audit(26289.674:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 906.903810][ T30] audit: type=1326 audit(26289.674:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 906.927437][ T30] audit: type=1326 audit(26289.674:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 906.951157][ T30] audit: type=1326 audit(26289.674:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 907.003727][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3161'. [ 907.117055][ T30] audit: type=1326 audit(26289.674:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bac98f749 code=0x7ffc0000 [ 907.662833][T20496] netlink: 'syz.2.3164': attribute type 10 has an invalid length. [ 907.687628][T20496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.701068][T20496] team0: Port device bond0 added [ 907.853657][T20507] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 908.252148][ T5875] (null): failure reading functionality [ 908.269845][ T5875] i2c i2c-1: failure reading functionality [ 908.287689][ T5875] i2c i2c-1: connected i2c-tiny-usb device [ 908.301065][ T5875] usb 1-1: USB disconnect, device number 124 [ 909.847343][T20507] syz.8.3167 (20507): drop_caches: 2 [ 910.362850][T20561] FAULT_INJECTION: forcing a failure. [ 910.362850][T20561] name failslab, interval 1, probability 0, space 0, times 0 [ 910.841460][T20561] CPU: 0 UID: 0 PID: 20561 Comm: syz.8.3174 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.841487][T20561] Tainted: [L]=SOFTLOCKUP [ 910.841492][T20561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 910.841498][T20561] Call Trace: [ 910.841502][T20561] [ 910.841508][T20561] dump_stack_lvl+0x16c/0x1f0 [ 910.841528][T20561] should_fail_ex+0x512/0x640 [ 910.841538][T20561] ? kmem_cache_alloc_noprof+0x62/0x770 [ 910.841551][T20561] should_failslab+0xc2/0x120 [ 910.841566][T20561] kmem_cache_alloc_noprof+0x83/0x770 [ 910.841577][T20561] ? skb_clone+0x190/0x3f0 [ 910.841592][T20561] ? skb_clone+0x190/0x3f0 [ 910.841602][T20561] skb_clone+0x190/0x3f0 [ 910.841614][T20561] pfkey_broadcast_one+0xb9/0x380 [ 910.841634][T20561] pfkey_broadcast+0x293/0x460 [ 910.841649][T20561] pfkey_sendmsg+0x74d/0x850 [ 910.841665][T20561] ____sys_sendmsg+0xa5d/0xc30 [ 910.841681][T20561] ? copy_msghdr_from_user+0x10a/0x160 [ 910.841692][T20561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 910.841709][T20561] ? __pfx__kstrtoull+0x10/0x10 [ 910.841725][T20561] ___sys_sendmsg+0x134/0x1d0 [ 910.841737][T20561] ? __pfx____sys_sendmsg+0x10/0x10 [ 910.841756][T20561] ? find_held_lock+0x2b/0x80 [ 910.841781][T20561] __sys_sendmmsg+0x200/0x420 [ 910.841794][T20561] ? __pfx___sys_sendmmsg+0x10/0x10 [ 910.841810][T20561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 910.841832][T20561] ? fput+0x70/0xf0 [ 910.841841][T20561] ? ksys_write+0x1ac/0x250 [ 910.841854][T20561] ? __pfx_ksys_write+0x10/0x10 [ 910.841869][T20561] __x64_sys_sendmmsg+0x9c/0x100 [ 910.841881][T20561] ? lockdep_hardirqs_on+0x7c/0x110 [ 910.841895][T20561] do_syscall_64+0xcd/0xf80 [ 910.841910][T20561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.841921][T20561] RIP: 0033:0x7f1bac98f749 [ 910.841930][T20561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.841940][T20561] RSP: 002b:00007f1bad7b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 910.841950][T20561] RAX: ffffffffffffffda RBX: 00007f1bacbe5fa0 RCX: 00007f1bac98f749 [ 910.841957][T20561] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 910.841963][T20561] RBP: 00007f1bad7b2090 R08: 0000000000000000 R09: 0000000000000000 [ 910.841968][T20561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.841974][T20561] R13: 00007f1bacbe6038 R14: 00007f1bacbe5fa0 R15: 00007fff64020088 [ 910.841988][T20561] [ 911.511044][ T6153] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 911.900252][T20578] futex_wake_op: syz.6.3175 tries to shift op by -1; fix this program [ 911.936143][ T6153] usb 1-1: Using ep0 maxpacket: 32 [ 911.951253][ T6153] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 911.970720][ T6153] usb 1-1: config 0 has no interface number 0 [ 911.983408][ T6153] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.013895][ T6153] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 912.030154][ T6153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.048097][ T6153] usb 1-1: Product: syz [ 912.052425][ T6153] usb 1-1: Manufacturer: syz [ 912.057007][ T6153] usb 1-1: SerialNumber: syz [ 912.074900][ T6153] usb 1-1: config 0 descriptor?? [ 912.088248][ T6153] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 912.099126][ T6153] em28xx 1-1:0.132: Video interface 132 found: [ 912.476029][ T6153] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 912.491452][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 912.491468][ T30] audit: type=1400 audit(27063.983:2328): avc: denied { ioctl } for pid=20604 comm="syz.6.3181" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 912.533284][ T30] audit: type=1400 audit(27064.025:2329): avc: denied { getopt } for pid=20604 comm="syz.6.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 912.564655][ T30] audit: type=1400 audit(27064.025:2330): avc: denied { nlmsg_write } for pid=20604 comm="syz.6.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 913.025043][ T30] audit: type=1400 audit(27064.025:2331): avc: denied { nlmsg_tty_audit } for pid=20604 comm="syz.6.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 913.139532][ T6153] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 913.149333][ T6153] em28xx 1-1:0.132: board has no eeprom [ 913.230017][ T6153] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 913.237876][ T6153] em28xx 1-1:0.132: analog set to bulk mode. [ 913.244405][ T5875] em28xx 1-1:0.132: Registering V4L2 extension [ 913.259555][ T89] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 913.350129][ T5875] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 913.350302][ T5923] usb 1-1: USB disconnect, device number 125 [ 913.359159][ T5875] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 913.366620][ T5923] em28xx 1-1:0.132: Disconnecting em28xx [ 913.409073][ T5875] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 913.417728][ T5875] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 913.420463][ T89] usb 7-1: Using ep0 maxpacket: 32 [ 913.424979][ T5875] em28xx 1-1:0.132: No AC97 audio processor [ 913.438324][ T5875] usb 1-1: Decoder not found [ 913.438704][ T89] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 913.443417][ T5875] em28xx 1-1:0.132: failed to create media graph [ 913.443444][ T5875] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 913.459466][ T5875] em28xx 1-1:0.132: Remote control support is not available for this card. [ 913.467305][ T89] usb 7-1: config 0 has no interface number 0 [ 913.479436][ T5923] em28xx 1-1:0.132: Closing input extension [ 913.489385][ T89] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 913.498762][ T89] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.507907][ T5923] em28xx 1-1:0.132: Freeing device [ 913.509002][ T6153] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 913.515134][ T89] usb 7-1: Product: syz [ 913.526164][ T6536] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 913.535218][ T89] usb 7-1: Manufacturer: syz [ 913.539806][ T89] usb 7-1: SerialNumber: syz [ 913.548532][ T89] usb 7-1: config 0 descriptor?? [ 913.555817][ T89] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 913.564688][ T89] usb 7-1: selecting invalid altsetting 1 [ 913.570393][ T89] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 913.581172][ T89] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 913.591722][ T89] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 913.600056][ T89] usb 7-1: media controller created [ 913.610201][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 913.659453][ T6153] usb 3-1: Using ep0 maxpacket: 32 [ 913.666307][ T6153] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 913.674499][ T6153] usb 3-1: config 0 has no interface number 0 [ 913.681813][ T6153] usb 3-1: config 0 interface 80 has no altsetting 0 [ 913.687204][ T6536] usb 5-1: Using ep0 maxpacket: 8 [ 913.690533][ T6153] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice=3a.1a [ 913.694093][ T6536] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 913.703022][ T6153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.714373][ T6536] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 913.719114][ T6153] usb 3-1: Product: syz [ 913.728919][ T6536] usb 5-1: can't read configurations, error -61 [ 913.730635][ T6153] usb 3-1: Manufacturer: syz [ 913.741549][ T6153] usb 3-1: SerialNumber: syz [ 913.754266][ T6153] usb 3-1: config 0 descriptor?? [ 913.762337][ T89] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 913.775981][ T89] zl10353_read_register: readreg error (reg=127, ret==-71) [ 913.783999][ T89] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 913.811152][ T89] usb 7-1: USB disconnect, device number 44 [ 913.858725][ T6536] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 914.002248][ T6536] usb 5-1: Using ep0 