last executing test programs: 4m51.111379473s ago: executing program 4 (id=80): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000080)) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='timerslack_ns\x00') preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1, 0x81, 0x80000001) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) 4m43.957228555s ago: executing program 4 (id=95): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 4m43.285686224s ago: executing program 4 (id=101): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) 4m42.422159515s ago: executing program 4 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010003000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000440)={{}, "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"}) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 4m42.277299265s ago: executing program 4 (id=104): syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0xe, 0x2, "a8bf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x16, 0x4, "0314c3c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m41.07752781s ago: executing program 4 (id=107): r0 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000, 0x0, 0x7000000}, 0x20) 4m40.387117643s ago: executing program 32 (id=107): r0 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000, 0x0, 0x7000000}, 0x20) 2m13.179496319s ago: executing program 3 (id=165): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xc, 0x0, &(0x7f0000000400)="e48015eddbe8a528d9b532c97f4f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1m50.879590796s ago: executing program 3 (id=165): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xc, 0x0, &(0x7f0000000400)="e48015eddbe8a528d9b532c97f4f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1m30.003407739s ago: executing program 3 (id=165): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xc, 0x0, &(0x7f0000000400)="e48015eddbe8a528d9b532c97f4f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1m3.944043969s ago: executing program 3 (id=165): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xc, 0x0, &(0x7f0000000400)="e48015eddbe8a528d9b532c97f4f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 38.346320824s ago: executing program 3 (id=165): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xc, 0x0, &(0x7f0000000400)="e48015eddbe8a528d9b532c97f4f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 16.144432949s ago: executing program 3 (id=165): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xc, 0x0, &(0x7f0000000400)="e48015eddbe8a528d9b532c97f4f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 12.630291655s ago: executing program 5 (id=818): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)={0x2c, r0, 0x7be9ca225e964e2d, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000004) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000480)="eba45a57fba15bb0a8e9bae2527ace704b509c8242f063e827b9353c21ff7fc525bf96adc120b3657cf12a93d7aa6dde6faae4ed732775a36571270fbf778c6db13c92f66e29ccb9eb74bac03c843bc7d6db25d61ee7f7692f11611ef3c61e375e650741d2da2058d03a82b576c0274a130bd70a104654ba469353939259625cb970664cf0eb65cb3944315ee5ef1e1b0563237422c873b6035c957afbcb9f478d19ad", 0xa3}], 0x1, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x40010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.607518954s ago: executing program 2 (id=819): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @private1, @mcast2, {[@dstopts={0x5e, 0x6, '\x00', [@generic={0x2, 0x2f, "ae0400000000000000ef39e2bef2ed4e6a567a6f04cafdc1a2d7ed4643a8b7d38c45a725fe866a672f993f794bbb47"}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e22, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e) 8.995160305s ago: executing program 2 (id=822): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x71) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000240)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x41}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000014}, 0x22000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x2, {0x3}}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r11, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd29, 0x61, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r4}, 0x18) 8.907796903s ago: executing program 5 (id=824): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fusectl\x00', 0x4004, 0x0) r1 = socket$inet6(0xa, 0x6, 0x6) r2 = dup2(r1, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x36) statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000680)=""/210) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x0, 0xc0580043}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x4, 0x1000, 0x0, {0x7, @pix_mp={0xa44, 0x2, 0x30383653, 0x0, 0x5, [{0x1, 0x7}, {0xf, 0xc}, {0x15e63693, 0x9}, {0x3, 0x9}, {0x9, 0x8}, {0x8001}, {0x673, 0x800}, {0x7, 0xc}], 0xe1, 0x1, 0xa, 0x1, 0x6}}, 0xffff7fff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) syz_emit_ethernet(0x11ac, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f00305840500601000000b0000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0xffff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0x1, 0x4) 8.122268016s ago: executing program 0 (id=825): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = dup(r1) read$FUSE(r6, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800) 6.77950687s ago: executing program 5 (id=826): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x2b, 0x8, 0x2000082, 0x6, 0xcd3, 0x9, 0x3, 0x0, 0x0, 0x100, 0x9}}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="89b0202314000000950000000000000082972f4941cdc44123315b7ecfcd40ce7319fbd6d64aa6d51971707e8a205a03798b6ff888755a5c649e2ea7654fe0b0617af9d6101424b694a733e0cebc98bfd0ade2cd2c79078ad90fbcf9cd1d00c7fc973e529e8affe5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, @value=r0}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.487469304s ago: executing program 5 (id=827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELFLOWTABLE={0x150, 0x18, 0xa, 0x204, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbdd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSET={0x44c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}, @NFTA_SET_DESC={0x430, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffe00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b80000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x41f5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x766fd900}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaba5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c38}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x22056970}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99f}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f2}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x654}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000f40)={0x0, 0x0, {}, {}, {0x0, @struct}}) shutdown(r3, 0x1) recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001b1401"], 0x30}}, 0x40) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.157264262s ago: executing program 1 (id=829): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)={0x2c, r0, 0x7be9ca225e964e2d, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000004) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000480)="eba45a57fba15bb0a8e9bae2527ace704b509c8242f063e827b9353c21ff7fc525bf96adc120b3657cf12a93d7aa6dde6faae4ed732775a36571270fbf778c6db13c92f66e29ccb9eb74bac03c843bc7d6db25d61ee7f7692f11611ef3c61e375e650741d2da2058d03a82b576c0274a130bd70a104654ba469353939259625cb970664cf0eb65cb3944315ee5ef1e1b0563237422c873b6035c957afbcb9f478d19ad", 0xa3}], 0x1, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x40010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.96728176s ago: executing program 2 (id=830): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) read(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$int_in(r6, 0x5452, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x30f, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 5.953887305s ago: executing program 0 (id=831): mlock(&(0x7f0000ff8000/0x5000)=nil, 0x5000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a69702c706f"], 0x60}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, 0xfffffffffffffffc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r7, 0x0, 0x0, 0x80000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 5.359539783s ago: executing program 1 (id=832): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') read$FUSE(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='#\\:&#-][&$!\x00', &(0x7f0000000540)='vxcan1\x00', 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fedbdf252100000034002d80050004004d0000000500010001000000050001008100000005000400010000000800020003000000050001000400000014002d80050004000000000005000400010000000c00060002000000000000000c002d80050004000000000008000300", @ANYRES32=r8, @ANYBLOB="765926b759c372945a495c00000000"], 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x94) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) connect$bt_sco(r12, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 5.076637408s ago: executing program 2 (id=833): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') read$FUSE(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='#\\:&#-][&$!\x00', &(0x7f0000000540)='vxcan1\x00', 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r6, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x2c}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x1, 0xff}, 0x1}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 5.042777204s ago: executing program 1 (id=834): r0 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1, &(0x7f0000000340)=""/118, 0x76}}, {{&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/181, 0xb5}, 0x3}, {{&(0x7f0000000600)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1}, 0x2}], 0x3, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xa, @private=0xa010102}}, 0x1e) close(r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) 5.003316901s ago: executing program 0 (id=835): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x20080) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x3, 0x0, 0x98, &(0x7f0000000040)={0x2, 0x0, 0x5}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x1c1142) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1200) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r3, 0x5607, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000480)={0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[0x0], &(0x7f0000000340)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.039309249s ago: executing program 5 (id=836): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r6, r6, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800) 4.017347625s ago: executing program 2 (id=837): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)={0x2c, r0, 0x7be9ca225e964e2d, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000004) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000480)="eba45a57fba15bb0a8e9bae2527ace704b509c8242f063e827b9353c21ff7fc525bf96adc120b3657cf12a93d7aa6dde6faae4ed732775a36571270fbf778c6db13c92f66e29ccb9eb74bac03c843bc7d6db25d61ee7f7692f11611ef3c61e375e650741d2da2058d03a82b576c0274a130bd70a104654ba469353939259625cb970664cf0eb65cb3944315ee5ef1e1b0563237422c873b6035c957afbcb9f478d19ad", 0xa3}], 0x1, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x40010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.858523165s ago: executing program 1 (id=838): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045702, 0x0) 2.954569022s ago: executing program 5 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = dup(r1) read$FUSE(r6, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800) 2.86732269s ago: executing program 1 (id=840): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x71) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000240)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x41}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000014}, 0x22000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x2, {0x3}}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r11, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd29, 0x61, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r4}, 0x18) 1.881695332s ago: executing program 0 (id=841): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'}) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240), &(0x7f0000000280)) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x3a, 0x24, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$netlink(r2, &(0x7f0000000600)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r6, 0x0, 0x5}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0]}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x7, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.298667996s ago: executing program 0 (id=842): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') read$FUSE(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='#\\:&#-][&$!\x00', &(0x7f0000000540)='vxcan1\x00', 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fedbdf252100000034002d80050004004d0000000500010001000000050001008100000005000400010000000800020003000000050001000400000014002d80050004000000000005000400010000000c00060002000000000000000c002d80050004000000000008000300", @ANYRES32=r8, @ANYBLOB="765926b759c372945a495c00000000"], 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x94) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) connect$bt_sco(r12, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 1.227038151s ago: executing program 2 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x7, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x67, 0x0, 0xa, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, {[@cipso={0x86, 0x1a, 0x0, [{0x1, 0xd, "66d2951c85ded8167d77c1"}, {0x2, 0x2}, {0x1, 0x5, "df3432"}]}, @timestamp={0x44, 0x8, 0x9b, 0x0, 0x4, [0x1]}, @generic={0x82, 0xe, "1e1ae1aed4021010863112d5"}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x4, [{@empty, 0x7}, {@multicast2, 0x8}, {@local, 0x14698d23}]}, @generic={0x83, 0xc, "7a312933ce46125db82c"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x7, 0x0, 0x42, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x1, 0x401, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003740)={'syztnl2\x00', &(0x7f00000036c0)={'ip6_vti0\x00', 0x0, 0x6, 0xf6, 0xfd, 0xc9, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x10, 0x20, 0x2, 0x81}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000240)="b43ec2e5fe6ff07f41975ac57604489c2689e147cf5dd23a6df193001f6e5394", 0x20}, {&(0x7f0000000400)="aaffc97c3d488afc1fed8cb78931df6bde8c9a563ee5b24c3873ffed734c3d2659c4d037ed0459e29de6de3891ce92d4a9130a30695e8946ec5f43636fd04fde477e938c5942959e93dfe07e05d8213c592f8af9b87a54ffb456190f3ed191", 0x5f}], 0x3, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x58}}, {{&(0x7f0000000600)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a4ef015b86d209a6e254536687bb971d2275b6451cb6176f1b49e722b5bc65eee3ff0653c8af23b9e8d1359054cfd984c9566ac4afa5fb28c9d191630cd609824f5cd39a3a6edc2a24b4d75fe363df659020a5ffccf1af3e88a68de651ce74f6a05916a5ff9ec72e42d20d711dfe1937c28b9f0d14755a052d7dc0a7aa931a5c9f6a886a5c8b3414d37aa05e78e53d5d82d96630cee30ebbb9f12eeec6a75a22457331853ce8a9ccc70d0ee8b84efb99bc0608", 0xb3}, {&(0x7f0000000700)="78952732b6879b2480e3d6780e6c3480a0e3cf5dd6a340991a0f7f55584c68ac25535d41a94b898fdd349668ab88be77e28f30cb8493deccb6d4b5eaa22673fe226ffd25f4a737236194b9496e9d600ad733db44bc6857d19e97326657a2911d972fab452655eaf0208e7515d6791120da23baf78c8857f7c2fe8fb04bb1ffef92e049327d56fe5339bfdc7103d1b7b28f7b137465f45a37660466a0b6bf2edc36f0706e9b0fc7f0c2772449be1111cd01e9902592a8a7bf042f69ac42c2df91fcf2c94fbaefb61cad60f63c2cfb2f8a5d070011f42b452221537443bd10debc49892a8a2c6cb014d8c9113707949c6a495fa29fa9d9fef86eaaa51a", 0xfc}, {&(0x7f0000000800)="55c08e3b73a8d8ac6d9d443d9736df36652806c285816f1741386b8da90e7f3f2492eed9adb5e395fb67be167504b2d48f3ee9924f7cf6207738278087c405ba3b88ab3ac7e59e74d84b4205b754786c3ea7fd0949582af0b38128126b489acc677b862bcc", 0x65}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xb7, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102, @private=0xa010102, @remote, @multicast2]}, @rr={0x7, 0xb, 0x44, [@broadcast, @private=0xa010102]}, @end, @timestamp_addr={0x44, 0x24, 0x8, 0x1, 0x9, [{@multicast1, 0x6}, {@empty, 0x7ff}, {@private=0xa010101, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x36}}]}, @ssrr={0x89, 0x7, 0x0, [@empty]}, @end, @lsrr={0x83, 0xf, 0xfd, [@remote, @empty, @multicast1]}, @ra={0x94, 0x4}]}}}], 0x168}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000014c0)="7fdc269e0c0ae260335e00e8f21a73239dd0a2259f5df4b185532870832ad1522fe2f7645da60c1b492218f53dbb3bc0a8034974b6308f4f46d8e315c8ee4b7ad27b19f64bbd83ef13721503df336595f4854f5a331fe6e157428fdb1404174ef5562d824eae7ef7a3e64ebfe31b634690fee91d4f952384a82ed10bb82b26f557aaf5817dcb14e7a251bcf544aef650e7211daf35d26436fb04bbb6dca33ee2028686946d49f2429c6d3f9bc783ebb28a229b89fd311cbd859f3f0257010be5c534e895665f8428cedc2472077e4cabc7ddf3d82f9e0e73cf17269d1d05517be2420d73d2ef79877e893f9e6d75bc1d03c3a97aee978efe0c5be5f3d13411f6d96f2681dad8d5c8c89eac068e71c7e10048273fa0225a2c82c378f3fee5735dbbe967fc9868b2bc63198c8bbde9fd666fb5c1cf7ada1ecee8f6d4b4b2eca4e60b9fd76d2b8058a874250d15ea2e1c9646202309785c6e77953545e0724bd654606ec47e784e0095b559539f624617ed907d4917e32221381d28a23f085c40f7210735c4295b6841556efa3874051b043879731b1b11fb90f31c82e52912f509ae9f4e115bc1b9b8328d31d8238cd40b3a6aadec23c993e3afb5844c1fd80943504bcb9295b45878425b130c9515b14aa81155651e1e4153e6e392bb89f2095a982892b9593d79e8819a4bcd9e99d3de47422238f530f6c2c6685c3eb976bea2aef44424eedbaadc395b112ebb1708834c2239d51c4514ff6d616fe7eb8572d072800f22f9809a15e84a737c7d45b4906480a597e33935134cbabbceffbb5fee6a7ff85e81d39ed58d67ecae6a1696b8fed1353301a75717762c442dbcb11f9b736cbf2f145abda1d5961e38fbe56e7425029363dc6dff86e8decad6ca339947cf87e2a7bdef3e6a5a351de0fa441de9fb6a7cecf4b9aaaf1a3883c326bf80ee7f526fbed89f010e02092062198fa8e98efef9823041a310fac26845dc3bdaca6268edfb9aa2c137cafd756867821e99413a681b27b83800a61366cc37bb0b09f49e92d3303206e4a5a2d8d76a8043f07cb5d8c78bbd7375ec3d512770dc7cd664ced79082e8729230060423c1a42948c4497e42560b98307c795e682fc6fdcdb735b79f35a06de3dc91d4766637313aae65583ec007f46a2c0fe79182cfc196d372f478865cc1b39c8b582944bbd962b214f9e7f610d1ab30735abde37c0d6f272552100bd66f20b52333d39e84931fe49bac5f516e873f654d8a1c1d6e43295d8cfe2ccc8e29629f756a87bfc79a08fd91575d82dbbd26602ee9cfcc9f2a2989d2d7a76c4d621fd4274e6df24356c60ea25ce71b4717974448e992adf0e30858537d71d031d6596a4d61ca8bf4286b48ac7fd01dbbdade606c3c7dc4a87a3fa176fe927790fa8d6ea14bdbd252c0438367baaee52cc3fa00288802e95f89f18fcac633894576a6021e1574b345e8b64111bafa5916cc2148b55224fbcae7799490dc13f7ae83db8b9085f47ee110a6de0d9ad6be77f453c66e4c5d687092c962401fb27b3af0750478dd852a56ad08d9f6aaeaa87d1f871cf8c912a0025d8757f639e8c3a0ec0b0742a115d5ebff5a9261fa6e5520d6dd82240a1f59115405a0f3bda5e0ec846f89d8ca0761d1ffa7aa0323e26501a2761d5b4469431eb50487f5efd83021b04b8d4ddd54e6625729fabf05d84fc464d94c19550b1e11dfc933cdd27042d9e8ed2d6280e5771b64090bebb659decfb8bf3835232bfe243cf8f22b543dbf5c2634137d4c36c2e29275aa1d62f34b223f14c6f164729b52413f96f226934ee63ac603208aa191924818f0894cf7752d5570686b63f2af8e104b1f2e0c559c1a4e961ebd1dbaa7196429b4fdab03cb2faf2aeff25dbcaf89eb054471e0cb08c55b9af69f45b7ddac610e7f3a08ab6fefafddb3559f4e62a72d11d7b1862dd21b10508d211c8bb6c94b21d1d63990f35bd0698465abd1dbd3b8b78f4a01300fc203b26e569b70568a4b036bf8317dadd456b17f716a4dd62268d2199e7baa3f27b53f01768588241c81671981dde5e802cce1bfe80bc0d1f4d27f4e4dcf11afbfe419fc80edf38fb231c365df2d24dec9184e3bb77e9d54ba45c1950a1783e808325835a3bde3f3992d39894988d6187d828763fd4d18d6ed0b1b4882c5cf40ae41143b155e56b5f1184fe2f2da42da667e7e0eedb33791759ba06b6dfb1d284c86c0beca36efe7d8f959f79efe2a1077f8ae035b3be2632259069fb38f2394c6bd1dcb3bcd2f0f70cd6e6cfe20c5f7ccc05bc27ea12f16679ef1d9466e91f0e596b2fbc9ca53944b5e6e2291abdf439f3c5805e04517569e43dfb2ade9303e77375cfa095929b3ec7997c52a20c0a70416c921bbb304e1e954ae438aabadb79d4a5b295df695a4832a42c9c48824285fafd238cb88258a82a3d95e5269a086d50dd32461fde0abd04e64e049bc2431859c663e069f4605e4b7d1b622840d106239a22706bfdf6e5362efc5b9ec7d858b7e4fb3790c0002a89eb52f7822b9f7c9c810d44052347b2d1606da4e5a1493a5878e2e90207d6795bb4c1cb5621d1bc253abe18ed22a53f67ea68c22c7daece00cbff5e2f6351323d1ec844cdbbe8637ab0c2c5091fec5f598032302a6db45d4da840e2fae698150af636193916fac3292c37c4d1f33c15f7f8e7a263de4be4656fe1d5ebb7ae2a4967d9c2fe648fa92355b16239bed31bbc7f7dc5eb1b560eea1274e57c609b39ef1bd09a5f62885029e0c68677290b042f8d4e94c351a9d677afdb1c9ab593cd19502f34ff25b4038af3df354573eefd6a475af97e25cfc563e9139cf32d9b36488ddaee179cbe734380bbcd977f6d150e722cae8a032e16713b81391539501d7267b8e40642ca53aca80c53901311d8410b7360c5e0abbc4aa88f8df0023284dac6553aa5f0ad478be830e1c84af2f9858202b49d941e634118e635f2b27e599b813b1a4a5afe21e384162b2c5e9ce405c5a350d22f43b09be0f0a7a6868ebd011e085e8d2e78986e816996d86645a9a9f92563cd66bd52ab1a0b12f85b1a85c00eafc75436630450614c9534da253dbfe8e1b9b59f7bff34139b65206fe0f8ac167ab6c81457b1d0b6d621c86d579800d5ebc2a6beef4465e618a0a9689f74e33d11a57de2600331975c67b1c3fa49a3fb7939f2f35fa7c91b51d396baddc32b5562299c721d433b3389b92f9e5c52dfc4d08cea221cffdfe59c670dd58df26fe2bad759658cf2cc23d150a26f7192c19f04017658c8b540c024c4d5e8cb4c15e6f099face4dfc898cfe9f6c0acf376b18dae0fce909070dffd8aad628993e76a0f43af57eaa41fd63894233f9a7a47887dcd9e222b3b616eecbb6eb3c8926cf68bd358c719bd041a924f5cafe49502d7ec2ee0fd658c111517a6baebedf916e6bc47b859f22e28d6922f845ad8a727038d0cc34f30473c04fcf6bf8961c524c783daf75ae02f6bff6d894850cbf3a78ee46a5247c61956a21a9d1085082629e46ef24e9918208709daafaa3d58e877ddaef8583b9d6c573236d482f6ffe43a18dce67ae82ac830d8a8d9b8269d69a42a92b4d34f270f765a018f619cac84b7ea05f3fef727236e0a67c139018d9bd7fae777e39033bf4a297406c16363c9ae2e0d3f3273a5c43b910056a38c4e6258360d07ecfca93b1e5ad19e1bd074107c54606e28dbb6c5c97b9cd601a334da7b0934f7e3e23951b7d8eac9e8b84172a1c317bd31cac76605e23425bda0d04da3232c98316282de688d1372507fd83142672a968eebd2dd4b9423332b691b865137110621f940263fb73af25aab40715f3bb531b273324e7f7e66afbca957a2227efd91fdeb96e9ed7a0ae8f2b03c9c048813cd3c3ad14d026c3c882374e0a2c6bc3aabc8ba6e43d227bb0a345be6b5e961d9233cbe6ce2736cfb8a222549dae2c933784072a81d09698ffae0b735272a0bd5fe3519cb451be3bd1d1637152c9115a7305fecec6d81cf947158c2f9dbcfa9143f56099166d8bff0ef230007fe0966c2ac6f686d2256f0af39c251698018ae58a7ce0dd1dcee56f664980196a10dc95d2e1049aab4c322420cb35a825ad8a6b7a98e3bb16514f5eef4f0e0d26e8b91032e23be561b73082f81844a5491ab122dcc4416424b7637760932fd734fe2cf163a641f7b42bc491ed096b5fd03f0617ac15e0b9d60fd784c5d31f52687fadc085354ddae94bd6c39d562853bc498ae51555817a99b0480ca6697d6463f73f0b7f4cba1c7e2621913f673116ef6898303f304bae9971965563f650d030db9766e9c736c05a9e76f62bb1483eb6da266a42bd320a1131d77f3d74babaaddb60f752846fc3221e83581cea21e5e3f110007f6c9770d73775c7e3fafb0ab70b87da26c7bf375e8990f9473e622e54216e64d3d9499309efafeca685f5fba0dabab632cf6f61d4737f0e6580044854d8c13bc5b25386c19be2ae47b0d41f65a55c01d9a3ac1fbfb8f88fbaf5754a9819d98d135a1c88391ad735ed20ed2acacc7b91919c9ed5160a648d691daa60eefa3423e3e151be444be581f2074ca8f780d25595ea3975c5539e84134167267c84b129a3a1e1b43b477f192f77633d2dee7c54683b8dbf5122817f21be56f0788a79e8645df9d7f1276854d3e608f97bf2e9b8925ec45e1294f5357b1eba57f62486ea82110a6bb85274e1e1f646b250deca0f7a117690a8f8e275fe5888848af66c9ddb1621749358d24bda54383c024fb4babd0b038bae09b3367b39b956694d292a1de2be7d6e854949ab6982ffdc80b4a5e8daf3cb73a088af9aa1f9587e51881aa9845c23c382bf50dfc8f1671176233431c4812a6eee9539c3c3e061dc504690073a3cb28d4bb80781eb05e52b2e75f45419e0febd9815dac21247753c55b2060e8269aca40b79cad6e9370471bb800714e87c0cfa8670165d27bf725681fc4cee79a55fc714b27dc3214e8e0f3594e41bef87437b7bca6731641cac57df115928a9afa266c499e21251858beea57bed9eb645be03b5c9556e3f35e928821a85ce8308aa6dfa19bb089a7112d793f51c2fcffbf3b78f1612481a49f2fbebb3df650b8c0040e0f588df7bbcfc7bb9f1dbea85329faac4ea11a31b6b17a4aa7ff3eb08a9ad0d445f172ccc09ea2200a412f154b3091bd58b750ae39839d9f2eb07531ad5150d4b1fb624456ca733df48ea9f09478e3246dacc3b01aed5582176a290c9356851e4b67924bede977d543a6d67b6719b3c1e450f35e4095a16898349dd9daceaee6d84cc60c80df85fe70be4d57de43e202309df4aeb319bdd32e755c9787f4da8dd34c7d721371517b293d5e08a895518bfa46d73486be697d8c2b84e3867b05e52a1b7981e9ee778d360a2e5c78eb5bccb42030fbcb2647622c95fcef0749a09f947bb6caae83d69fad7a07007f8de0dfc7e3d0c6fb0fd9788cda8be1184373b26a83589ab5777e178401c1ae2badd22c2602747267c3576f5a26629d46d23c71319cdf7bc14e71a8e531242bf56cc31f279da35d723f01eb8fb3623fbb06b6b90b77d7b41a5f90893f26518d9bb8e0defc11e1eacc9e79d907d13f0b08dead71492b520633db1251cdc23ada454e362051b21b2de0547d4968e48401633d0208567f068b8e3d5dadb3f7c14c169208b670d1f6e5a207c49e7f1b5792191b7c0df73e9a84c4243020077192a5a92ee2c3e16f88bb79303756e529b102d4d16a0d0c72648792d97051ddd16c22f272558742d73c9ef93cb3d3ad97f3", 0x1000}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c80)="e484b0d6f108a0f94e31c2d4ebf6647c61a1567bfe2b07a315e5afdc0233c7cd9883564ffa2f58dd9a9a657af56f2d168c5ba9511a1ccb48288ccb25adae2d3312c7f8260e9806887fd3d954d79251421954b69b4b64bbd8264b6fa0b9403c52af61fef67fa81a2ff97c544a1e4cc735760a4d9fc6f03789089db9945a18f7c57a9234028afc13645c09b7ad25ba500c72c57415227c12c47fdbcb837488", 0x9e}, {&(0x7f0000000d40)="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", 0xfa}, {&(0x7f00000024c0)="ec7437683137354a19b622f21bcc6f033bedd6b5d6e8ad06d2975b48a0a0b51db3afb5c3277e4563cb93bde2ea28ef4c8a6b3414cab86f89140cc1228f846c750bc60bc37432509fe046a19cc9223b6f5f81bd07551e90eace648b60e37be1f50048c7c1d9fa58c8fecaee86c5411dbb3fe98e08ed15e63d9b4ae1d4670d49eee10865de9a5a4d4534dcd8e693da6a343de4c559dba1b5136bd7666a76146a3860cb6ea39154e377fb887059c03cb0b5c36eb1694874178630ccbfb007f413eb7828aed3f002a1669c61ee150242a657016dfa9915e0c382b65d714efe5d7bdf12b24c89179ea101c7c60e2f28e9428fb8dbe48ef3d23d97351b38c8950ec031e852215be773087a4418c6b8722fbaa74c05c9ed037d9cf0223f019192d40dac55eb4fd5ac5690c836cb13af92beec7c5329b90363ee6e7dedd33077774541e61104fe681655b582ed711678d0b53ebc817d8b80d997ae62635f226d203eaac6065951f0fc50795190fca49a8cc1083e1e29b7652840b50b9b14179e9c0afb49e44bd599052dffa1f889fe54ef0e56d51f5f2e610de88879b8f0527dd79a5466f0e2fde1e16ff013133c7c849eb81df1b20b126044e981b780df45edd8fc6142b0b2404b428ed0c7e4400f9cd9ee638aabae95265e54c7f58408c391295156d91a867731411cd935608efa146759ecda2bc2d14be54cc3edd4274a960c3015bdeb2be02c9311a17a93790feadb1de8045c0b6b31f4ad161b3798451d6865b4c7008f9fab847e8fe47cc1625cdaaa1a277489b2f3475540bc3c007a0782f4613b0537cb712430db6129ea4391887bf9814073c564d88a114e75cc8f6ea126bf2b31b8e6bdb80ee2c81986513d3a8f42e6b3dd0f27d8a9574be9ec44443a41debbedd3ecdfe36da4809e58f602c78c5685b5185fa05275b713aeb9ac8ed85b83619b2b22a3935d8769bf5a8c1c9f1209b3e8aeea52ff7259bf779e9d60ff7fae1d397accec5b9db280826f660a2ff5b7a12b3fba2e6128cc6c11c61576aa23dc4493118c2f81ac99fcd25def566b948694bee0df53d3f730440cc7f87128d1914ca59a6662a0c9c4be7544800bd2bce6d82b9c9429a0aa98d247522917dfef09612d0adf5b339514b27d26ad475f0ebdb534fa29b48b47004542ee1060b9558a2cdac013c992e95707834a30a3f0c4841916eac5bf4462c7117d61b2d89f48ade2d361cfacd7e00556663c84019d5cce0c30faa6e93a54ff05081b17e412473b98d102b2bb7d69728e17fd9bd70327bd31e5a6d750cd51eb9154cfd06d470972678ab48076f508f7a484c4327d43171705df27abfb3b42c0ebc8e1c7ac5a4ad80f0c399ee6a379c3eabb1c39292107becc46f1dff42d10a84d94990d02142a3f9cec01d8c05b60cac4f6101a048500f8fca3c2729a180a2552ec25dac6f1c0fb7677bbc1c1c3c40b4381894b972a46c24457b7fbaa4c2280459eba31590733ff978b6be8d6b871727c1256ee0305427ab40fc2303daffb8b99bb41b8d799b6e8d83cac2b6bd1657d61d43d0277baa530b6efab0bf81655d62b2fcde13dd306826f45f61759d0e5dd5a8a8c4c8df5874d09ee3f93c35aedfc3deeab59ed665223ce9cd0a62b68ca397cc76a77f18f2c6faf2184f6f911be26ae8f91041dcc6462c369b018fc80a9b3147b976158e9408ab3db5018590006566d701332d3a3034249bdc5e4640a1e0ada711a1e013b9d308cec1b617790fbc4acd60061736affc3aba033d0c262d19146a68a9bd48e6ab0f4b54ca12b351273787da29ff35f08619328c66606f89f73e4ac78417ad9fa73e324610ec1331d8383e21ee94a17d863fcbe23a45747fea203b405c5614ebfd42ad6459949ff84dd844327cc9826e2870dc69cf2b2e949f75df6aa98236b1f4aa6b81bffff6301aa8928cdae2b494cf1d651560eabc2da144c6fafd9b4f9b9dfad0cd920b70369b724acb4a32b7dfee97a13cd9ac7596ea079649bf3b9fb240857c8c584327369107c6ad7cb31471a59496f344e88e268c5a9f9bf34f5e2507e78ad2f6f5c5e48ba30752d6f00a196235d15aafcf03a065cbcaaf515d02f7110734464ae1fb90a2312f588fe30497735028f9fd7dfe00389dcaa72d7649b2831a85277849e144e62e51676f8e2de01d23ba836c296332db7f83cb01fe30b770d40bad4c2a148b98b3cc573259cc4b20a801dc248b23af7083e9f1b470a52d5a4aaed9e18d168ef4c379cc107d98c8e5cc12baf05f5a9c948d3955d2c52981fdf2bcf38360abc0e9be383d17189e46695c1627adcc3c36e452b127364d9720c90488d4d005ace431fb306a109e1e8f8506a19f4b0d82976e6ca7b9ab7a96ef7b3f83d440b4ac2e5075bba1c738d6fe4fd4403f3315597f0cae4b96d4e85d678d049f57b2d64ddb994f477dafc08fb64c0c36fc48840423ba245bcc2bb6588eea0119ca86e56de36444a6803e27c22523fac43ea9017e9f286ea7d6d7a8d5db92756878598e89d07b2186dae8fa4c9fdeb9a596b740448c762de7d77cfe12368b5ad8bc08fc39d899a280c6e83c3e74dc0cb059f38ccbf5393fc56e4756139f53ff69c7e3ad9adffa4de3e018fb20a168145debe607ba2f936f2c2379696443c82110dcdda3a081d42c67634508b5afab207f2353e2faa30f3475cc44c4b83584aba23703b10e046f1284afcbe7bb1d5084f6c32a448587046d4b8cc0357a1bd2327afb33db05c07fa29f24833dd8bf50479942ff7f593b943fe065240deacb98ab55f03f294574179f3b1689997d1c84e229f0327ef3ff10504a4508ff6c2da12cc9d8f7c8ca9fa604ff960ed39637169b3df376fc8c57eb0a8e65cbcdea02aaa0872c81c0380f96ff1c2489ec2a7b603978bd50d7b5163b0abd7a2a472f5477699cac9c8d34d03f7d80ced78707846c6ca5887b0cac9f946451e213fb335f7c10530b4bef2d7e36689855515bfd86ef8ce96745d1bdc36db4e5116652ada3cbed3bd625c75c905df4d69ba1a749816772a47cf630e67c0167e7696185b03683a6ddbb4d787e8356cb9bb816110fd8dd9677d6b227507e8859143920611515680f5ee84030c38a4a8e296c0a68fe5fd7e4fd6b4a9e67aa5db8f861e9acbfc6b21d4b2cb39b4032e9cc6d078dc2445427bec2f3cc6b6039d6d8c6716410ba46211dc6f9f5df5325fa50ca6ad3177ef12442cc04d68a6028fc4dbeab10a5b30176aa6f8eb8232adccda6bc459e92bc29e6faefca41db4f34bdd285e10cd753a78fff813b83aeb35e6582886d4aa9fd6b50be65e52090a0eef48b49ac852005f18586373c6de8f010d44ae48019d620575a405efc0cca7e45dcee3f600e3727800c57f532f5dfb228e4e48fde1ba2f28c6d7183f3166a53c2be45dc5389c3ddd4dc402ebd793009802e823edfa5affa9c434400d148197da7c31c29d31e29a063c8475e5b744cf75acc7c392d3441128d29b5eb44f00a5066e976a1a2c56eacb680e8c1cb0efb204bc6c51c4d7aaf5c5af72130af0fae4e4f776f88a1cc35f7c8ffd9e5d6b4da6fcf5c5b8882592f3e1acb27d0e14e8b66678335dd8a905d2341339f4dffdfdc5adfcb9b6241d8e96513591fed5f0e015ebf0cbe1be043895e54d53cfb1ee3874f56d3e8f91f8a89f3d889b9efc3aa87add3aebfc7815cb6c7ae981a876dbdeb3046f3f42148801b672c9cc379be28ea30db1b62a0a05df3e8db07d17cd0cc44ca1544f902b95c28a287c97505561abae5ed23a26eaa153af769e5fa1e10704b4a83304f04a3da91584a4181c8a9ca15dfade4706452cad8ff76bc965f5cb06587b4106b718b3f0bb09fe0b1ae943d2200650fa18daf8fd1f4ee6a658c010c4c9abe6bc002434a1ef014393565c80bf57721a3ae3e8dc32ad5d001d4ec7e178e21950b0317aec2dc1ed55f67a0a7fe0558f8186094a8f37e34a61a2a0021121205b0e5bc91d7e39ebd0b26210a989e4786a898c3fd4bee98b01730943c90fa4e44488b69b599a297dd8613a830b78a53c1263faa5a5d3034c024f640b3e5a30dada824791aaaa8dbb7fbf1541f5de81e043c94b2af31fe432cedc6fc5231d153c70e81d7a84f331a2dcfc5e79bcebc0b8977f7daea1f90afc032874aa098f4de095b6fac0fb95412a648284bdf3eb1213a3f1e79eb89d3e092ddc078be3692ba26b3e8c9007e38eb3059c70b925c173ebb64924fcb7fb2569bbcf7e5f49473ff4af5499f7f9952825e525ffe58a27b500f48f438139c1717f3dc6467e2def80575a5a3d28dd42dcdc7292412a634979535f4b134d625c8633fe71cbdc324e4f5501564519dc8fa15fb5e6c056ef02b7278ff37975f674690454df3f7ec0983be934d7da50167eb3af3b74861334c3f388dbba8141b81cfaa60dd5ff97ee591fa131d71c82cb37c7e4f9b4cc721f261097530ddf203bb07dc1ceb8b3f53ff3a32fddfc7f6f4882b536675fda45b50333002c3cc9dc7fbc8917f030cb1068f45fb625d60e0ea6499848859fc670e5b10a2a1b80b373d6c601bb13e62afa99d29f1783e333fc27ba53b0d2fa14a26e720c395421699696e7211c6382b33ec5e90e143f05d9509279864ee5521fd3c0f5f69dc7e97b84994c459fc445c7e0ed8edb5e33f87f8ebee3d6f62355e2d01bcf4c7b35a26182548ad1d3473bf737f669a1f49465022b0053179032098cb520046f55a6fb6e2012daafef465c3f8167b3cb620d4bf49ea998636a48e7359bfe80f0ae036fbac32d492c11b058c34ef5aca60dd98bebfb2de5dee7fb04500917cfaeae23b8e16712031b11469c55cf8440476ca6aed7fd9f749c4e7430c85c7e236c0eb8693c532e310eb6a971a2a45559e77889e3d82276a93a61782ab4d7890d31721a207bb4e2aa969a97e9aa05cb158be4ad62115e1e6381807b282720d91ab3e2e0ce0e271b0cec218d42bf37c083ae7d21719ced8ac789fe18c2fc6f2985a1a693bcb37a499d7689765afc28630dd58b54c2a97619da76aa214903bbccffa27f4f1b97382bfdec04d32ae0c63a4771b7b9c1336965e33ed670b8f41df86a55573db962ba2626bdd25fb068d6fc5ff91eaa3ff368b53a0095154641c9a81db4c0f151cc2d5f1b17a0308e66638a7fd74a094197970509269ea4f18326976eff0558ecd84e57b419dc59c7e082586625af0469d1bef6b363d1f806f344d23b67d65f1f23ce710879f02db3af89f5ba0ca0e593ba53d2e2e1492a3085d66849e2c2320a24903f714f473778c1a330a8af624a36a346eba98e904f645cc92cdbaddff28c824c0e9c254f392e1d66147c4a90df5f3e56aad04254806788743bf383dbbaea4e1baa13de792fe3d26464893bc77ca2cb5ac4e2e6fb293ccbe1da6d38f00b0836803d1b958a904b449c8d6b1625638318bff37fadbffee8cd4e394680c5d92358c95087ffa15924f6b907077e945c1709f433ad74a3247f8329cbf2fdc10725c48cb5fbd9c5dadc262f58847be8b970df8b1036123bf5135f8132d7fa0cec6ac4ec22d6dd6dda9b287a903963946b5b18d9a16e454ce5e67c0187c8bbccab738ae499a6a3aa2d37885af89e9d752153bdcd67d573c1d7624eae0ae56810109f56e89cfff391a2ed7f7a820e57bb4d1e0552761d594b4b8782d873de57d31a2b9db54a06bbd52ca434e1097348538dc98a21c1abea9980028b9c8a808b03fa1bb36d88b887ecc5230cddce226b0dbe920dc4c4e57457a4e4bb5b7296fb55e8f856ad045b7d7ee5d34296f76651e5531d6655e4be9b10b2b76b1d", 