maxpacket: 8 [ 914.011159][ T6536] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 914.020207][ T6536] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 914.028396][ T6536] usb 5-1: can't read configurations, error -61 [ 914.035347][ T6536] usb usb5-port1: attempt power cycle [ 914.224887][ T6153] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 914.336768][ T6153] usb 3-1: USB disconnect, device number 93 [ 914.522890][ T6536] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 914.546411][ T6536] usb 5-1: Using ep0 maxpacket: 8 [ 914.746939][ T6536] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 914.757782][ T6536] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 914.886938][ T6536] usb 5-1: can't read configurations, error -61 [ 914.925364][T20729] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 915.034709][ T6536] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 915.079880][ T30] audit: type=1400 audit(27066.628:2332): avc: denied { ioctl } for pid=20725 comm="syz.2.3191" path="socket:[71400]" dev="sockfs" ino=71400 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 915.120459][ T6536] usb 5-1: Using ep0 maxpacket: 8 [ 915.168695][ T6536] usb 5-1: too many configurations: 111, using maximum allowed: 8 [ 915.229824][ T6536] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 915.296098][ T30] audit: type=1400 audit(27066.649:2333): avc: denied { write } for pid=20725 comm="syz.2.3191" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 915.325101][ T6536] usb 5-1: can't read configurations, error -61 [ 915.341296][ T6536] usb usb5-port1: unable to enumerate USB device [ 915.353017][ T30] audit: type=1400 audit(27066.649:2334): avc: denied { map } for pid=20725 comm="syz.2.3191" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 916.325396][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'. [ 917.458862][ T5875] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 917.502818][T20769] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 917.535295][T20769] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 917.649507][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 917.656139][ T5875] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 917.710836][ T5875] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 917.725835][ T5875] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 917.746154][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.767843][ T5875] usb 1-1: config 0 descriptor?? [ 918.011591][ T5875] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 918.132942][ T30] audit: type=1400 audit(27069.904:2335): avc: denied { mount } for pid=20791 comm="syz.2.3204" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 918.160704][ T30] audit: type=1400 audit(27069.936:2336): avc: denied { mounton } for pid=20791 comm="syz.2.3204" path="/148/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 918.164570][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 918.207861][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 918.218080][ T30] audit: type=1400 audit(27069.936:2337): avc: denied { remount } for pid=20791 comm="syz.2.3204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 918.251235][ T5875] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 918.263000][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.283691][ T5875] usb 5-1: Product: syz [ 918.290246][ T5875] usb 5-1: Manufacturer: syz [ 918.297477][ T5875] usb 5-1: SerialNumber: syz [ 918.335629][ T5875] usb 5-1: config 0 descriptor?? [ 918.359915][ T5822] usb 1-1: USB disconnect, device number 126 [ 918.391266][ T5875] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 918.415254][ T5875] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 918.921528][ T30] audit: type=1400 audit(27070.734:2338): avc: denied { unmount } for pid=15931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 918.976305][ T5875] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 918.984786][T20819] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 918.998304][ T30] audit: type=1400 audit(27070.818:2339): avc: denied { name_connect } for pid=20817 comm="syz.2.3209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 919.372021][T20778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.381928][T20778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.601099][ T5875] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 919.630091][ T5875] em28xx 5-1:0.0: board has no eeprom [ 919.686413][ T30] audit: type=1400 audit(27839.543:2340): avc: denied { mount } for pid=20820 comm="syz.2.3210" name="/" dev="ramfs" ino=71802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 919.713513][ T5875] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 919.739074][ T5875] em28xx 5-1:0.0: dvb set to bulk mode. [ 919.747639][ T5822] em28xx 5-1:0.0: Binding DVB extension [ 919.765886][ T5875] usb 5-1: USB disconnect, device number 17 [ 919.773873][ T5875] em28xx 5-1:0.0: Disconnecting em28xx [ 919.809971][ T5822] em28xx 5-1:0.0: Registering input extension [ 919.817745][ T5875] em28xx 5-1:0.0: Closing input extension [ 919.857102][ T5875] em28xx 5-1:0.0: Freeing device [ 919.917555][ T30] audit: type=1400 audit(27839.784:2341): avc: denied { ioctl } for pid=20860 comm="syz.2.3213" path="socket:[71492]" dev="sockfs" ino=71492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 919.943710][T20861] loop6: detected capacity change from 0 to 3664 [ 919.953174][T20861] buffer_io_error: 5 callbacks suppressed [ 919.953185][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.967314][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.975343][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.983348][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.991164][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.999568][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 920.008316][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 920.019209][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 920.027165][T12654] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 920.029145][T20861] ldm_validate_partition_table(): Disk read failed. [ 920.042063][T20863] blk_print_req_error: 5 callbacks suppressed [ 920.042074][T20863] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 920.061074][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 920.069066][T20863] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 920.078065][T20861] Buffer I/O error on dev loop6, logical block 0, async page read [ 920.080635][T20863] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 920.092292][T20861] Dev loop6: unable to read RDB block 0 [ 920.096577][T20863] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 920.112775][T20863] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 920.116755][T20861] loop6: unable to read partition table [ 920.134472][T20861] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 920.149556][T20868] syz_tun: entered allmulticast mode [ 920.163510][T20868] dvmrp8: entered allmulticast mode [ 920.172420][T20868] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 920.181429][T20868] mroute: pending queue full, dropping entries [ 920.188606][T12654] usb 7-1: Using ep0 maxpacket: 8 [ 920.196355][T12654] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 920.196700][T20867] syz_tun: left allmulticast mode [ 920.230526][T12654] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 920.257221][T12654] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 920.282431][T12654] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 920.300203][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3215'. [ 920.310252][T12654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.326342][T12654] usb 7-1: Product: syz [ 920.336057][T12654] usb 7-1: Manufacturer: syz [ 920.343474][T12654] usb 7-1: SerialNumber: syz [ 920.348712][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3215'. [ 920.366326][T12654] usb 7-1: config 0 descriptor?? [ 920.380663][T20839] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 920.404697][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 920.417047][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 920.431546][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 920.432450][T20889] FAULT_INJECTION: forcing a failure. [ 920.432450][T20889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.488899][T12654] rc_core: IR keymap rc-streamzap not found [ 920.494968][T12654] Registered IR keymap rc-empty [ 920.505558][T20889] CPU: 0 UID: 0 PID: 20889 Comm: syz.8.