0x1000}], 0x3, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf6e8}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f00)="941f3fa9ad125110925392aa37eafd21a8e636a07d5183b19cdd662ca5fa0ede97f22efb04cb0351a90a88fd3ae566d5da99c8a38fb4ce20d32acf60ad4d26ceb921e4e590a14dcd153fff5e41a4fc4ebc796081e6", 0x55}, {&(0x7f0000000f80)="db3f1e993bb8f06f013078ad5e8ec7ee811de97f75a4503dc6d82ee12f7152a7375cf2c29d9783261417e98214afa8266c5d0690fab3122c09da3f998d5c3cecea9468add8b3dc1fe9061c7149a773b198fb2a3a9b174c308c805697217096b46e864f6901b21d4af97427b0e49e17e3234d36132caccf6588eb0421f8458b8b3e425793ebcce3429c6e72a5454372d66a75f1090ed53fd01e809a01d12d", 0x9e}, {&(0x7f0000001040)="54050e3421a289325a8155c37e8c8590bbf56f54b6fb36baf8a97a702ab51c6a563678a56026c90382546f918959ba32d9f9fcb63545537b245e4520674e1b119c8936bc38cd332313e0496968d726e924b2cf0207721c88c029637aedb857c249ec730166248077886c5d42ee8bd02b903af75f1694169e59b5f39518ffa6799253fbba6bb8b0bff8b028ed1cdc16935a33d0307833aca0a4504d167f0bc0000ecc4bdce0998f2d90a2fa6539cfc6d0833a0c5705ea647ae2a4bae76bfb317effd09dfb727a9ade", 0xc8}], 0x3, &(0x7f0000001240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xa1, 0x3, 0x6, [{@loopback, 0xfffffbff}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff821e}, {@multicast1, 0x8001}, {@remote, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x108}}, {{&(0x7f0000001380)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003680)=[{&(0x7f00000013c0)="0df0d92e56098e11896171d8ab06ef1c75c44775ec95f28f0349ae597c4e677f46424cb041730c779530fad848498fce23da7ec9b4b3affe972e13592a7a3c2a654371a53c2c7d9458b731ff5bbda93621c645385b1d40172a626c83a6f82265bbf4eebf644bc34021969b80b8", 0x6d}, {&(0x7f00000034c0)="0e3e17443e238eb0628b7a6635e78169cd16965d22a2964f87ea5ce4614e21019e80dacdcfd7d2a02de9c7ba1136011fa76a4c390c310c3336da9248a14d55eab04c14472847424abf2478276ea3feea52efe29c17ffe542da012be868a1e1cd988385c88b4fbb1dba730980d201a78e731638c16f50681275200db47b463b384cc6ad5464a62ad106a7b4e226d4f332bde79073cfadf6e803cea6bb0f69ec746f731559a5de75eb5477ec41033c41e67b8c585e13454ae6251c", 0xba}, {&(0x7f0000003580)="0fa26239b1fafc6f39233565b20d106ca27c5fff9b0e2a6a5804fc151739d4593846880745dc01d2cdcf78f99187f8d0def7b58d27b1aab23dc2faff965e9d02a6c9c0612e6f899efbb082e852a6881dc41532b6b2dfb309bba60d1c9448979bcf5311c8454ae89c1e6cf2449a5b8524ea97346ab6f2f1f075b88c9900f6c4b33c56ddc2364217a6b532323802249ce7f15ae1e5aa91c3af28c52fac42361372c34469b14a899a2e448e8a13332437b3d75494c423b6ee28863760729f1aca90e9993c9cdc03ea33a2b5144f8afa060458c366", 0xd3}], 0x3, &(0x7f0000003780)=[@ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x81, [@rand_addr=0x64010101, @private=0xa010102, @empty, @multicast2, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x90}}], 0x6, 0x40) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9) syz_emit_ethernet(0x7a, &(0x7f0000001440)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40480c0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b0001000000000904", @ANYRES16], 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, 0x0, 0x8) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, 0x0, 0x90) 558.205634ms ago: executing program 1 (id=844): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x10008, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000240)=0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x4000064, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=845): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x80, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000001800)={0x0, 0x26, 0x0, 0x0, 0x0, 0x0}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5f}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x41) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x25]}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtaction={0x48, 0x30, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_police={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044840}, 0x40000) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) kernel console output (not intermixed with test programs): 9.831761][ T65] vhci_hcd: stop threads [ 199.852038][ T65] vhci_hcd: release socket [ 199.869318][ T65] vhci_hcd: disconnect device [ 199.886928][ T7279] veth0_macvtap: entered promiscuous mode [ 199.902458][ T7279] veth1_macvtap: entered promiscuous mode [ 199.921970][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.937582][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.957298][ T30] audit: type=1326 audit(1750760360.686:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.0.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d9e78e929 code=0x0 [ 199.961319][ T7279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.990804][ T7279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.002527][ T7279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.013015][ T7279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.060418][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.070602][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.092894][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.101294][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.535340][ T7474] vhci_hcd: connection closed [ 200.538139][ T5962] vhci_hcd: stop threads [ 200.550263][ T5962] vhci_hcd: release socket [ 200.554825][ T5962] vhci_hcd: disconnect device [ 200.767695][ T7493] input: syz0 as /devices/virtual/input/input16 [ 200.908332][ T7494] netlink: 'syz.2.331': attribute type 5 has an invalid length. [ 202.424118][ T30] audit: type=1400 audit(1750760619.097:405): avc: denied { bind } for pid=7501 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.454399][ T30] audit: type=1400 audit(1750760619.097:406): avc: denied { listen } for pid=7501 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.475094][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 202.518193][ T30] audit: type=1400 audit(1750760619.097:407): avc: denied { connect } for pid=7501 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.544267][ T30] audit: type=1400 audit(1750760619.117:408): avc: denied { accept } for pid=7501 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.578050][ T1157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.684358][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 202.690960][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 202.703332][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 202.712821][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 202.721939][ T10] usb 1-1: config 1 has no interface number 0 [ 202.728133][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.739306][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 202.753088][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 202.762229][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.776273][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 202.978981][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 203.059456][ T7518] autofs4:pid:7518:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc0189379) [ 203.114552][ T7518] autofs4:pid:7518:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 203.210761][ T5888] usb 1-1: USB disconnect, device number 10 [ 203.221544][ T5888] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 203.369071][ T7527] input: syz0 as /devices/virtual/input/input17 [ 203.537440][ T5895] vhci_hcd: vhci_device speed not set [ 203.738699][ T7533] netlink: 'syz.1.343': attribute type 5 has an invalid length. [ 204.227905][ T1157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.268905][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.277534][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.285440][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.293567][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.301146][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.512438][ T7540] loop6: detected capacity change from 0 to 524287999 [ 204.535502][ T5896] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 204.813708][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.860867][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 204.910897][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 204.922918][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.948293][ T5896] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 204.979061][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.987926][ T5896] usb 6-1: Product: syz [ 204.996142][ T5896] usb 6-1: Manufacturer: syz [ 204.999731][ T1157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.000787][ T5896] usb 6-1: SerialNumber: syz [ 205.020560][ T5896] usb 6-1: config 0 descriptor?? [ 205.082824][ T7535] lo speed is unknown, defaulting to 1000 [ 205.165199][ T5896] imon_raw 6-1:0.0: IR endpoint missing [ 206.272904][ T5927] usb usb38-port1: attempt power cycle [ 206.425416][ T5821] Bluetooth: hci2: command tx timeout [ 208.169117][ T9] usb 6-1: USB disconnect, device number 8 [ 208.177697][ T5927] usb usb38-port1: unable to enumerate USB device [ 208.515283][ T5821] Bluetooth: hci2: command tx timeout [ 208.584799][ T1157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.383692][ T30] audit: type=1400 audit(1750760882.102:409): avc: denied { read write } for pid=7560 comm="syz.0.349" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 209.407087][ T7563] 9pnet_fd: Insufficient options for proto=fd [ 209.415382][ T1157] bridge_slave_1: left allmulticast mode [ 209.415793][ T30] audit: type=1400 audit(1750760882.142:410): avc: denied { open } for pid=7560 comm="syz.0.349" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 209.421125][ T1157] bridge_slave_1: left promiscuous mode [ 209.449939][ T7561] 9pnet_fd: Insufficient options for proto=fd [ 209.462847][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.671508][ T1157] bridge_slave_0: left allmulticast mode [ 209.678060][ T1157] bridge_slave_0: left promiscuous mode [ 209.683789][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.780092][ T7569] FAULT_INJECTION: forcing a failure. [ 209.780092][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 209.793318][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.0.349 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 209.793342][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.793352][ T7569] Call Trace: [ 209.793358][ T7569] [ 209.793365][ T7569] dump_stack_lvl+0x16c/0x1f0 [ 209.793395][ T7569] should_fail_ex+0x512/0x640 [ 209.793422][ T7569] strncpy_from_user+0x3b/0x2e0 [ 209.793446][ T7569] __do_sys_add_key+0xce/0x470 [ 209.793466][ T7569] ? __pfx___do_sys_add_key+0x10/0x10 [ 209.793482][ T7569] ? ksys_write+0x1ac/0x250 [ 209.793513][ T7569] do_syscall_64+0xcd/0x4c0 [ 209.793539][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.793558][ T7569] RIP: 0033:0x7f1d9e78e929 [ 209.793572][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.793589][ T7569] RSP: 002b:00007f1d9f66c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 209.793606][ T7569] RAX: ffffffffffffffda RBX: 00007f1d9e9b6160 RCX: 00007f1d9e78e929 [ 209.793617][ T7569] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000240 [ 209.793628][ T7569] RBP: 00007f1d9f66c090 R08: fffffffffffffffd R09: 0000000000000000 [ 209.793638][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.793648][ T7569] R13: 0000000000000000 R14: 00007f1d9e9b6160 R15: 00007fff6de8f298 [ 209.793672][ T7569] [ 210.973376][ T7574] netlink: 'syz.2.352': attribute type 5 has an invalid length. [ 210.982392][ T5821] Bluetooth: hci2: command tx timeout [ 211.203996][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.229053][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.238987][ T1157] bond0 (unregistering): Released all slaves [ 212.003074][ T7588] netlink: 'syz.0.354': attribute type 5 has an invalid length. [ 212.513958][ T30] audit: type=1400 audit(1750760885.232:411): avc: denied { ioctl } for pid=7579 comm="syz.5.355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 213.318068][ T5821] Bluetooth: hci2: command tx timeout [ 213.827793][ T7535] chnl_net:caif_netlink_parms(): no params data found [ 214.881183][ T7608] Can't find a SQUASHFS superblock on nullb0 [ 214.995985][ T7612] netlink: 'syz.1.359': attribute type 5 has an invalid length. [ 215.041827][ T1157] hsr_slave_0: left promiscuous mode [ 215.148392][ T1157] hsr_slave_1: left promiscuous mode [ 215.159756][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.179071][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.188783][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.197771][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.225833][ T1157] veth1_macvtap: left promiscuous mode [ 215.236634][ T1157] veth0_macvtap: left promiscuous mode [ 215.242332][ T1157] veth1_vlan: left promiscuous mode [ 215.247719][ T1157] veth0_vlan: left promiscuous mode [ 215.442523][ T5957] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.466642][ T7626] netlink: 'syz.5.362': attribute type 5 has an invalid length. [ 216.988520][ T7637] openvswitch: netlink: Tunnel attr 3 has unexpected len 16 expected 1 [ 217.116517][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 217.145275][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 217.567819][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.586856][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.598346][ T7535] bridge_slave_0: entered allmulticast mode [ 217.606210][ T7535] bridge_slave_0: entered promiscuous mode [ 217.615954][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.623178][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.632824][ T7535] bridge_slave_1: entered allmulticast mode [ 217.647292][ T7535] bridge_slave_1: entered promiscuous mode [ 217.687762][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.706759][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.745318][ T5888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.777432][ T7535] team0: Port device team_slave_0 added [ 217.787658][ T7535] team0: Port device team_slave_1 added [ 217.888691][ T7650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.369'. [ 218.004601][ T7653] loop6: detected capacity change from 0 to 524287999 [ 218.430464][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.437656][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.463965][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 218.470279][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 218.503260][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.510672][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.524524][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.531570][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.562315][ T5888] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 218.643819][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 218.652890][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.754886][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.758396][ T7535] hsr_slave_0: entered promiscuous mode [ 218.793870][ T5888] usb 3-1: Product: syz [ 218.798707][ T5888] usb 3-1: Manufacturer: syz [ 218.803353][ T5888] usb 3-1: SerialNumber: syz [ 218.810288][ T5888] usb 3-1: config 0 descriptor?? [ 218.848485][ T7535] hsr_slave_1: entered promiscuous mode [ 218.857470][ T7535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.874282][ T7535] Cannot create hsr debugfs directory [ 219.096601][ T7660] loop6: detected capacity change from 0 to 524287999 [ 219.571228][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 219.593305][ T5888] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 219.605355][ T5888] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 219.617950][ T5888] usb 3-1: USB disconnect, device number 8 [ 219.938762][ T7666] geneve0: entered promiscuous mode [ 219.944022][ T7666] geneve0: entered allmulticast mode [ 219.958702][ T30] audit: type=1400 audit(1750760892.682:412): avc: denied { create } for pid=7665 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.442277][ T7666] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 220.800479][ T30] audit: type=1400 audit(1750760893.522:413): avc: denied { setopt } for pid=7677 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.842222][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 220.891276][ T7680] netlink: 'syz.0.373': attribute type 5 has an invalid length. [ 221.057238][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.111195][ T7685] loop6: detected capacity change from 0 to 524287999 [ 221.694249][ T7535] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.722710][ T7535] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.737546][ T7535] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.859341][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.913583][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.968144][ T9] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 221.997728][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.056380][ T9] usb 6-1: config 0 descriptor?? [ 222.170050][ T7535] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.215611][ T5927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.279006][ T7695] overlayfs: missing 'lowerdir' [ 223.484230][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 223.504622][ T30] audit: type=1326 audit(1750761152.225:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.1.380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dc718e929 code=0x0 [ 223.518235][ T7705] [U] [ 223.527704][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.530237][ T7705] [U] [ 223.530270][ T7705] [U] [ 223.530296][ T7705] [U] [ 223.544087][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.560748][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 223.566174][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.569978][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.594394][ T7705] [U] [ 223.597101][ T7705] [U] [ 223.599775][ T7705] [U] [ 223.602444][ T7705] [U] [ 223.606208][ T7705] [U] [ 223.608923][ T7705] [U] [ 223.611620][ T7705] [U] [ 223.625665][ T7535] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.645550][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.652689][ T6491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.655707][ T7704] [U] [ 223.673134][ T5927] usb 3-1: config 0 descriptor?? [ 223.683909][ T5927] hub 3-1:0.0: USB hub found [ 223.734193][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.741324][ T6491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.815524][ T7535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.841276][ T9] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 223.892923][ T5927] hub 3-1:0.0: 1 port detected [ 223.919365][ T9] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 224.027439][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.080631][ T5895] usb 6-1: USB disconnect, device number 9 [ 224.116034][ T7535] veth0_vlan: entered promiscuous mode [ 224.127161][ T7535] veth1_vlan: entered promiscuous mode [ 224.152448][ T7535] veth0_macvtap: entered promiscuous mode [ 224.165426][ T7535] veth1_macvtap: entered promiscuous mode [ 224.182590][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.195638][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.219624][ T7535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.229319][ T7727] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 224.244928][ T7535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.255959][ T7535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.265107][ T7535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.306619][ T5927] usb 3-1: USB disconnect, device number 9 [ 224.372542][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.382104][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.419318][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.430314][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.087657][ T7743] lo speed is unknown, defaulting to 1000 [ 226.077911][ T30] audit: type=1400 audit(1750761154.795:415): avc: denied { setopt } for pid=7757 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 226.117342][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 226.123751][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 226.275479][ T7760] ceph: No mds server is up or the cluster is laggy [ 226.288819][ T30] audit: type=1400 audit(1750761155.005:416): avc: denied { getopt } for pid=7759 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 226.717108][ T1134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.788217][ T7771] Can't find a SQUASHFS superblock on nullb0 [ 227.064246][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 227.288109][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.588118][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 227.703176][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.833624][ T5895] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 227.933187][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.610154][ T5895] usb 6-1: config 0 descriptor?? [ 229.094950][ T7780] loop6: detected capacity change from 0 to 524287999 [ 229.310363][ T1134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.312260][ T5927] usb 6-1: USB disconnect, device number 10 [ 229.388896][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.435663][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.444948][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.453254][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.480371][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.531697][ T7785] @: renamed from vlan0 (while UP) [ 229.569421][ T30] audit: type=1400 audit(1750761158.255:417): avc: denied { ioctl } for pid=7783 comm="syz.1.398" path="socket:[18945]" dev="sockfs" ino=18945 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.653911][ T7788] FAULT_INJECTION: forcing a failure. [ 229.653911][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.696599][ T1134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.757779][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.5.399 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 229.757804][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.757813][ T7788] Call Trace: [ 229.757819][ T7788] [ 229.757825][ T7788] dump_stack_lvl+0x16c/0x1f0 [ 229.757853][ T7788] should_fail_ex+0x512/0x640 [ 229.757879][ T7788] _copy_to_user+0x32/0xd0 [ 229.757906][ T7788] simple_read_from_buffer+0xcb/0x170 [ 229.757931][ T7788] proc_fail_nth_read+0x197/0x270 [ 229.757953][ T7788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.757977][ T7788] ? rw_verify_area+0xcf/0x680 [ 229.757996][ T7788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.758017][ T7788] vfs_read+0x1e1/0xc60 [ 229.758049][ T7788] ? __pfx___mutex_lock+0x10/0x10 [ 229.758073][ T7788] ? __pfx_vfs_read+0x10/0x10 [ 229.758101][ T7788] ? __fget_files+0x20e/0x3c0 [ 229.758131][ T7788] ksys_read+0x12a/0x250 [ 229.758152][ T7788] ? __pfx_ksys_read+0x10/0x10 [ 229.758180][ T7788] do_syscall_64+0xcd/0x4c0 [ 229.758207][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.758224][ T7788] RIP: 0033:0x7f48f838d33c [ 229.758238][ T7788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 229.758255][ T7788] RSP: 002b:00007f48f9232030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.758271][ T7788] RAX: ffffffffffffffda RBX: 00007f48f85b6080 RCX: 00007f48f838d33c [ 229.758283][ T7788] RDX: 000000000000000f RSI: 00007f48f92320a0 RDI: 0000000000000005 [ 229.758293][ T7788] RBP: 00007f48f9232090 R08: 0000000000000000 R09: 0000000000000000 [ 229.758303][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.758313][ T7788] R13: 0000000000000000 R14: 00007f48f85b6080 R15: 00007ffded95e6c8 [ 229.758336][ T7788] [ 229.971262][ T7782] lo speed is unknown, defaulting to 1000 [ 230.389179][ T7808] netlink: 'syz.1.401': attribute type 5 has an invalid length. [ 230.397115][ T30] audit: type=1400 audit(1750761159.115:418): avc: denied { create } for pid=7803 comm="syz.2.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 230.707836][ T1134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.704759][ T5816] Bluetooth: hci2: command tx timeout [ 232.811311][ T7833] netlink: 'syz.5.409': attribute type 5 has an invalid length. [ 232.869529][ T7782] chnl_net:caif_netlink_parms(): no params data found [ 233.120425][ T1134] bridge_slave_1: left allmulticast mode [ 233.134389][ T1134] bridge_slave_1: left promiscuous mode [ 233.148948][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.168419][ T1134] bridge_slave_0: left allmulticast mode [ 233.174076][ T1134] bridge_slave_0: left promiscuous mode [ 233.189774][ T30] audit: type=1400 audit(1750761161.915:419): avc: denied { create } for pid=7839 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.214342][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.043188][ T7850] netlink: 'syz.0.413': attribute type 5 has an invalid length. [ 234.079481][ T7851] Can't find a SQUASHFS superblock on nullb0 [ 234.146094][ T5816] Bluetooth: hci2: command tx timeout [ 234.424351][ T117] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 234.568895][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.586778][ T117] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.602306][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.615500][ T117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 234.630459][ T117] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.632686][ T1134] bond0 (unregistering): Released all slaves [ 234.652064][ T117] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 234.819430][ T117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.850742][ T117] usb 6-1: config 0 descriptor?? [ 235.020603][ T7860] sctp: [Deprecated]: syz.2.414 (pid 7860) Use of int in maxseg socket option. [ 235.020603][ T7860] Use struct sctp_assoc_value instead [ 235.823283][ T7869] netlink: 'syz.0.416': attribute type 5 has an invalid length. [ 236.016248][ T30] audit: type=1400 audit(1750761164.735:420): avc: denied { accept } for pid=7863 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 236.057095][ T7870] mmap: syz.1.415 (7870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 236.058023][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.076738][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.083959][ T7782] bridge_slave_0: entered allmulticast mode [ 236.096907][ T7782] bridge_slave_0: entered promiscuous mode [ 236.184330][ T5816] Bluetooth: hci2: command tx timeout [ 236.820709][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.828221][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.837847][ T7782] bridge_slave_1: entered allmulticast mode [ 236.845972][ T7782] bridge_slave_1: entered promiscuous mode [ 236.887937][ T30] audit: type=1400 audit(1750761165.615:421): avc: denied { setopt } for pid=7877 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.090251][ T1157] Bluetooth: (null): Too short H5 packet [ 237.133405][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.156731][ T1157] Bluetooth: (null): Invalid header checksum [ 237.256797][ T1157] Bluetooth: (null): Invalid header checksum [ 237.310240][ T1157] Bluetooth: (null): Invalid header checksum [ 237.503733][ T5895] usb 6-1: USB disconnect, device number 11 [ 237.522164][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.641313][ T7889] netlink: 'syz.2.421': attribute type 5 has an invalid length. [ 238.264548][ T5816] Bluetooth: hci2: command tx timeout [ 240.135453][ T30] audit: type=1400 audit(1750761167.425:422): avc: denied { map } for pid=7897 comm="syz.0.425" path="socket:[19275]" dev="sockfs" ino=19275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.481983][ T30] audit: type=1400 audit(1750761167.425:423): avc: denied { read } for pid=7897 comm="syz.0.425" path="socket:[19275]" dev="sockfs" ino=19275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.547370][ T1134] hsr_slave_0: left promiscuous mode [ 240.548198][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 240.562635][ T7907] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 240.571729][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.583821][ T1134] hsr_slave_1: left promiscuous mode [ 240.593093][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.612445][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.629420][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.662063][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.686676][ T1134] veth1_macvtap: left promiscuous mode [ 240.692280][ T1134] veth0_macvtap: left promiscuous mode [ 240.718353][ T1134] veth1_vlan: left promiscuous mode [ 240.723764][ T1134] veth0_vlan: left promiscuous mode [ 240.948854][ T7913] sctp: [Deprecated]: syz.0.427 (pid 7913) Use of int in maxseg socket option. [ 240.948854][ T7913] Use struct sctp_assoc_value instead [ 241.289684][ T7915] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.844335][ T117] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.906151][ T7922] netlink: 'syz.1.429': attribute type 5 has an invalid length. [ 242.303280][ T30] audit: type=1400 audit(1750761171.025:424): avc: denied { getopt } for pid=7923 comm="syz.5.