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.505581][T20889] Tainted: [L]=SOFTLOCKUP [ 920.505585][T20889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.505594][T20889] Call Trace: [ 920.505599][T20889] [ 920.505605][T20889] dump_stack_lvl+0x16c/0x1f0 [ 920.505628][T20889] should_fail_ex+0x512/0x640 [ 920.505645][T20889] _copy_from_iter+0x2a4/0x16c0 [ 920.505667][T20889] ? __build_skb_around+0x278/0x390 [ 920.505688][T20889] ? __pfx__copy_from_iter+0x10/0x10 [ 920.505706][T20889] ? __alloc_skb+0x35d/0x410 [ 920.505718][T20889] ? __pfx___alloc_skb+0x10/0x10 [ 920.505730][T20889] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 920.505758][T20889] pfkey_sendmsg+0x1d1/0x850 [ 920.505780][T20889] ____sys_sendmsg+0xa5d/0xc30 [ 920.505799][T20889] ? copy_msghdr_from_user+0x10a/0x160 [ 920.505814][T20889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.505835][T20889] ? __pfx__kstrtoull+0x10/0x10 [ 920.505854][T20889] ___sys_sendmsg+0x134/0x1d0 [ 920.505870][T20889] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.505904][T20889] ? __pfx___might_resched+0x10/0x10 [ 920.505921][T20889] __sys_sendmmsg+0x200/0x420 [ 920.505939][T20889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 920.505961][T20889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 920.505988][T20889] ? fput+0x70/0xf0 [ 920.506001][T20889] ? ksys_write+0x1ac/0x250 [ 920.506017][T20889] ? __pfx_ksys_write+0x10/0x10 [ 920.506038][T20889] __x64_sys_sendmmsg+0x9c/0x100 [ 920.506053][T20889] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.506072][T20889] do_syscall_64+0xcd/0xf80 [ 920.506092][T20889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.506106][T20889] RIP: 0033:0x7f1bac98f749 [ 920.506118][T20889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.506133][T20889] RSP: 002b:00007f1bad7b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.506146][T20889] RAX: ffffffffffffffda RBX: 00007f1bacbe5fa0 RCX: 00007f1bac98f749 [ 920.506155][T20889] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 920.506163][T20889] RBP: 00007f1bad7b2090 R08: 0000000000000000 R09: 0000000000000000 [ 920.506170][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.506178][T20889] R13: 00007f1bacbe6038 R14: 00007f1bacbe5fa0 R15: 00007fff64020088 [ 920.506198][T20889] [ 920.516732][T12654] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 920.680498][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 920.690551][T12654] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input54 [ 920.720490][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.744847][ T89] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 920.773608][T20879] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.820067][T12654] usb 7-1: USB disconnect, device number 45 [ 920.945142][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 920.952116][ T89] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 920.964498][ T89] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 920.988479][ T89] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.020681][ T89] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 921.035107][ T89] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 921.053859][ T89] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.063914][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.072049][ T89] usb 3-1: Product: syz [ 921.076371][ T89] usb 3-1: Manufacturer: syz [ 921.081116][ T89] usb 3-1: SerialNumber: syz [ 921.424251][T20879] chnl_net:caif_netlink_parms(): no params data found [ 921.489776][ T89] usb 3-1: 0:2 : does not exist [ 921.791750][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 922.020185][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.040957][T20879] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.061324][T20879] bridge_slave_0: entered allmulticast mode [ 922.076042][T20879] bridge_slave_0: entered promiscuous mode [ 922.084670][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.098464][T20879] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.110225][T20879] bridge_slave_1: entered allmulticast mode [ 922.143217][T20879] bridge_slave_1: entered promiscuous mode [ 922.194028][ T30] audit: type=1400 audit(27842.178:2342): avc: denied { getopt } for pid=21095 comm="syz.0.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 922.253823][T20879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.283954][T20879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.471040][T20879] team0: Port device team_slave_0 added [ 922.478045][T20879] team0: Port device team_slave_1 added [ 922.508973][T20879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.515979][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.545928][T20879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.559318][T20879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.566286][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.592214][T20879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.635890][T20879] hsr_slave_0: entered promiscuous mode [ 922.654351][T20879] hsr_slave_1: entered promiscuous mode [ 922.668219][T20879] debugfs: 'hsr0' already exists in 'hsr' [ 922.682088][T20879] Cannot create hsr debugfs directory [ 922.691009][ T5142] Bluetooth: hci0: command tx timeout [ 923.479810][ T6536] usb 3-1: USB disconnect, device number 94 [ 923.633495][T20879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.870076][T20879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.888994][ T6536] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 923.959758][T20879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.022552][ T30] audit: type=1400 audit(28612.102:2343): avc: denied { bind } for pid=21287 comm="syz.0.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 924.076942][T20879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.095450][ T6536] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 924.106482][ T6536] usb 3-1: config 0 has no interface number 0 [ 924.136640][ T6536] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 924.146615][ T6536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.165923][ T6536] usb 3-1: Product: syz [ 924.173762][ T6536] usb 3-1: Manufacturer: syz [ 924.178721][ T6536] usb 3-1: SerialNumber: syz [ 924.303510][ T6536] usb 3-1: config 0 descriptor?? [ 924.305427][T20879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 924.320364][T20879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 924.329112][T20879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 924.338311][T20879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 924.410701][T20879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.430561][T20879] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.445471][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.452664][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.476629][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.483834][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.668968][ T5142] Bluetooth: hci0: command tx timeout [ 924.733392][T20879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.962888][T20879] veth0_vlan: entered promiscuous mode [ 924.980774][T20879] veth1_vlan: entered promiscuous mode [ 925.022765][T20879] veth0_macvtap: entered promiscuous mode [ 925.039372][T20879] veth1_macvtap: entered promiscuous mode [ 925.065589][T20879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.094334][T20879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.113757][ T4727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.134892][ T6536] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 193 [ 925.149549][ T4727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.165019][ T4727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.200139][ T4727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.260081][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.279032][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.332551][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.381583][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.481774][T12863] usb 3-1: USB disconnect, device number 95 [ 925.511522][ T30] audit: type=1400 audit(28613.656:2344): avc: denied { write } for pid=21349 comm="syz.4.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 925.678497][ T30] audit: type=1400 audit(28613.824:2345): avc: denied { ioctl } for pid=21362 comm="syz.4.3231" path="socket:[72825]" dev="sockfs" ino=72825 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 925.759710][T21363] bond1: Removing last arp target with arp_interval on [ 925.776077][ T30] audit: type=1400 audit(28613.939:2346): avc: denied { accept } for pid=21365 comm="syz.0.