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.335492][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 242.351437][ T117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.367371][ T117] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 242.383720][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 242.393547][ T117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.418947][ T117] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 242.428640][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 242.436825][ T117] usb 1-1: Product: syz [ 242.441040][ T117] usb 1-1: Manufacturer: syz [ 242.445774][ T117] usb 1-1: SerialNumber: syz [ 242.460731][ T117] usb 1-1: config 0 descriptor?? [ 242.470545][ T117] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 242.478113][ T117] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 242.489660][ T117] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 242.514548][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 242.542198][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 243.059357][ T7782] team0: Port device team_slave_0 added [ 243.069361][ T7782] team0: Port device team_slave_1 added [ 243.201700][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.213537][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.241654][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.258619][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.272735][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.299181][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.314442][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 243.328504][ T7931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.431'. [ 243.383635][ T7782] hsr_slave_0: entered promiscuous mode [ 243.391275][ T7782] hsr_slave_1: entered promiscuous mode [ 243.399309][ T7782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.489260][ T7782] Cannot create hsr debugfs directory [ 243.648399][ T7936] loop6: detected capacity change from 0 to 524287999 [ 244.757221][ T7949] netlink: 'syz.2.433': attribute type 5 has an invalid length. [ 245.354390][ T117] usb 1-1: USB disconnect, device number 12 [ 246.314209][ T7964] sctp: [Deprecated]: syz.2.438 (pid 7964) Use of int in maxseg socket option. [ 246.314209][ T7964] Use struct sctp_assoc_value instead [ 246.853605][ T7970] IPVS: length: 139 != 8 [ 246.950145][ T30] audit: type=1400 audit(1750761175.575:425): avc: denied { getopt } for pid=7952 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.436923][ T7979] netlink: 'syz.5.442': attribute type 5 has an invalid length. [ 247.985753][ T7981] loop6: detected capacity change from 0 to 524287999 [ 248.519042][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'. [ 248.640810][ T7986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.721206][ T7990] xt_ipcomp: unknown flags 12 [ 248.928025][ T7782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.047983][ T7782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.172381][ T30] audit: type=1326 audit(1750761177.895:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.5.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f838e929 code=0x7ffc0000 [ 249.313137][ T30] audit: type=1326 audit(1750761177.925:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.5.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f838e929 code=0x7ffc0000 [ 249.382008][ T7782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.437687][ T7782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.537256][ T8005] netlink: 'syz.0.448': attribute type 5 has an invalid length. [ 249.740717][ T8017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.433672][ T30] audit: type=1400 audit(1750761178.695:428): avc: denied { setopt } for pid=8004 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.549859][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.582680][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.704103][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.711251][ T6491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.013545][ T8027] FAULT_INJECTION: forcing a failure. [ 251.013545][ T8027] name failslab, interval 1, probability 0, space 0, times 0 [ 251.027006][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.0.452 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 251.027030][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.027040][ T8027] Call Trace: [ 251.027046][ T8027] [ 251.027052][ T8027] dump_stack_lvl+0x16c/0x1f0 [ 251.027081][ T8027] should_fail_ex+0x512/0x640 [ 251.027102][ T8027] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 251.027125][ T8027] should_failslab+0xc2/0x120 [ 251.027149][ T8027] __kmalloc_cache_noprof+0x6a/0x3e0 [ 251.027169][ T8027] ? mpi_alloc+0x46/0x230 [ 251.027190][ T8027] mpi_alloc+0x46/0x230 [ 251.027208][ T8027] mpi_read_raw_data+0x133/0x4a0 [ 251.027238][ T8027] dh_set_secret+0x151/0x260 [ 251.027262][ T8027] ? __pfx_dh_set_secret+0x10/0x10 [ 251.027283][ T8027] ? crypto_alloc_tfmmem.isra.0+0xd2/0x110 [ 251.027313][ T8027] ? trace_kmalloc+0x2b/0xd0 [ 251.027340][ T8027] ? crypto_alloc_tfm_node+0x126/0x260 [ 251.027361][ T8027] __keyctl_dh_compute+0x4da/0x10e0 [ 251.027392][ T8027] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 251.027418][ T8027] ? get_pid_task+0x106/0x250 [ 251.027444][ T8027] ? proc_fail_nth_write+0x9f/0x250 [ 251.027467][ T8027] ? find_held_lock+0x2b/0x80 [ 251.027496][ T8027] ? ksys_write+0x190/0x250 [ 251.027526][ T8027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.027556][ T8027] keyctl_dh_compute+0xd2/0x140 [ 251.027581][ T8027] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 251.027611][ T8027] ? ksys_write+0x1ac/0x250 [ 251.027631][ T8027] ? __pfx_ksys_write+0x10/0x10 [ 251.027656][ T8027] __do_sys_keyctl+0x4df/0x590 [ 251.027678][ T8027] do_syscall_64+0xcd/0x4c0 [ 251.027704][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.027722][ T8027] RIP: 0033:0x7f1d9e78e929 [ 251.027736][ T8027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.027752][ T8027] RSP: 002b:00007f1d9f66c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 251.027769][ T8027] RAX: ffffffffffffffda RBX: 00007f1d9e9b6160 RCX: 00007f1d9e78e929 [ 251.027780][ T8027] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 251.027791][ T8027] RBP: 00007f1d9f66c090 R08: 0000000000000000 R09: 0000000000000000 [ 251.027801][ T8027] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001 [ 251.027812][ T8027] R13: 0000000000000000 R14: 00007f1d9e9b6160 R15: 00007fff6de8f298 [ 251.027835][ T8027] [ 251.682369][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.689538][ T6491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.847898][ T30] audit: type=1400 audit(1750761180.575:429): avc: denied { create } for pid=8033 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 252.120660][ T8037] netlink: 'syz.1.453': attribute type 5 has an invalid length. [ 252.448561][ T9] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 252.579830][ T7782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.730066][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.816932][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.847189][ T9] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 252.880383][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.900522][ T30] audit: type=1400 audit(1750761181.615:430): avc: denied { mount } for pid=8044 comm="syz.1.455" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 252.914388][ T8045] overlayfs: failed to clone lowerpath [ 252.945946][ T9] usb 1-1: config 0 descriptor?? [ 253.215311][ T8053] loop6: detected capacity change from 0 to 524287999 [ 253.756858][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.001528][ T7782] veth0_vlan: entered promiscuous mode [ 254.018816][ T7782] veth1_vlan: entered promiscuous mode [ 254.050311][ T7782] veth0_macvtap: entered promiscuous mode [ 254.063857][ T7782] veth1_macvtap: entered promiscuous mode [ 254.088437][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.111826][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.126874][ T7782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.136055][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 254.146743][ T7782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.157919][ T7782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.170353][ T7782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.257283][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.268333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.289841][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.299868][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.359780][ T8067] loop6: detected capacity change from 0 to 524287999 [ 254.877337][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.957864][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.968071][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.978200][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.048432][ T8070] 9pnet_fd: p9_fd_create_tcp (8070): problem connecting socket to 127.0.0.1 [ 255.060312][ T8057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 255.072743][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.084453][ T8070] sctp: [Deprecated]: syz.1.461 (pid 8070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.084453][ T8070] Use struct sctp_sack_info instead [ 255.207458][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 255.215483][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.229303][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.235810][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.249294][ T9] usb 1-1: USB disconnect, device number 13 [ 255.574463][ T5927] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 255.630145][ T30] audit: type=1400 audit(1750761184.355:431): avc: denied { read write } for pid=8056 comm="syz.5.457" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 255.652484][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.679193][ T30] audit: type=1400 audit(1750761184.355:432): avc: denied { open } for pid=8056 comm="syz.5.457" path="/73/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 255.898744][ T5957] usb 6-1: USB disconnect, device number 12 [ 255.962861][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.986216][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.028786][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice=1d.5e [ 256.040360][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.057775][ T5927] usb 3-1: config 0 descriptor?? [ 256.481271][ T5927] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x1 [ 256.490538][ T5927] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x0 [ 256.530403][ T5927] magicmouse 0003:05AC:0265.0007: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 256.548602][ T1157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.559991][ T5927] magicmouse 0003:05AC:0265.0007: magicmouse input not registered [ 256.679073][ T5927] magicmouse 0003:05AC:0265.0007: probe with driver magicmouse failed with error -12 [ 256.716771][ T5927] usb 3-1: USB disconnect, device number 10 [ 256.987530][ T1157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.034281][ T1157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.094711][ T1157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.177325][ T1157] bridge_slave_1: left allmulticast mode [ 257.183003][ T1157] bridge_slave_1: left promiscuous mode [ 257.188766][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.201431][ T1157] bridge_slave_0: left allmulticast mode [ 257.211938][ T1157] bridge_slave_0: left promiscuous mode [ 257.217735][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.472407][ T30] audit: type=1400 audit(1750761186.195:433): avc: denied { create } for pid=8089 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 257.492898][ T8093] loop6: detected capacity change from 0 to 524287999 [ 257.593661][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.625302][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.649100][ T1157] bond0 (unregistering): Released all slaves [ 258.254866][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.281874][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.291718][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.084960][ T8125] loop6: detected capacity change from 0 to 524287999 [ 259.259749][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.270127][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.640060][ T8129] /dev/nullb0: Can't open blockdev [ 259.894323][ T5868] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 260.152086][ T1157] hsr_slave_0: left promiscuous mode [ 260.168171][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.185126][ T1157] hsr_slave_1: left promiscuous mode [ 260.570282][ T8144] netlink: 'syz.0.479': attribute type 5 has an invalid length. [ 260.629444][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 260.639361][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.647306][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.654628][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.729779][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.740185][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 260.753348][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.771973][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.799748][ T5868] usb 3-1: config 0 descriptor?? [ 260.829079][ T1157] veth1_macvtap: left promiscuous mode [ 260.834929][ T1157] veth0_macvtap: left promiscuous mode [ 260.840583][ T1157] veth1_vlan: left promiscuous mode [ 260.846813][ T1157] veth0_vlan: left promiscuous mode [ 260.966352][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 260.991458][ T8149] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 261.019064][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.123859][ T30] audit: type=1400 audit(1750761189.825:434): avc: denied { append } for pid=8151 comm="syz.5.482" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.298525][ T117] usb 3-1: USB disconnect, device number 11 [ 261.314246][ T5821] Bluetooth: hci2: command tx timeout [ 261.537072][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 261.569182][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 261.651027][ T8160] FAULT_INJECTION: forcing a failure. [ 261.651027][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 261.663766][ T8160] CPU: 0 UID: 0 PID: 8160 Comm: syz.5.483 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 261.663790][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.663800][ T8160] Call Trace: [ 261.663807][ T8160] [ 261.663814][ T8160] dump_stack_lvl+0x16c/0x1f0 [ 261.663845][ T8160] should_fail_ex+0x512/0x640 [ 261.663867][ T8160] ? __kmalloc_noprof+0xbf/0x510 [ 261.663892][ T8160] ? sock_kmalloc+0x111/0x170 [ 261.663907][ T8160] should_failslab+0xc2/0x120 [ 261.663932][ T8160] __kmalloc_noprof+0xd2/0x510 [ 261.663960][ T8160] sock_kmalloc+0x111/0x170 [ 261.663978][ T8160] hash_alloc_result+0xd7/0x150 [ 261.664005][ T8160] hash_sendmsg+0x6df/0xfb0 [ 261.664041][ T8160] ____sys_sendmsg+0xa95/0xc70 [ 261.664060][ T8160] ? copy_msghdr_from_user+0x10a/0x160 [ 261.664084][ T8160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.664105][ T8160] ? __lock_acquire+0xb8a/0x1c90 [ 261.664139][ T8160] ___sys_sendmsg+0x134/0x1d0 [ 261.664165][ T8160] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.664186][ T8160] ? __lock_acquire+0x622/0x1c90 [ 261.664243][ T8160] __sys_sendmsg+0x16d/0x220 [ 261.664267][ T8160] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.664304][ T8160] do_syscall_64+0xcd/0x4c0 [ 261.664330][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.664347][ T8160] RIP: 0033:0x7f48f838e929 [ 261.664360][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.664376][ T8160] RSP: 002b:00007f48f9211038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.664393][ T8160] RAX: ffffffffffffffda