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 925.804424][T21363] bond1: entered allmulticast mode [ 925.829668][T21363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.440877][ T5822] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 926.662746][ T5142] Bluetooth: hci0: command tx timeout [ 926.739825][ T5822] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 926.750328][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.758666][ T5822] usb 5-1: Product: syz [ 926.768498][ T5822] usb 5-1: Manufacturer: syz [ 926.778297][ T5822] usb 5-1: SerialNumber: syz [ 926.783109][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3235'. [ 926.798598][ T5822] usb 5-1: config 0 descriptor?? [ 926.809288][ T5822] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 018 [ 926.926149][ T30] audit: type=1400 audit(28615.136:2347): avc: denied { append } for pid=21426 comm="syz.2.3236" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 927.061013][ T30] audit: type=1400 audit(28615.283:2348): avc: denied { read } for pid=21447 comm="syz.8.3239" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 927.088151][ T30] audit: type=1400 audit(28615.283:2349): avc: denied { open } for pid=21447 comm="syz.8.3239" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 927.199487][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 927.208500][T21404] block nbd0: Unsupported socket: should be TCP or UNIX. [ 927.250584][ T5923] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 927.250596][ T5875] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 927.461529][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.484969][ T5923] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 927.497849][ T5923] usb 1-1: config 6 has no interface number 0 [ 927.519770][ T5923] usb 1-1: config 6 interface 200 has no altsetting 0 [ 927.535242][ T5923] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 927.544836][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.555732][ T5923] usb 1-1: Product: syz [ 927.576784][ T5875] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 927.585075][ T5923] usb 1-1: Manufacturer: syz [ 927.585097][ T5923] usb 1-1: SerialNumber: syz [ 927.595431][ T5875] usb 3-1: config 0 has no interface number 0 [ 927.611829][ T5875] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 927.652206][ T5875] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 927.673203][ T5875] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 927.695812][ T5875] usb 3-1: Product: syz [ 927.712237][ T5875] usb 3-1: Manufacturer: syz [ 927.724326][ T5875] usb 3-1: SerialNumber: syz [ 927.744676][ T5875] usb 3-1: config 0 descriptor?? [ 927.758270][T21443] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 927.786348][ T5875] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 927.806155][ T5875] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 927.830566][ T5875] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 927.855552][ T5875] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 927.877691][ T5875] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 927.908516][ T5875] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 927.941945][ T5875] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 927.965763][ T5875] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 927.992227][T21443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.004290][ T5875] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 928.020908][T21443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.042902][ T5875] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 928.074885][ T5875] usb 3-1: USB disconnect, device number 96 [ 928.114006][ T5875] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 928.145685][ T5875] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 928.180295][ T5875] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 928.213805][ T5875] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 928.239738][ T5875] keyspan 3-1:0.107: device disconnected [ 928.430232][ T5923] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 928.462926][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 928.496443][ T5923] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 928.739139][ T5923] usb 1-1: media controller created [ 928.764519][ T5142] Bluetooth: hci0: command tx timeout [ 928.825800][ T30] audit: type=1400 audit(28617.131:2350): avc: denied { map } for pid=21457 comm="syz.8.3241" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 928.869306][ T5822] (null): failure reading functionality [ 928.876118][ T5822] i2c i2c-1: failure reading functionality [ 928.904791][ T5822] i2c i2c-1: connected i2c-tiny-usb device [ 928.906643][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.912458][ T5822] usb 5-1: USB disconnect, device number 18 [ 929.019352][ T5923] dvb-usb: bulk message failed: -71 (6/0) [ 929.065081][ T5923] dvb-usb: bulk message failed: -71 (6/0) [ 929.174821][ T5923] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 929.745934][ T30] audit: type=1400 audit(28617.593:2351): avc: denied { read } for pid=21523 comm="syz.2.3242" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 929.770861][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 930.377589][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 930.406208][T21535] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3244'. [ 930.425104][ T5923] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 930.593731][ T24] dvb-usb: bulk message failed: -71 (1/0) [ 930.599495][ T24] dvb-usb: error while querying for an remote control event. [ 930.615246][ T5923] usb 1-1: USB disconnect, device number 127 [ 930.775359][T12654] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 931.007740][T12654] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.098491][T12654] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 931.133066][ T5923] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 931.162720][T12654] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.179010][T12654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.195632][T12654] usb 3-1: Product: syz [ 931.208087][T12654] usb 3-1: Manufacturer: syz [ 931.217361][T12654] usb 3-1: SerialNumber: syz [ 931.431045][T12654] cdc_mbim 3-1:1.0: skipping garbage [ 931.520696][ T30] audit: type=1400 audit(28619.966:2352): avc: denied { name_bind } for pid=21577 comm="syz.4.3250" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 931.644358][T21539] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 931.851228][T14193] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 931.869659][ T5822] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 932.006138][T14193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.017996][ T5822] usb 7-1: Using ep0 maxpacket: 32 [ 932.034767][ T5822] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 932.053738][T14193] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 932.071546][ T5822] usb 7-1: config 0 has no interface number 0 [ 932.095645][T14193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.109081][ T5822] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 932.133338][T14193] usb 5-1: config 0 descriptor?? [ 932.141895][ T5822] usb 7-1: config 0 interface 196 has no altsetting 0 [ 932.170259][ T5822] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 932.200248][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.225256][ T5822] usb 7-1: Product: syz [ 932.234272][ T5822] usb 7-1: Manufacturer: syz [ 932.244285][ T5822] usb 7-1: SerialNumber: syz [ 932.247893][T21539] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.268311][ T5822] usb 7-1: config 0 descriptor?? [ 932.277066][T12654] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 932.288656][T21592] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 932.370567][T14193] usbhid 5-1:0.0: can't add hid device: -71 [ 932.379541][T14193] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 932.401843][T14193] usb 5-1: USB disconnect, device number 19 [ 932.485030][T21539] xt_hashlimit: size too large, truncated to 1048576 [ 932.536914][T21592] input: syz0 as /devices/virtual/input/input56 [ 932.547651][T21617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.581972][T21617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.813222][T12654] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 932.829936][T12654] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 932.856638][T12654] wwan wwan0: port wwan0mbim0 attached [ 932.869820][T14193] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 932.889380][T12654] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 5a:e3:51:db:39:51 [ 932.932927][T12654] usb 3-1: USB disconnect, device number 97 [ 932.945748][T12654] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 933.022869][T12654] wwan wwan0: port wwan0mbim0 disconnected [ 933.038824][ T5822] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 933.047787][T14193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 933.071701][ T30] audit: type=1400 audit(28621.583:2353): avc: denied { ioctl } for pid=21597 comm="syz.0.3254" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 933.087251][ T5822] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 933.107903][T14193] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 933.134740][T14193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.165875][T14193] usb 5-1: config 0 descriptor?? [ 933.176574][ T5822] usb 7-1: USB disconnect, device number 46 [ 933.189761][T14193] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input57 [ 933.260620][ T5822] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 933.396466][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 933.403771][ T5176] usb 5-1: control msg error: -71 [ 933.404215][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 933.416416][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 933.429753][T14193] usb 5-1: USB disconnect, device number 20 [ 934.222909][T12654] IPVS: starting