RBX: 00007f48f85b6160 RCX: 00007f48f838e929 [ 261.664404][ T8160] RDX: 0000000000000000 RSI: 0000200000001840 RDI: 0000000000000005 [ 261.664414][ T8160] RBP: 00007f48f9211090 R08: 0000000000000000 R09: 0000000000000000 [ 261.664424][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.664434][ T8160] R13: 0000000000000000 R14: 00007f48f85b6160 R15: 00007ffded95e6c8 [ 261.664457][ T8160] [ 262.014244][ T30] audit: type=1400 audit(1750761190.735:435): avc: denied { read } for pid=8171 comm="syz.5.488" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 262.037671][ T117] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.037711][ T30] audit: type=1400 audit(1750761190.745:436): avc: denied { open } for pid=8171 comm="syz.5.488" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 262.069115][ T30] audit: type=1400 audit(1750761190.745:437): avc: denied { ioctl } for pid=8171 comm="syz.5.488" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 262.095200][ T30] audit: type=1400 audit(1750761190.795:438): avc: denied { listen } for pid=8171 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 262.123325][ T8173] input: syz1 as /devices/virtual/input/input22 [ 262.270128][ T117] usb 3-1: Using ep0 maxpacket: 8 [ 262.294015][ T117] usb 3-1: config 4 interface 0 has no altsetting 0 [ 262.303147][ T117] usb 3-1: string descriptor 0 read error: -22 [ 262.309649][ T117] usb 3-1: New USB device found, idVendor=058f, idProduct=6710, bcdDevice=48.05 [ 262.318746][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.372760][ T8113] lo speed is unknown, defaulting to 1000 [ 262.852695][ T30] audit: type=1400 audit(1750761191.575:439): avc: denied { write } for pid=8157 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.878562][ T8113] chnl_net:caif_netlink_parms(): no params data found [ 262.901622][ T8186] binder: 8181:8186 ioctl c0306201 0 returned -14 [ 263.202860][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.215601][ T30] audit: type=1400 audit(1750761191.945:440): avc: denied { write } for pid=8195 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.216626][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.329396][ T8113] bridge_slave_0: entered allmulticast mode [ 263.336971][ T8113] bridge_slave_0: entered promiscuous mode [ 263.353067][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.360295][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.367879][ T8113] bridge_slave_1: entered allmulticast mode [ 263.374878][ T8113] bridge_slave_1: entered promiscuous mode [ 263.384957][ T5821] Bluetooth: hci2: command tx timeout [ 263.406364][ T8113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.417046][ T8113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.581240][ T8200] netlink: 'syz.5.493': attribute type 5 has an invalid length. [ 263.893231][ T30] audit: type=1400 audit(1750761192.245:441): avc: denied { rename } for pid=8195 comm="syz.0.494" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 264.072128][ T8113] team0: Port device team_slave_0 added [ 264.113017][ T8113] team0: Port device team_slave_1 added [ 264.150300][ T8207] loop6: detected capacity change from 0 to 524287999 [ 264.157274][ T8204] netlink: 'syz.1.495': attribute type 5 has an invalid length. [ 264.182431][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.206049][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.248580][ T8113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.262692][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.270892][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.397901][ T8113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.424863][ T5927] usb 3-1: USB disconnect, device number 12 [ 265.039537][ T8227] sctp: [Deprecated]: syz.0.503 (pid 8227) Use of int in maxseg socket option. [ 265.039537][ T8227] Use struct sctp_assoc_value instead [ 265.380085][ T8113] hsr_slave_0: entered promiscuous mode [ 265.386266][ T8113] hsr_slave_1: entered promiscuous mode [ 265.398315][ T8113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.419179][ T8113] Cannot create hsr debugfs directory [ 265.465751][ T5821] Bluetooth: hci2: command tx timeout [ 265.763247][ T8233] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.015471][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'. [ 266.024894][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'. [ 266.391736][ T8229] lo speed is unknown, defaulting to 1000 [ 266.897579][ T117] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 266.958241][ T8249] netlink: 'syz.5.509': attribute type 5 has an invalid length. [ 267.055705][ T117] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.112316][ T30] audit: type=1400 audit(1750761195.815:442): avc: denied { bind } for pid=8252 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.212371][ T117] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.229172][ T117] usb 1-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 267.252385][ T30] audit: type=1400 audit(1750761195.975:443): avc: denied { sqpoll } for pid=8255 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.271689][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.311665][ T117] usb 1-1: config 0 descriptor?? [ 267.477550][ T8113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.490252][ T8113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.505198][ T8113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.514979][ T8113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.544412][ T5821] Bluetooth: hci2: command tx timeout [ 268.301433][ T117] ortek 0003:05A4:2000.0008: hidraw0: USB HID v0.05 Device [HID 05a4:2000] on usb-dummy_hcd.0-1/input0 [ 268.317320][ T8260] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 268.347816][ T117] usb 1-1: USB disconnect, device number 14 [ 268.498039][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.705481][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.774900][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.782041][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.784247][ T5888] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 268.829029][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.836204][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.944271][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 268.976213][ T8113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.989510][ T5888] usb 3-1: config 0 has no interfaces? [ 268.997032][ T5888] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 269.040105][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.074442][ T5888] usb 3-1: config 0 descriptor?? [ 269.775619][ T8298] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 270.268043][ T8113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.274041][ T8278] capability: warning: `syz.2.515' uses 32-bit capabilities (legacy support in use) [ 270.918326][ T30] audit: type=1400 audit(1750761199.015:444): avc: denied { setattr } for pid=8277 comm="syz.2.515" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 272.260922][ T5868] usb 3-1: USB disconnect, device number 13 [ 272.506415][ T8307] lo speed is unknown, defaulting to 1000 [ 272.519422][ T8113] veth0_vlan: entered promiscuous mode [ 272.624497][ T8314] 9pnet_fd: Insufficient options for proto=fd [ 272.909196][ T8320] overlayfs: failed to resolve './file0': -2 [ 274.048910][ T8113] veth1_vlan: entered promiscuous mode [ 274.201246][ T8113] veth0_macvtap: entered promiscuous mode [ 274.211594][ T8113] veth1_macvtap: entered promiscuous mode [ 274.231958][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.249700][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.264095][ T8113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.284071][ T8113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.329334][ T8113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.340544][ T8113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.560835][ T5821] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 277.205895][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.348078][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.538032][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.565497][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.755272][ T30] audit: type=1400 audit(1750761206.455:445): avc: denied { kexec_image_load } for pid=8357 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 278.014484][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 278.546443][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 278.559419][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 278.640809][ T8367] loop6: detected capacity change from 0 to 524287999 [ 279.018136][ T9] usb 6-1: config 1 has no interface number 1 [ 279.028239][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.044175][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.053390][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.061455][ T9] usb 6-1: Product: syz [ 279.065647][ T9] usb 6-1: Manufacturer: syz [ 279.070240][ T9] usb 6-1: SerialNumber: syz [ 279.153890][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.238642][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.336985][ T9] usb 6-1: 2:1: All rates were zero [ 279.348498][ T9] usb 6-1: USB disconnect, device number 13 [ 279.430217][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.493319][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.610785][ T12] bridge_slave_1: left allmulticast mode [ 279.617308][ T12] bridge_slave_1: left promiscuous mode [ 279.623056][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.624271][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 279.639963][ T12] bridge_slave_0: left allmulticast mode [ 279.645772][ T12] bridge_slave_0: left promiscuous mode [ 279.652908][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.822652][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 279.830275][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 279.840786][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.852260][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.897402][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.916862][ T10] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 279.947313][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.959822][ T10] usb 3-1: Product: syz [ 279.964167][ T10] usb 3-1: Manufacturer: syz [ 279.968820][ T10] usb 3-1: SerialNumber: syz [ 279.978529][ T10] usb 3-1: config 0 descriptor?? [ 280.018446][ T8375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.041842][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.052406][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.061944][ T12] bond0 (unregistering): Released all slaves [ 280.201531][ T8378] xt_ipcomp: unknown flags 12 [ 280.352111][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 280.364716][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 280.766079][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 281.008845][ T8388] netlink: 'syz.1.541': attribute type 5 has an invalid length. [ 281.605575][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.730165][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 282.741438][ T30] audit: type=1400 audit(1750761211.465:446): avc: denied { module_request } for pid=8391 comm="syz.1.544" kmod="net-pf-16-proto-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 282.774736][ T9] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 282.794198][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.802383][ T9] usb 6-1: Product: syz [ 282.816868][ T9] usb 6-1: Manufacturer: syz [ 282.821575][ T9] usb 6-1: SerialNumber: syz [ 282.847571][ T9] usb 6-1: config 0 descriptor?? [ 282.867386][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 282.959083][ C0] powermate: config urb returned -71 [ 282.959454][ T117] usb 3-1: USB disconnect, device number 14 [ 282.964395][ C0] powermate: usb_submit_urb(config) failed [ 282.964654][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 282.976351][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.017937][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 283.039983][ T9] usb 6-1: media controller created [ 283.053257][ T12] hsr_slave_0: left promiscuous mode [ 283.062221][ T8392] xt_connbytes: Forcing CT accounting to be enabled [ 283.068925][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 283.078855][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.107236][ T8392] Cannot find add_set index 0 as target [ 283.119715][ T12] hsr_slave_1: left promiscuous mode [ 283.122356][ T9] DVB: Unable to find symbol tda10046_attach() [ 283.131779][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 283.143175][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 283.153192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.169649][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.179008][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.186613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.213066][ T12] veth1_macvtap: left promiscuous mode [ 283.219149][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.264474][ T30] audit: type=1400 audit(1750761211.965:447): avc: denied { audit_read } for pid=8407 comm="syz.2.546" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.299333][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.307596][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.317928][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.326448][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.339027][ T12] veth0_macvtap: left promiscuous mode [ 283.344713][ T12] veth1_vlan: left promiscuous mode [ 283.349994][ T12] veth0_vlan: left promiscuous mode [ 283.366931][ T8382] xt_hashlimit: invalid interval [ 283.376099][ T9] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 283.389601][ T9] usb 6-1: USB disconnect, device number 14 [ 283.735136][ T12] team0 (unregistering): Port device team_slave_1 removed [ 283.778151][ T12] team0 (unregistering): Port device team_slave_0 removed [ 284.702713][ T8405] lo speed is unknown, defaulting to 1000 [ 285.144798][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 285.177265][ T8429] syz.1.553 uses obsolete (PF_INET,SOCK_PACKET) [ 285.349593][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.374518][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.381723][ T8405] bridge_slave_0: entered allmulticast mode [ 285.397189][ T8405] bridge_slave_0: entered promiscuous mode [ 285.403122][ T5816] Bluetooth: hci2: command tx timeout [ 285.419106][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.443216][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.586376][ T8439] loop6: detected capacity change from 0 to 524287999 [ 286.427261][ T8405] bridge_slave_1: entered allmulticast mode [ 286.434579][ T8405] bridge_slave_1: entered promiscuous mode [ 286.573398][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.591994][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.682521][ T8405] team0: Port device team_slave_0 added [ 286.712105][ T8405] team0: Port device team_slave_1 added [ 286.811208][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.825805][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.859244][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.892322][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.930587][ T30] audit: type=1400 audit(1750761215.635:448): avc: denied { write } for pid=8449 comm="syz.1.558" path="socket:[22172]" dev="sockfs" ino=22172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.045489][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.208708][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.468324][ T5816] Bluetooth: hci2: command tx