estimator thread 0... [ 934.388796][T21707] IPVS: using max 45 ests per chain, 108000 per kthread [ 934.413941][ T30] audit: type=1400 audit(28622.979:2354): avc: denied { name_connect } for pid=21705 comm="syz.2.3258" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 934.455030][T21715] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 934.489325][ T30] audit: type=1400 audit(28623.042:2355): avc: denied { listen } for pid=21705 comm="syz.2.3258" lport=41520 faddr=::ffff:172.20.255.187 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 934.657747][T21719] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 934.830039][ T30] audit: type=1400 audit(28623.441:2356): avc: denied { write } for pid=21716 comm="syz.0.3260" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 935.190183][ T30] audit: type=1400 audit(28623.441:2357): avc: denied { open } for pid=21716 comm="syz.0.3260" path="/67/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 935.253254][ T30] audit: type=1400 audit(28623.441:2358): avc: denied { ioctl } for pid=21716 comm="syz.0.3260" path="/67/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 935.763317][T21740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3265'. [ 935.888755][ T30] audit: type=1400 audit(28624.544:2359): avc: denied { bind } for pid=21733 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 936.148852][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'. [ 937.327133][T14193] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 937.518651][T14193] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 937.595292][T14193] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.735994][T21791] overlayfs: failed to resolve './file0': -2 [ 937.802908][T14193] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 937.822074][T14193] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.853446][T14193] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 937.870184][T14193] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 937.912615][T14193] usb 5-1: Product: syz [ 937.916825][T14193] usb 5-1: Manufacturer: syz [ 937.942932][T14193] cdc_wdm 5-1:1.0: skipping garbage [ 937.956095][T14193] cdc_wdm 5-1:1.0: skipping garbage [ 937.965439][ T6536] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 937.989696][T14193] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 938.093904][T14193] cdc_wdm 5-1:1.0: Unknown control protocol [ 938.751434][T21812] FAT-fs (loop17): unable to read boot sector [ 938.769053][ T30] audit: type=1400 audit(28627.546:2360): avc: denied { create } for pid=21803 comm="syz.8.3275" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 938.855783][T14193] usb 5-1: USB disconnect, device number 21 [ 939.037544][ T30] audit: type=1400 audit(28627.546:2361): avc: denied { mounton } for pid=21803 comm="syz.8.3275" path="/75/file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 939.060748][ T6536] usb 7-1: Using ep0 maxpacket: 8 [ 939.067999][ T6536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.091348][ T30] audit: type=1400 audit(28627.903:2362): avc: denied { unlink } for pid=17556 comm="syz-executor" name="file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 939.129566][T21807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3274'. [ 939.140335][ T6536] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 939.185073][ T6536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.488731][T21838] : entered promiscuous mode [ 939.544082][T21829] xt_bpf: check failed: parse error [ 939.577011][ T6536] usb 7-1: config 0 descriptor?? [ 939.671293][T14193] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 940.819822][ T30] audit: type=1400 audit(28629.216:2363): avc: denied { ioctl } for pid=21847 comm="syz.0.3279" path="socket:[73980]" dev="sockfs" ino=73980 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 940.886542][T21794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.903519][T21794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.931341][ T6536] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 940.952173][T14193] usb 5-1: device descriptor read/all, error -71 [ 941.352867][T14193] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 941.507559][ T30] audit: type=1400 audit(28630.444:2364): avc: denied { append } for pid=21868 comm="syz.8.3282" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 941.718221][T14193] usb 5-1: Using ep0 maxpacket: 32 [ 941.725209][T14193] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 941.756601][T14193] usb 5-1: config 0 has no interface number 0 [ 941.762699][T14193] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 941.807199][T14193] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 941.822616][T14193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.882292][T14193] usb 5-1: Product: syz [ 941.911943][T21875] FAULT_INJECTION: forcing a failure. [ 941.911943][T21875] name fail_futex, interval 1, probability 0, space 0, times 1 [ 941.917572][T14193] usb 5-1: Manufacturer: syz [ 941.972533][T21875] CPU: 1 UID: 0 PID: 21875 Comm: syz.8.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.972562][T21875] Tainted: [L]=SOFTLOCKUP [ 941.972568][T21875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 941.972577][T21875] Call Trace: [ 941.972583][T21875] [ 941.972590][T21875] dump_stack_lvl+0x16c/0x1f0 [ 941.972620][T21875] should_fail_ex+0x512/0x640 [ 941.972640][T21875] get_futex_key+0x1d0/0x15f0 [ 941.972664][T21875] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.972685][T21875] ? __pfx_get_futex_key+0x10/0x10 [ 941.972704][T21875] ? rcu_is_watching+0x12/0xc0 [ 941.972718][T21875] ? trace_sched_exit_tp+0xd1/0x110 [ 941.972739][T21875] futex_wake+0xea/0x530 [ 941.972758][T21875] ? __pfx_futex_wake+0x10/0x10 [ 941.972786][T21875] do_futex+0x1e3/0x350 [ 941.972811][T21875] ? __pfx_do_futex+0x10/0x10 [ 941.972832][T21875] ? __might_fault+0xe3/0x190 [ 941.972857][T21875] mm_release+0x24e/0x300 [ 941.972883][T21875] do_exit+0x69e/0x2bd0 [ 941.972906][T21875] ? __pfx_do_exit+0x10/0x10 [ 941.972925][T21875] ? do_raw_spin_lock+0x12c/0x2b0 [ 941.972948][T21875] ? find_held_lock+0x2b/0x80 [ 941.972977][T21875] do_group_exit+0xd3/0x2a0 [ 941.973001][T21875] get_signal+0x2671/0x26d0 [ 941.973027][T21875] ? madvise_unlock+0x16d/0x220 [ 941.973057][T21875] ? __pfx_get_signal+0x10/0x10 [ 941.973081][T21875] ? do_madvise+0x1af/0x240 [ 941.973104][T21875] ? __pfx_do_madvise+0x10/0x10 [ 941.973127][T21875] ? __mutex_unlock_slowpath+0x161/0x790 [ 941.973155][T21875] arch_do_signal_or_restart+0x8f/0x7e0 [ 941.973182][T21875] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 941.973227][T21875] exit_to_user_mode_loop+0x8c/0x540 [ 941.973256][T21875] do_syscall_64+0x4ee/0xf80 [ 941.973282][T21875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.973300][T21875] RIP: 0033:0x7f1bac98f749 [ 941.973315][T21875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.973330][T21875] RSP: 002b:00007f1bad7b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 941.973347][T21875] RAX: ffffffffffffffea RBX: 00007f1bacbe5fa0 RCX: 00007f1bac98f749 [ 941.973357][T21875] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 00002000000ee000 [ 941.973368][T21875] RBP: 00007f1bad7b2090 R08: 0000000000000000 R09: 0000000000000000 [ 941.973378][T21875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.973387][T21875] R13: 00007f1bacbe6038 R14: 00007f1bacbe5fa0 R15: 00007fff64020088 [ 941.973411][T21875] [ 942.385645][T14193] usb 5-1: SerialNumber: syz [ 942.394127][T14193] usb 5-1: config 0 descriptor?? [ 942.431266][T14193] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 942.441266][T14193] em28xx 5-1:0.132: Video interface 132 found: [ 942.449274][ T6153] usb 7-1: USB disconnect, device number 47 [ 942.509705][T21873] FAULT_INJECTION: forcing a failure. [ 942.509705][T21873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.522914][T21873] CPU: 1 UID: 0 PID: 21873 Comm: syz.2.3283 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.522941][T21873] Tainted: [L]=SOFTLOCKUP [ 942.522946][T21873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.522954][T21873] Call Trace: [ 942.522960][T21873] [ 942.522967][T21873] dump_stack_lvl+0x16c/0x1f0 [ 942.522994][T21873] should_fail_ex+0x512/0x640 [ 942.523013][T21873] _copy_from_user+0x2e/0xd0 [ 942.523037][T21873] copy_msghdr_from_user+0x98/0x160 [ 942.523056][T21873] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 942.523086][T21873] ___sys_sendmsg+0xfe/0x1d0 [ 942.523106][T21873] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.523149][T21873] __sys_sendmsg+0x16d/0x220 [ 942.523166][T21873] ? __pfx___sys_sendmsg+0x10/0x10 [ 942.523203][T21873] do_syscall_64+0xcd/0xf80 [ 942.523230][T21873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.523247][T21873] RIP: 0033:0x7f456b18f749 [ 942.523259][T21873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.523274][T21873] RSP: 002b:00007f456bf88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.523289][T21873] RAX: ffffffffffffffda RBX: 00007f456b3e5fa0 RCX: 00007f456b18f749 [ 942.523299][T21873] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 942.523308][T21873] RBP: 00007f456bf88090 R08: 0000000000000000 R09: 0000000000000000 [ 942.523318][T21873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.523327][T21873] R13: 00007f456b3e6038 R14: 00007f456b3e5fa0 R15: 00007ffd051f9778 [ 942.523350][T21873] [ 942.828623][T21892] futex_wake_op: syz.6.3285 tries to shift op by -1; fix this program [ 942.939188][T14193] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 943.099001][ T6153] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 943.222756][ T6153] usb 1-1: device descriptor read/64, error -71 [ 943.451303][ T6153] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 943.537031][T14193] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 943.546512][T14193] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 943.575132][ T6153] usb 1-1: device descriptor read/64, error -71 [ 943.699180][ T6153] usb usb1-port1: attempt power cycle [ 943.779601][T14193] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 943.816717][T14193] em28xx 5-1:0.132: analog set to bulk mode. [ 943.831929][T11687] em28xx 5-1:0.132: Registering V4L2 extension [ 943.860468][T11687] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 943.869351][T14193] usb 5-1: USB disconnect, device number 23 [ 943.890053][T14193] em28xx 5-1:0.132: Disconnecting em28xx [ 943.942776][T11687] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 943.968193][T11687] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 944.047807][T11687] em28xx 5-1:0.132: No AC97 audio processor [ 944.057762][T11687] usb 5-1: Decoder not found [ 944.062453][T11687] em28xx 5-1:0.132: failed to create media graph [ 944.068890][T11687] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 944.079325][T11687] em28xx 5-1:0.132: Remote control support is not available for this card. [ 944.088147][T14193] em28xx 5-1:0.132: Closing input extension [ 944.096998][T14193] em28xx 5-1:0.132: Freeing device [ 944.138391][ T6153] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 944.166081][ T6153] usb 1-1: device descriptor read/8, error -71 [ 944.470654][ T6153] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 944.547526][ T6153] usb 1-1: device descriptor read/8, error -71 [ 944.661239][ T6153] usb usb1-port1: unable to enumerate USB device [ 944.669622][T21956] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 944.733447][T21965] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 944.747357][T21965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3292'. [ 944.757583][T21965] dummy0: entered promiscuous mode [ 944.787384][T21967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.794636][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 944.801818][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 944.833943][T21965] bridge0: port 3(dummy0) entered blocking state [ 944.840638][T21965] bridge0: port 3(dummy0) entered disabled state [ 944.846122][T21967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.861622][T21965] dummy0: entered allmulticast mode [ 944.868900][T21965] bridge0: port 3(dummy0) entered blocking state [ 944.875490][T21965] bridge0: port 3(dummy0) entered forwarding state [ 944.876766][T21967] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 944.923021][T21967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3292'. [ 946.077017][ T30] audit: type=1326 audit(28635.242:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.167566][ T30] audit: type=1326 audit(28635.242:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.237398][ T30] audit: type=1326 audit(28635.284:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.561491][ T30] audit: type=1326 audit(28635.284:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.661662][ T30] audit: type=1326 audit(28635.284:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.709252][ T30] audit: type=1326 audit(28635.326:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.756949][ T30] audit: type=1326 audit(28635.326:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.818472][ T30] audit: type=1326 audit(28635.326:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 946.869302][ T30] audit: type=1326 audit(28635.326:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 947.105641][T22012] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 947.228555][T11687] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 947.254949][T11433] Bluetooth: hci1: command 0x0406 tx timeout [ 947.335010][ T30] audit: type=1326 audit(28635.421:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c278f749 code=0x7ffc0000 [ 947.414275][T11687] usb 1-1: Using ep0 maxpacket: 32 [ 947.420757][T11687] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 947.438059][T11687] usb 1-1: config 0 has no interface number 0 [ 947.452052][T11687] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.492706][T11687] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 947.517425][T11687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.537089][T11687] usb 1-1: Product: syz [ 947.556215][T11687] usb 1-1: Manufacturer: syz [ 947.560945][T11687] usb 1-1: SerialNumber: syz [ 947.567166][T11687] usb 1-1: config 0 descriptor?? [ 947.594730][T11687] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 947.623587][T11687] em28xx 1-1:0.132: Video interface 132 found: [ 947.624313][T22037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22037 comm=syz.4.3305 [ 947.629953][T22034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22034 comm=syz.4.3305 [ 947.721275][T22038] FAULT_INJECTION: forcing a failure. [ 947.721275][T22038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.738671][T22038] CPU: 0 UID: 0 PID: 22038 Comm: syz.2.3303 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.738690][T22038] Tainted: [L]=SOFTLOCKUP [ 947.738694][T22038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 947.738700][T22038] Call Trace: [ 947.738704][T22038] [ 947.738708][T22038] dump_stack_lvl+0x16c/0x1f0 [ 947.738728][T22038] should_fail_ex+0x512/0x640 [ 947.738741][T22038] _copy_from_user+0x2e/0xd0 [ 947.738758][T22038] kstrtouint_from_user+0xd6/0x1d0 [ 947.738773][T22038] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 947.738785][T22038] ? __lock_acquire+0x436/0x2890 [ 947.738800][T22038] ? lock_acquire+0x179/0x330 [ 947.738815][T22038] proc_fail_nth_write+0x83/0x220 [ 947.738828][T22038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 947.738849][T22038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 947.738859][T22038] vfs_write+0x2a0/0x11d0 [ 947.738873][T22038] ? __pfx___mutex_lock+0x10/0x10 [ 947.738890][T22038] ? __pfx_vfs_write+0x10/0x10 [ 947.738907][T22038] ? __fget_files+0x20e/0x3c0 [ 947.738926][T22038] ksys_write+0x12a/0x250 [ 947.738939][T22038] ? __pfx_ksys_write+0x10/0x10 [ 947.738957][T22038] do_syscall_64+0xcd/0xf80 [ 947.738972][T22038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.738983][T22038] RIP: 0033:0x7f456b18e1ff [ 947.738992][T22038] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 947.739002][T22038] RSP: 002b:00007f456bf67030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 947.739012][T22038] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f456b18e1ff [ 947.739019][T22038] RDX: 0000000000000001 RSI: 00007f456bf670a0 RDI: 0000000000000006 [ 947.739025][T22038] RBP: 00007f456bf67090 R08: 0000000000000000 R09: 0000000000000000 [ 947.739031][T22038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 947.739037][T22038] R13: 00007f456b3e6128 R14: 00007f456b3e6090 R15: 00007ffd051f9778 [ 947.739051][T22038] [ 948.141298][T11687] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 948.589504][T22061] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 948.756515][T11687] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 949.190412][T11687] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 949.251968][T11687] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 949.308636][T11687] em28xx 1-1:0.132: analog set to bulk mode. [ 949.319655][T12863] em28xx 1-1:0.132: Registering V4L2 extension [ 949.329496][T11687] usb 1-1: USB disconnect, device number 6 [ 949.336349][T11687] em28xx 1-1:0.132: Disconnecting em28xx [ 949.343054][T22057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3298'. [ 949.455175][T12863] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 949.462787][T12863] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 949.469947][T12863] em28xx 1-1:0.132: No AC97 audio processor [ 949.477957][T12863] usb 1-1: Decoder not found [ 949.485339][T12863] em28xx 1-1:0.132: failed to create media graph [ 949.492579][T12863] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 949.501475][T12863] em28xx 1-1:0.132: Remote control support is not available for this card. [ 949.512880][T11687] em28xx 1-1:0.132: Closing input extension [ 949.527196][T11687] em28xx 1-1:0.132: Freeing device [ 949.618245][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'. [ 950.125927][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 951.883680][T22150] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 952.542534][ T6536] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 952.710830][T22179] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3326'. [ 952.763575][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3327'. [ 952.776111][ T6536] usb 3-1: Using ep0 maxpacket: 32 [ 952.784880][ T6536] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 952.800325][ T6536] usb 3-1: config 0 has no interface number 0 [ 952.821009][ T6536] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 952.898705][ T6536] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 952.913286][ T6536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.937039][ T6536] usb 3-1: Product: syz [ 952.942123][ T6536] usb 3-1: Manufacturer: syz [ 952.946710][ T6536] usb 3-1: SerialNumber: syz [ 952.968206][ T6536] usb 3-1: config 0 descriptor?? [ 952.990072][T22179] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3326'. [ 952.996164][ T6536] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 953.022437][ T6536] em28xx 3-1:0.132: Video interface 132 found: [ 953.040313][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 953.040322][ T30] audit: type=1400 audit(28642.560:2406): avc: denied { append } for pid=22185 comm="syz.4.3328" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 953.380254][ T6536] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 954.024994][ T6536] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 954.035735][ T6536] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 954.252115][ T6536] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 954.704324][ T30] audit: type=1400 audit(28644.303:2407): avc: denied { create } for pid=22197 comm="syz.0.3330" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 954.726927][ T6536] em28xx 3-1:0.132: analog set to bulk mode. [ 954.734144][ T973] em28xx 3-1:0.132: Registering V4L2 extension [ 954.744998][ T6536] usb 3-1: USB disconnect, device number 98 [ 954.755572][ T6536] em28xx 3-1:0.132: Disconnecting em28xx [ 954.774588][ T30] audit: type=1400 audit(28644.377:2408): avc: denied { read append } for pid=22197 comm="syz.0.3330" name="file1" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 954.843752][ T30] audit: type=1400 audit(28644.408:2409): avc: denied { open } for pid=22197 comm="syz.0.3330" path="/84/file0/file1" dev="overlay" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 955.965315][T22234] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3335'. [ 956.379919][ T973] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 956.393479][ T973] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 956.431302][T22239] tipc: Enabling not permitted [ 956.442729][T22239] tipc: Enabling of bearer rejected, failed to enable media [ 956.458375][ T30] audit: type=1400 audit(28646.151:2410): avc: denied { bind } for pid=22232 comm="syz.4.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 956.483160][ T973] em28xx 3-1:0.132: No AC97 audio processor [ 956.498464][ T973] usb 3-1: Decoder not found [ 956.509380][ T973] em28xx 3-1:0.132: failed to create media graph [ 956.527972][ T973] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 956.673837][ T973] em28xx 3-1:0.132: Remote control support is not available for this card. [ 956.700433][ T6536] em28xx 3-1:0.132: Closing input extension [ 956.768360][T22249] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 956.847714][ T6536] em28xx 3-1:0.132: Freeing device [ 956.950581][T22258] overlayfs: failed to resolve './bus': -2 [ 957.005888][ T30] audit: type=1400 audit(28646.728:2411): avc: denied { wake_alarm } for pid=22257 comm="syz.4.3340" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 957.445149][ T31] INFO: task syz.7.2802:17208 blocked for more than 143 seconds. [ 957.581460][ T31] Tainted: G L syzkaller #0 [ 957.588294][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 957.597189][ T31] task:syz.7.2802 state:D stack:24856 pid:17208 tgid:17197 ppid:14935 task_flags:0x400140 flags:0x00080002 [ 957.609771][ T31] Call Trace: [ 957.613055][ T31] [ 957.616063][ T31] ? __schedule+0x10b9/0x5ee0 [ 957.620816][ T31] __schedule+0x1138/0x5ee0 [ 957.625580][ T31] ? __lock_acquire+0x436/0x2890 [ 957.630517][ T31] ? __pfx___schedule+0x10/0x10 [ 957.635516][ T31] ? find_held_lock+0x2b/0x80 [ 957.640208][ T31] ? schedule+0x2d7/0x3a0 [ 957.644650][ T31] schedule+0xe7/0x3a0 [ 957.648786][ T31] schedule_preempt_disabled+0x13/0x30 [ 957.654667][ T31] __mutex_lock+0xc69/0x1ca0 [ 957.659361][ T31] ? kasan_save_stack+0x42/0x60 [ 957.784662][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 957.791142][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 957.796677][ T31] ? kmalloc_reserve+0xef/0x2c0 [ 957.804870][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 957.810065][ T31] ? netlink_unicast+0x5aa/0x870 [ 957.815486][ T31] ? netlink_sendmsg+0x8c8/0xdd0 [ 957.820528][ T31] ? ____sys_sendmsg+0xa5d/0xc30 [ 957.826077][ T31] ? __sys_sendmsg+0x16d/0x220 [ 957.836264][ T31] ? do_syscall_64+0xcd/0xf80 [ 957.848099][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.869463][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 957.893592][ T31] nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 957.902205][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 957.917123][ T31] ? rcu_is_watching+0x12/0xc0 [ 957.928063][ T31] ? trace_kmalloc+0x2b/0xb0 [ 957.937983][ T31] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 957.952307][ T31] ? __alloc_skb+0x186/0x410 [ 957.965051][ T31] ? rcu_watching_snap_stopped_since+0xa1/0x110 [ 957.978891][ T31] ? __asan_memset+0x23/0x50 [ 958.014345][ T31] ? __build_skb_around+0x278/0x390 [ 958.019632][ T31] ? __alloc_skb+0x220/0x410 [ 958.028558][ T31] ? __alloc_skb+0x35d/0x410 [ 958.038260][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 958.047976][ T31] genl_dumpit+0x125/0x230 [ 958.060909][ T31] netlink_dump+0x539/0xd30 [ 958.068409][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 958.073507][ T31] ? __asan_memset+0x23/0x50 [ 958.078103][ T31] ? genl_start+0x67f/0x980 [ 958.082712][ T31] __netlink_dump_start+0x6d6/0x990 [ 958.087923][ T31] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 958.095367][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 958.103272][ T31] ? consume_skb+0xcc/0x100 [ 958.107954][ T31] ? __pfx_genl_get_cmd+0x10/0x10 [ 958.113043][ T31] ? __pfx_genl_start+0x10/0x10 [ 958.117890][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 958.124385][ T31] ? __pfx_genl_done+0x10/0x10 [ 958.129219][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 958.134515][ T31] genl_rcv_msg+0x46e/0x800 [ 958.139125][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.144157][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 958.152316][ T31] netlink_rcv_skb+0x158/0x420 [ 958.157095][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.162257][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.167706][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 958.173005][ T31] genl_rcv+0x28/0x40 [ 958.177037][ T31] netlink_unicast+0x5aa/0x870 [ 958.181817][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 958.187403][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 958.192177][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.198683][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 958.203455][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 958.208997][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.214285][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 958.219703][ T31] ? try_to_wake_up+0xa67/0x1860 [ 958.224728][ T31] ___sys_sendmsg+0x134/0x1d0 [ 958.229421][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.234733][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 958.240312][ T31] __sys_sendmsg+0x16d/0x220 [ 958.244943][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.251551][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 958.256556][ T31] do_syscall_64+0xcd/0xf80 [ 958.261065][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.267262][ T31] RIP: 0033:0x7fc9e2d8f749 [ 958.271890][ T31] RSP: 002b:00007fc9e3c52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.280298][ T31] RAX: ffffffffffffffda RBX: 00007fc9e2fe6180 RCX: 00007fc9e2d8f749 [ 958.289273][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000004 [ 958.297319][ T31] RBP: 00007fc9e2e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 958.306179][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.315039][ T31] R13: 00007fc9e2fe6218 R14: 00007fc9e2fe6180 R15: 00007ffdc56e2a18 [ 958.323840][ T31] [ 958.327094][ T31] [ 958.327094][ T31] Showing all locks held in the system: [ 958.335605][ T31] 1 lock held by khungtaskd/31: [ 958.341234][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 958.353346][ T31] 2 locks held by getty/5581: [ 958.360082][ T31] #0: ffff88814e49d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 958.370122][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 958.380403][ T31] 1 lock held by syz-executor/5804: [ 958.385605][ T31] 2 locks held by syz.5.2200/14720: [ 958.390891][ T31] #0: ffffffff901e8d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.406472][ T31] #1: ffffffff8e8024a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 958.416759][ T31] 4 locks held by kworker/u8:24/14934: [ 958.422220][ T31] 3 locks held by syz.7.2802/17208: [ 958.429255][ T31] #0: ffffffff901e8d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.437602][ T31] #1: ffff88802ff9b6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 958.451055][ T31] #2: ffffffff8e8024a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 958.461687][ T31] 1 lock held by syz.6.3331/22237: [ 958.467178][ T31] 1 lock held by syz.4.3340/22265: [ 958.472588][ T31] [ 958.475096][ T31] ============================================= [ 958.475096][ T31] [ 958.490468][ T31] NMI backtrace for cpu 0 [ 958.490486][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 958.490510][ T31] Tainted: [L]=SOFTLOCKUP [ 958.490515][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.490525][ T31] Call Trace: [ 958.490531][ T31] [ 958.490539][ T31] dump_stack_lvl+0x116/0x1f0 [ 958.490567][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 958.490587][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 958.490606][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 958.490631][ T31] sys_info+0x133/0x180 [ 958.490646][ T31] watchdog+0xe66/0x1180 [ 958.490672][ T31] ? rcu_is_watching+0x12/0xc0 [ 958.490688][ T31] ? __pfx_watchdog+0x10/0x10 [ 958.490705][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.490734][ T31] ? __kthread_parkme+0x19e/0x250 [ 958.490753][ T31] ? __pfx_watchdog+0x10/0x10 [ 958.490771][ T31] kthread+0x3c5/0x780 [ 958.490791][ T31] ? __pfx_kthread+0x10/0x10 [ 958.490813][ T31] ? rcu_is_watching+0x12/0xc0 [ 958.490828][ T31] ? __pfx_kthread+0x10/0x10 [ 958.490846][ T31] ret_from_fork+0x983/0xb10 [ 958.490865][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 958.490884][ T31] ? __switch_to+0x7af/0x10d0 [ 958.490906][ T31] ? __pfx_kthread+0x10/0x10 [ 958.490926][ T31] ret_from_fork_asm+0x1a/0x30 [ 958.490963][ T31] [ 958.626278][ T31] Sending NMI from CPU 0 to CPUs 1: [ 958.631493][ C1] NMI backtrace for cpu 1 [ 958.631509][ C1] CPU: 1 UID: 0 PID: 12654 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.631528][ C1] Tainted: [L]=SOFTLOCKUP [ 958.631532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.631541][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 958.631560][ C1] RIP: 0010:__bfs+0x1ba/0x290 [ 958.631574][ C1] Code: db 14 44 29 cb 81 e3 ff 0f 00 00 39 1d 8f 27 20 14 48 89 04 f5 00 cb 74 96 73 0c 89 1d 7f 27 20 14 eb 04 4c 89 78 30 48 8b 00 <4c> 39 c0 75 f4 e9 2b ff ff ff b8 01 00 00 00 48 83 c4 28 5b 5d 41 [ 958.631586][ C1] RSP: 0018:ffffc90003dbef60 EFLAGS: 00000002 [ 958.631595][ C1] RAX: ffffffff976bd538 RBX: 0000000000000144 RCX: 000000000000014b [ 958.631604][ C1] RDX: 0000000000000144 RSI: 000000000000014b RDI: ffffffff973efd38 [ 958.631612][ C1] RBP: 0000000000000030 R08: ffffffff95ba0078 R09: 0000000000000008 [ 958.631620][ C1] R10: ffffc90003dbf100 R11: ffff888076f48b30 R12: ffffffff81998320 [ 958.631628][ C1] R13: ffffc90003dbf000 R14: ffffffff81998e00 R15: ffffffff973efd38 [ 958.631637][ C1] FS: 0000000000000000(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000 [ 958.631650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.631659][ C1] CR2: 00007ffdcf286fc8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 958.631667][ C1] Call Trace: [ 958.631672][ C1] [ 958.631681][ C1] check_irq_usage+0xe8/0xbc0 [ 958.631695][ C1] ? finish_task_switch.isra.0+0x207/0xbd0 [ 958.631709][ C1] ? __bfs+0x148/0x290 [ 958.631721][ C1] ? check_path.constprop.0+0x24/0x50 [ 958.631737][ C1] ? __lock_acquire+0x167f/0x2890 [ 958.631750][ C1] __lock_acquire+0x167f/0x2890 [ 958.631767][ C1] lock_acquire+0x179/0x330 [ 958.631781][ C1] ? debug_object_activate+0x14c/0x4c0 [ 958.631798][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 958.631813][ C1] ? debug_object_assert_init+0x1c5/0x2f0 [ 958.631830][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 958.631846][ C1] ? debug_object_activate+0x14c/0x4c0 [ 958.631861][ C1] debug_object_activate+0x14c/0x4c0 [ 958.631880][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 958.631897][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 958.631914][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 958.631928][ C1] ? lock_timer_base+0x127/0x1d0 [ 958.631952][ C1] ? lock_timer_base+0x16c/0x1d0 [ 958.631969][ C1] ? detach_if_pending+0x1bd/0x410 [ 958.631984][ C1] __mod_timer+0x814/0xd30 [ 958.632000][ C1] ? __lock_acquire+0x436/0x2890 [ 958.632013][ C1] ? __pfx___mod_timer+0x10/0x10 [ 958.632028][ C1] ? selinux_ip_output+0x1f1/0x2a0 [ 958.632045][ C1] ? __ip6_local_out+0x428/0xa80 [ 958.632060][ C1] ? ip6_local_out+0x2e/0x4d0 [ 958.632074][ C1] ? udp_tunnel6_xmit_skb+0x868/0xd00 [ 958.632091][ C1] ? wg_socket_send_skb_to_peer+0xf6/0x210 [ 958.632103][ C1] ? wg_packet_tx_worker+0x1aa/0x810 [ 958.632115][ C1] ? process_one_work+0x9ba/0x1b20 [ 958.632131][ C1] ? clear_pending_if_disabled+0xa8/0x210 [ 958.632150][ C1] add_timer_global+0x8a/0xc0 [ 958.632165][ C1] __queue_delayed_work+0x33a/0x460 [ 958.632183][ C1] queue_delayed_work_on+0x1b5/0x200 [ 958.632200][ C1] debug_check_no_obj_freed+0x3c3/0x600 [ 958.632219][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 958.632240][ C1] kfree+0x2d1/0x6e0 [ 958.632251][ C1] ? selinux_netlbl_skbuff_setsid+0x4fb/0x5e0 [ 958.632270][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 958.632286][ C1] ? selinux_netlbl_skbuff_setsid+0x4fb/0x5e0 [ 958.632301][ C1] selinux_netlbl_skbuff_setsid+0x4fb/0x5e0 [ 958.632317][ C1] ? __pfx_selinux_netlbl_skbuff_setsid+0x10/0x10 [ 958.632333][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 958.632350][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 958.632366][ C1] selinux_ip_output+0x1f1/0x2a0 [ 958.632382][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 958.632398][ C1] nf_hook_slow+0xbe/0x200 [ 958.632415][ C1] __ip6_local_out+0x428/0xa80 [ 958.632430][ C1] ? __pfx___ip6_local_out+0x10/0x10 [ 958.632444][ C1] ? lock_acquire+0x179/0x330 [ 958.632459][ C1] ? __pfx_dst_output+0x10/0x10 [ 958.632473][ C1] ? __lock_acquire+0x436/0x2890 [ 958.632486][ C1] ? csum_ipv6_magic+0x299/0x320 [ 958.632502][ C1] ip6_local_out+0x2e/0x4d0 [ 958.632517][ C1] udp_tunnel6_xmit_skb+0x868/0xd00 [ 958.632537][ C1] send6+0x4ba/0xd30 [ 958.632552][ C1] ? __pfx_send6+0x10/0x10 [ 958.632570][ C1] wg_socket_send_skb_to_peer+0xf6/0x210 [ 958.632585][ C1] wg_packet_tx_worker+0x1aa/0x810 [ 958.632599][ C1] process_one_work+0x9ba/0x1b20 [ 958.632616][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 958.632629][ C1] ? __pfx_process_one_work+0x10/0x10 [ 958.632647][ C1] ? assign_work+0x1a0/0x250 [ 958.632662][ C1] worker_thread+0x6c8/0xf10 [ 958.632679][ C1] ? __kthread_parkme+0x19e/0x250 [ 958.632692][ C1] ? __pfx_worker_thread+0x10/0x10 [ 958.632706][ C1] kthread+0x3c5/0x780 [ 958.632720][ C1] ? __pfx_kthread+0x10/0x10 [ 958.632734][ C1] ? rcu_is_watching+0x12/0xc0 [ 958.632747][ C1] ? __pfx_kthread+0x10/0x10 [ 958.632760][ C1] ret_from_fork+0x983/0xb10 [ 958.632775][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 958.632788][ C1] ? __switch_to+0x7af/0x10d0 [ 958.632804][ C1] ? __pfx_kthread+0x10/0x10 [ 958.632818][ C1] ret_from_fork_asm+0x1a/0x30 [ 958.632841][ C1] [ 958.645662][ T30] audit: type=1400 audit(28648.398:2412): avc: denied { recv } for pid=14934 comm="kworker/u8:24" saddr=10.128.0.169 src=38356 daddr=10.128.1.81 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 958.651696][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 958.651713][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 958.651734][ T31] Tainted: [L]=SOFTLOCKUP [ 958.651740][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.651749][ T31] Call Trace: [ 958.651755][ T31] [ 958.651762][ T31] dump_stack_lvl+0x3d/0x1f0 [ 958.651787][ T31] vpanic+0x640/0x6f0 [ 958.651806][ T31] panic+0xca/0xd0 [ 958.651821][ T31] ? __pfx_panic+0x10/0x10 [ 958.651835][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 958.651855][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 958.651871][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 958.651888][ T31] ? watchdog+0xe83/0x1180 [ 958.651905][ T31] ? watchdog+0xe76/0x1180 [ 958.651922][ T31] watchdog+0xe94/0x1180 [ 958.651942][ T31] ? rcu_is_watching+0x12/0xc0 [ 958.651957][ T31] ? __pfx_watchdog+0x10/0x10 [ 958.651971][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.651993][ T31] ? __kthread_parkme+0x19e/0x250 [ 958.652009][ T31] ? __pfx_watchdog+0x10/0x10 [ 958.652025][ T31] kthread+0x3c5/0x780 [ 958.652043][ T31] ? __pfx_kthread+0x10/0x10 [ 958.652061][ T31] ? rcu_is_watching+0x12/0xc0 [ 958.652075][ T31] ? __pfx_kthread+0x10/0x10 [ 958.652093][ T31] ret_from_fork+0x983/0xb10 [ 958.652110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 958.652128][ T31] ? __switch_to+0x7af/0x10d0 [ 958.652146][ T31] ? __pfx_kthread+0x10/0x10 [ 958.652164][ T31] ret_from_fork_asm+0x1a/0x30 [ 958.652196][ T31] [ 958.654175][ T31] Kernel Offset: disabled