timeout [ 288.953736][ T8405] hsr_slave_0: entered promiscuous mode [ 288.959926][ T8405] hsr_slave_1: entered promiscuous mode [ 288.967400][ T8405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.976185][ T8405] Cannot create hsr debugfs directory [ 289.454891][ T8475] netlink: 'syz.1.563': attribute type 5 has an invalid length. [ 289.544239][ T5816] Bluetooth: hci2: command tx timeout [ 289.825799][ T30] audit: type=1400 audit(1750761218.545:449): avc: denied { bind } for pid=8469 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 290.164307][ T8474] FAULT_INJECTION: forcing a failure. [ 290.164307][ T8474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.177446][ T8474] CPU: 1 UID: 0 PID: 8474 Comm: syz.2.562 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 290.177461][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.177467][ T8474] Call Trace: [ 290.177471][ T8474] [ 290.177475][ T8474] dump_stack_lvl+0x16c/0x1f0 [ 290.177493][ T8474] should_fail_ex+0x512/0x640 [ 290.177509][ T8474] copy_fpstate_to_sigframe+0x854/0xaf0 [ 290.177526][ T8474] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 290.177538][ T8474] ? posixtimer_deliver_signal+0xed/0x6a0 [ 290.177558][ T8474] ? posixtimer_deliver_signal+0x1af/0x6a0 [ 290.177574][ T8474] ? x86_task_fpu+0x5f/0x90 [ 290.177586][ T8474] get_sigframe+0x4a8/0x9c0 [ 290.177603][ T8474] ? __pfx_get_sigframe+0x10/0x10 [ 290.177615][ T8474] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.177628][ T8474] ? siginfo_layout+0x177/0x290 [ 290.177642][ T8474] x64_setup_rt_frame+0x12e/0xcf0 [ 290.177656][ T8474] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 290.177668][ T8474] ? do_raw_spin_lock+0x12c/0x2b0 [ 290.177681][ T8474] arch_do_signal_or_restart+0x5e4/0x7d0 [ 290.177693][ T8474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.177709][ T8474] ? __pfx___x64_sys_truncate+0x10/0x10 [ 290.177726][ T8474] exit_to_user_mode_loop+0x84/0x110 [ 290.177738][ T8474] do_syscall_64+0x3f6/0x4c0 [ 290.177754][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.177765][ T8474] RIP: 0033:0x7ff79798e927 [ 290.177774][ T8474] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 290.177784][ T8474] RSP: 002b:00007ff798808038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 290.177794][ T8474] RAX: 000000000000004c RBX: 00007ff797bb6080 RCX: 00007ff79798e929 [ 290.177800][ T8474] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 0000200000000040 [ 290.177806][ T8474] RBP: 00007ff798808090 R08: 0000000000000000 R09: 0000000000000000 [ 290.177812][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.177817][ T8474] R13: 0000000000000000 R14: 00007ff797bb6080 R15: 00007ffff1f62008 [ 290.177830][ T8474] [ 290.184016][ T8405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.570745][ T8405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.793719][ T8483] sctp: [Deprecated]: syz.1.564 (pid 8483) Use of int in maxseg socket option. [ 290.793719][ T8483] Use struct sctp_assoc_value instead [ 291.551977][ T8405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.570742][ T8405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.626170][ T5816] Bluetooth: hci2: command tx timeout [ 291.912151][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.928537][ T8405] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.006099][ T8405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.024268][ T8405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.157601][ T8508] loop6: detected capacity change from 0 to 524287999 [ 292.536589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.543703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.602651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.609841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.922020][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.956872][ T8405] veth0_vlan: entered promiscuous mode [ 292.981192][ T8405] veth1_vlan: entered promiscuous mode [ 293.036409][ T8405] veth0_macvtap: entered promiscuous mode [ 293.054682][ T8405] veth1_macvtap: entered promiscuous mode [ 293.126781][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.147257][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.207795][ T8405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.226448][ T8527] fuse: Bad value for 'group_id' [ 293.238348][ T8527] fuse: Bad value for 'group_id' [ 293.244631][ T8405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.347596][ T8405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.357192][ T8405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.519835][ T8533] sctp: [Deprecated]: syz.2.578 (pid 8533) Use of int in maxseg socket option. [ 293.519835][ T8533] Use struct sctp_assoc_value instead [ 293.906421][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.916813][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.205549][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.501524][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.557345][ T10] lo speed is unknown, defaulting to 1000 [ 295.315925][ T8559] loop6: detected capacity change from 0 to 524287999 [ 296.386922][ T8576] loop6: detected capacity change from 0 to 524287999 [ 297.355549][ T8584] netlink: 'syz.5.589': attribute type 5 has an invalid length. [ 297.913255][ T8590] hpfs: Bad magic ... probably not HPFS [ 299.545316][ T5816] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 299.552986][ T30] audit: type=1400 audit(1750761228.265:450): avc: denied { shutdown } for pid=8604 comm="syz.5.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.592509][ T30] audit: type=1400 audit(1750761228.265:451): avc: denied { read } for pid=8604 comm="syz.5.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.483102][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.665045][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.136902][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.606799][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.641601][ T8626] FAULT_INJECTION: forcing a failure. [ 301.641601][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 301.671371][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.0.602 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 301.671398][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.671406][ T8626] Call Trace: [ 301.671412][ T8626] [ 301.671418][ T8626] dump_stack_lvl+0x16c/0x1f0 [ 301.671447][ T8626] should_fail_ex+0x512/0x640 [ 301.671483][ T8626] ? __kmalloc_node_noprof+0xc5/0x500 [ 301.671509][ T8626] should_failslab+0xc2/0x120 [ 301.671534][ T8626] __kmalloc_node_noprof+0xd8/0x500 [ 301.671556][ T8626] ? qdisc_alloc+0xbb/0xc50 [ 301.671585][ T8626] qdisc_alloc+0xbb/0xc50 [ 301.671614][ T8626] qdisc_create_dflt+0x94/0x490 [ 301.671641][ T8626] taprio_init+0x48f/0x910 [ 301.671669][ T8626] ? __pfx_taprio_init+0x10/0x10 [ 301.671691][ T8626] ? qdisc_alloc+0x94f/0xc50 [ 301.671716][ T8626] ? __pfx_taprio_init+0x10/0x10 [ 301.671738][ T8626] qdisc_create+0x454/0xfc0 [ 301.671762][ T8626] tc_modify_qdisc+0x12bb/0x2130 [ 301.671790][ T8626] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 301.671833][ T8626] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 301.671854][ T8626] rtnetlink_rcv_msg+0x3c9/0xe90 [ 301.671883][ T8626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.671914][ T8626] ? ref_tracker_free+0x37c/0x830 [ 301.671942][ T8626] netlink_rcv_skb+0x158/0x420 [ 301.671959][ T8626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.671986][ T8626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.672013][ T8626] ? netlink_deliver_tap+0x1ae/0xd30 [ 301.672045][ T8626] netlink_unicast+0x53a/0x7f0 [ 301.672066][ T8626] ? __pfx_netlink_unicast+0x10/0x10 [ 301.672090][ T8626] netlink_sendmsg+0x8d1/0xdd0 [ 301.672112][ T8626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.672139][ T8626] ____sys_sendmsg+0xa95/0xc70 [ 301.672158][ T8626] ? copy_msghdr_from_user+0x10a/0x160 [ 301.672181][ T8626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.672211][ T8626] ___sys_sendmsg+0x134/0x1d0 [ 301.672234][ T8626] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.672255][ T8626] ? __lock_acquire+0x622/0x1c90 [ 301.672309][ T8626] __sys_sendmsg+0x16d/0x220 [ 301.672334][ T8626] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.672374][ T8626] do_syscall_64+0xcd/0x4c0 [ 301.672401][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.672418][ T8626] RIP: 0033:0x7f1d9e78e929 [ 301.672434][ T8626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.672449][ T8626] RSP: 002b:00007f1d9f6ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.672465][ T8626] RAX: ffffffffffffffda RBX: 00007f1d9e9b5fa0 RCX: 00007f1d9e78e929 [ 301.672481][ T8626] RDX: 0000000000048004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 301.672491][ T8626] RBP: 00007f1d9f6ae090 R08: 0000000000000000 R09: 0000000000000000 [ 301.672501][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.672511][ T8626] R13: 0000000000000000 R14: 00007f1d9e9b5fa0 R15: 00007fff6de8f298 [ 301.672534][ T8626] [ 302.546549][ T8643] hpfs: Bad magic ... probably not HPFS [ 302.597810][ T36] bridge_slave_1: left allmulticast mode [ 302.611851][ T36] bridge_slave_1: left promiscuous mode [ 302.632377][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.662339][ T36] bridge_slave_0: left allmulticast mode [ 302.692727][ T36] bridge_slave_0: left promiscuous mode [ 302.720206][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.944867][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.956651][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.966276][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.977119][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.987719][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.406876][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.419678][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.447240][ T36] bond0 (unregistering): Released all slaves [ 303.481488][ T8647] lo speed is unknown, defaulting to 1000 [ 303.547537][ T8066] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 303.757812][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 303.766717][ T8661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.778058][ T8066] usb 1-1: not running at top speed; connect to a high speed hub [ 303.789684][ T8066] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x1 has invalid maxpacket 552, setting to 64 [ 303.814603][ T8661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.830138][ T8066] usb 1-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.910733][ T8066] usb 1-1: config 1 interface 0 has no altsetting 0 [ 303.941975][ T8066] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 303.958852][ T8066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.976447][ T8066] usb 1-1: Product: ᠁ [ 303.982100][ T8066] usb 1-1: Manufacturer: Я [ 303.990153][ T8066] usb 1-1: SerialNumber: 鹕䵫࢐墮ⴶᐕ㖚借흔겔醙䋪뜆⌿ʩ얃쭣ﰇ걯㯵姚嫭탃ἥ壟悥穄㞔뢘콸뤢腭彸欁鈣ベ瞤썫뭙췇렙嵘Õ嵠宍뉨淉榻鳶謵騙熰䀞꼕ꓕ೑ꩿ膘鹊瞵䂑篏桹밼ﺀ豅踃쇮炫湺䌐᪉쭷㪶槪䙢艆毊鿵매밝 [ 304.078999][ T8655] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.086495][ T36] hsr_slave_0: left promiscuous mode [ 304.093149][ T36] hsr_slave_1: left promiscuous mode [ 304.102302][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.102408][ T8674] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 304.109837][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.126077][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.127529][ T8674] audit: out of memory in audit_log_start [ 304.134439][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.157383][ T36] veth1_macvtap: left promiscuous mode [ 304.163400][ T36] veth0_macvtap: left promiscuous mode [ 304.169613][ T36] veth1_vlan: left promiscuous mode [ 304.175152][ T36] veth0_vlan: left promiscuous mode [ 304.343447][ T8066] usb 1-1: USB disconnect, device number 15 [ 304.594249][ T5816] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 305.064268][ T5816] Bluetooth: hci2: command tx timeout [ 305.573604][ T8690] loop6: detected capacity change from 0 to 524287999 [ 306.270510][ T30] audit: type=1400 audit(1750761234.995:452): avc: denied { bind } for pid=8697 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 306.607648][ T36] team0 (unregistering): Port device team_slave_1 removed [ 306.638981][ T30] audit: type=1400 audit(1750761235.365:453): avc: denied { read write } for pid=8699 comm="syz.0.624" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 306.681293][ T30] audit: type=1400 audit(1750761235.365:454): avc: denied { open } for pid=8699 comm="syz.0.624" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 306.719462][ T36] team0 (unregistering): Port device team_slave_0 removed [ 307.148847][ T5816] Bluetooth: hci2: command tx timeout [ 307.192890][ T8692] lo speed is unknown, defaulting to 1000 [ 307.318145][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 307.419874][ T30] audit: type=1400 audit(1750761236.145:455): avc: denied { write } for pid=8704 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.337421][ T30] audit: type=1400 audit(1750761236.165:456): avc: denied { setopt } for pid=8704 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.356804][ T30] audit: type=1400 audit(1750761236.165:457): avc: denied { connect } for pid=8704 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.824419][ T8723] sctp: [Deprecated]: syz.1.629 (pid 8723) Use of int in maxseg socket option. [ 308.824419][ T8723] Use struct sctp_assoc_value instead [ 309.180727][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.198883][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.206460][ T8647] bridge_slave_0: entered allmulticast mode [ 309.216496][ T8647] bridge_slave_0: entered promiscuous mode [ 309.224288][ T5816] Bluetooth: hci2: command tx timeout [ 309.248622][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.268160][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.278355][ T8647] bridge_slave_1: entered allmulticast mode [ 309.288787][ T8647] bridge_slave_1: entered promiscuous mode [ 309.546077][ T30] audit: type=1400 audit(1750761238.255:458): avc: denied { bind } for pid=8732 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 309.864236][ T30] audit: type=1400 audit(1750761238.385:459): avc: denied { write } for pid=8727 comm="syz.0.631" name="cgroup.subtree_control" dev="cgroup2" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.016290][ T30] audit: type=1400 audit(1750761238.385:460): avc: denied { open } for pid=8727 comm="syz.0.631" path="" dev="cgroup2" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.051755][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.088909][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.045934][ T30] audit: type=1400 audit(1750761239.765:461): avc: denied { listen } for pid=8745 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.129043][ T8647] team0: Port device team_slave_0 added [ 311.163648][ T8754] lo speed is unknown, defaulting to 1000 [ 311.165488][ T8647] team0: Port device team_slave_1 added [ 311.204545][ T8754] lo speed is unknown, defaulting to 1000 [ 311.210682][ T8754] lo speed is unknown, defaulting to 1000 [ 311.262470][ T8754] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 311.273294][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.280345][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.291846][ T8756] FAULT_INJECTION: forcing a failure. [ 311.291846][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.308436][ T5816] Bluetooth: hci2: command tx timeout [ 311.339219][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.339509][ T8756] CPU: 0 UID: 0 PID: 8756 Comm: syz.2.639 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 311.339530][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.339539][ T8756] Call Trace: [ 311.339545][ T8756] [ 311.339550][ T8756] dump_stack_lvl+0x16c/0x1f0 [ 311.339575][ T8756] should_fail_ex+0x512/0x640 [ 311.339598][ T8756] _copy_from_user+0x2e/0xd0 [ 311.339619][ T8756] video_usercopy+0xedd/0x1720 [ 311.339643][ T8756] ? __pfx___video_do_ioctl+0x10/0x10 [ 311.339661][ T8756] ? selinux_kernel_read_file+0x60/0x130 [ 311.339682][ T8756] ? __pfx_video_usercopy+0x10/0x10 [ 311.339714][ T8756] v4l2_ioctl+0x1ba/0x250 [ 311.339731][ T8756] ? __pfx_v4l2_ioctl+0x10/0x10 [ 311.339748][ T8756] __x64_sys_ioctl+0x18e/0x210 [ 311.339767][ T8756] do_syscall_64+0xcd/0x4c0 [ 311.339790][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.339805][ T8756] RIP: 0033:0x7ff79798e929 [ 311.339817][ T8756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.339831][ T8756] RSP: 002b:00007ff798829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.339846][ T8756] RAX: ffffffffffffffda RBX: 00007ff797bb5fa0 RCX: 00007ff79798e929 [ 311.339856][ T8756] RDX: 00002000000000c0 RSI: 00000000c02c563a RDI: 0000000000000003 [ 311.339865][ T8756] RBP: 00007ff798829090 R08: 0000000000000000 R09: 0000000000000000 [ 311.339873][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.339882][ T8756] R13: 0000000000000000 R14: 00007ff797bb5fa0 R15: 00007ffff1f62008 [ 311.339902][ T8756] [ 311.513714][ T8754] lo speed is unknown, defaulting to 1000 [ 311.520370][ T8754] lo speed is unknown, defaulting to 1000 [ 311.527079][ T8754] lo speed is unknown, defaulting to 1000 [ 311.535383][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.542329][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.747904][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.353812][ T8754] lo speed is unknown, defaulting to 1000 [ 312.380679][ T8754] lo speed is unknown, defaulting to 1000 [ 312.560296][ T8647] hsr_slave_0: entered promiscuous mode [ 312.566640][ T8647] hsr_slave_1: entered promiscuous mode [ 312.574258][ T8647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.581819][ T8647] Cannot create hsr debugfs directory [ 312.647854][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.5.645'. [ 312.704991][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.5.645'. [ 312.835253][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 312.835268][ T30] audit: type=1400 audit(1750761241.555:463): avc: denied { setopt } for pid=8778 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.863616][ T30] audit: type=1400 audit(1750761241.565:464): avc: denied { ioctl } for pid=8778 comm="syz.0.648" path="socket:[26706]" dev="sockfs" ino=26706 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.362627][ T8790] netlink: 'syz.5.649': attribute type 5 has an invalid length. [ 314.007259][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 316.652694][ T30] audit: type=1400 audit(1750761245.375:465): avc: denied { write } for pid=8818 comm="syz.2.659" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 316.653302][ T8647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.816772][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.823092][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.016863][ T8647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.272836][ T8647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.186430][ T8647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.250689][ T30] audit: type=1400 audit(1750761246.975:466): avc: denied { write } for pid=8837 comm="syz.5.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 318.678990][ T8856] syz_tun: entered allmulticast mode [ 318.690999][ T8854] syz_tun: left allmulticast mode [ 318.736271][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.871285][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.889117][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.896268][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.940644][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.947760][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.991796][ T8860] IPVS: persistence engine module ip_vs_pe_ not found [ 319.039543][ T8647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.457085][ T8879] FAULT_INJECTION: forcing a failure. [ 319.457085][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 320.004303][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.2.672 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 320.004330][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.004340][ T8879] Call Trace: [ 320.004346][ T8879] [ 320.004352][ T8879] dump_stack_lvl+0x16c/0x1f0 [ 320.004380][ T8879] should_fail_ex+0x512/0x640 [ 320.004402][ T8879] ? __kvmalloc_node_noprof+0x124/0x620 [ 320.004425][ T8879] should_failslab+0xc2/0x120 [ 320.004449][ T8879] __kvmalloc_node_noprof+0x137/0x620 [ 320.004470][ T8879] ? _kstrtoull+0x145/0x200 [ 320.004484][ T8879] ? seq_read_iter+0x826/0x12c0 [ 320.004509][ T8879] ? seq_read_iter+0x826/0x12c0 [ 320.004528][ T8879] seq_read_iter+0x826/0x12c0 [ 320.004546][ T8879] ? find_held_lock+0x2b/0x80 [ 320.004578][ T8879] seq_read+0x39e/0x4e0 [ 320.004598][ T8879] ? __pfx_seq_read+0x10/0x10 [ 320.004616][ T8879] ? __lock_acquire+0xb8a/0x1c90 [ 320.004645][ T8879] ? get_pid_task+0xfc/0x250 [ 320.004674][ T8879] ? avc_policy_seqno+0x9/0x20 [ 320.004694][ T8879] ? __pfx_seq_read+0x10/0x10 [ 320.004714][ T8879] proc_reg_read+0x23d/0x330 [ 320.004739][ T8879] ? __pfx_proc_reg_read+0x10/0x10 [ 320.004766][ T8879] vfs_read+0x1e1/0xc60 [ 320.004789][ T8879] ? __pfx___mutex_lock+0x10/0x10 [ 320.004814][ T8879] ? __pfx_vfs_read+0x10/0x10 [ 320.004841][ T8879] ? __fget_files+0x20e/0x3c0 [ 320.004871][ T8879] ksys_read+0x12a/0x250 [ 320.004892][ T8879] ? __pfx_ksys_read+0x10/0x10 [ 320.004921][ T8879] do_syscall_64+0xcd/0x4c0 [ 320.004946][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.004964][ T8879] RIP: 0033:0x7ff79798e929 [ 320.004977][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.004994][ T8879] RSP: 002b:00007ff798829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.005010][ T8879] RAX: ffffffffffffffda RBX: 00007ff797bb5fa0 RCX: 00007ff79798e929 [ 320.005021][ T8879] RDX: 0000000000000086 RSI: 0000200000000280 RDI: 0000000000000003 [ 320.005031][ T8879] RBP: 00007ff798829090 R08: 0000000000000000 R09: 0000000000000000 [ 320.005041][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.005050][ T8879] R13: 0000000000000000 R14: 00007ff797bb5fa0 R15: 00007ffff1f62008 [ 320.005075][ T8879] [ 320.296206][ T117] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 321.209915][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.626129][ T8647] veth0_vlan: entered promiscuous mode [ 321.714640][ T8647] veth1_vlan: entered promiscuous mode [ 321.765149][ T8903] fuse: Bad value for 'rootmode' [ 322.000678][ T8647] veth0_macvtap: entered promiscuous mode [ 322.143708][ T8647] veth1_macvtap: entered promiscuous mode [ 322.311587][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.346224][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.371052][ T8647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.466832][ T8647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.095068][ T8916] sctp: [Deprecated]: syz.0.681 (pid 8916) Use of int in maxseg socket option. [ 323.095068][ T8916] Use struct sctp_assoc_value instead [ 323.102643][ T8647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.127270][ T8647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.139363][ T8921] netlink: 'syz.1.683': attribute type 5 has an invalid length. [ 323.674000][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.682252][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.767384][ T8935] loop6: detected capacity change from 0 to 524287999 [ 324.165606][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.193891][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.460879][ T8945] hpfs: Bad magic ... probably not HPFS [ 325.554962][ T30] audit: type=1400 audit(1750761254.285:467): avc: denied { write } for pid=8954 comm="syz.0.696" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 325.582445][ T8955] sg_write: process 638 (syz.0.696) changed security contexts after opening file descriptor, this is not allowed. [ 325.944733][ T7052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.971344][ T8968] sctp: [Deprecated]: syz.5.695 (pid 8968) Use of int in maxseg socket option. [ 325.971344][ T8968] Use struct sctp_assoc_value instead [ 326.542807][ T8973] xt_ipcomp: unknown flags 12 [ 326.676152][ T7052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.761374][ T7052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.137113][ T7052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.291071][ T7052] bridge_slave_1: left allmulticast mode [ 327.299192][ T7052] bridge_slave_1: left promiscuous mode [ 327.305433][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.314210][ T7052] bridge_slave_0: left allmulticast mode [ 327.319889][ T7052] bridge_slave_0: left promiscuous mode [ 327.325615][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.526508][ T7052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.536748][ T7052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.546784][ T7052] bond0 (unregistering): Released all slaves [ 328.629598][ T8987] loop6: detected capacity change from 0 to 524287999 [ 329.088251][ T8992] hpfs: Bad magic ... probably not HPFS [ 329.453909][ T8998] netlink: 'syz.5.705': attribute type 5 has an invalid length. [ 329.739193][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.755218][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.765933][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.774539][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.790988][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.287627][ T9010] netlink: 'syz.0.708': attribute type 5 has an invalid length. [ 330.712866][ T9017] netlink: 'syz.5.710': attribute type 5 has an invalid length. [ 330.923647][ T7052] hsr_slave_0: left promiscuous mode [ 330.995172][ T9023] netlink: 'syz.1.709': attribute type 5 has an invalid length. [ 331.104959][ T7052] hsr_slave_1: left promiscuous mode [ 331.203364][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.210900][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.226953][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.244393][ T9026] xt_ipcomp: unknown flags 12 [ 331.250182][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.423079][ T7052] veth1_macvtap: left promiscuous mode [ 331.435399][ T7052] veth0_macvtap: left promiscuous mode [ 331.441011][ T7052] veth1_vlan: left promiscuous mode [ 331.447850][ T7052] veth0_vlan: left promiscuous mode [ 332.037683][ T5816] Bluetooth: hci2: command tx timeout [ 333.160375][ T9045] loop6: detected capacity change from 0 to 524287999 [ 334.114338][ T5816] Bluetooth: hci2: command tx timeout [ 334.226318][ T7052] team0 (unregistering): Port device team_slave_1 removed [ 334.255514][ T7052] team0 (unregistering): Port device team_slave_0 removed [ 334.478068][ T9059] xt_ipcomp: unknown flags 12 [ 334.973992][ T9001] lo speed is unknown, defaulting to 1000 [ 335.168806][ T9001] lo speed is unknown, defaulting to 1000 [ 336.185292][ T5816] Bluetooth: hci2: command tx timeout [ 336.471650][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 338.314201][ T5816] Bluetooth: hci2: command tx timeout [ 338.467601][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.487177][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.497551][ T9001] bridge_slave_0: entered allmulticast mode [ 338.565876][ T9001] bridge_slave_0: entered promiscuous mode [ 338.574132][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.581226][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.588423][ T9001] bridge_slave_1: entered allmulticast mode [ 338.596044][ T9001] bridge_slave_1: entered promiscuous mode [ 338.719958][ T9113] loop6: detected capacity change from 0 to 524287999 [ 339.126914][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.156523][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.382218][ T9001] team0: Port device team_slave_0 added [ 339.401570][ T9001] team0: Port device team_slave_1 added [ 339.744652][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.763232][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.794020][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.810103][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.817084][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.846093][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.912460][ T9001] hsr_slave_0: entered promiscuous mode [ 340.923075][ T9001] hsr_slave_1: entered promiscuous mode [ 340.937584][ T9001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.952638][ T9001] Cannot create hsr debugfs directory [ 342.129207][ T9138] netlink: 'syz.5.739': attribute type 5 has an invalid length. [ 346.083340][ T9169] netlink: 'syz.5.747': attribute type 10 has an invalid length. [ 346.113875][ T9169] openvswitch: netlink: Flow key attr not present in new flow. [ 346.140481][ T9001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.152059][ T9001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.162136][ T9001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.173960][ T9001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.204192][ T117] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 346.235896][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.251890][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.265977][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.273115][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.286455][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.293594][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.364213][ T117] usb 1-1: Using ep0 maxpacket: 32 [ 346.375505][ T117] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 346.394169][ T117] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 346.402779][ T117] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 346.412354][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.425431][ T117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 346.444535][ T117] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 346.468033][ T117] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 346.486605][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.497898][ T117] usb 1-1: config 0 descriptor?? [ 346.557113][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.614148][ T117] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 346.646807][ T9001] veth0_vlan: entered promiscuous mode [ 346.659459][ T117] usb 1-1: USB disconnect, device number 16 [ 346.660488][ T9001] veth1_vlan: entered promiscuous mode [ 346.681630][ T117] usblp0: removed [ 346.706311][ T9001] veth0_macvtap: entered promiscuous mode [ 346.801471][ T9001] veth1_macvtap: entered promiscuous mode [ 346.816623][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.829933][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.840516][ T9001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.897490][ T9191] Can't find a SQUASHFS superblock on nullb0 [ 347.359254][ T9001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.368041][ T9001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.377335][ T9001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.522781][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.540980][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.599646][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.608978][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.716549][ T117] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 347.823996][ T9200] loop6: detected capacity change from 0 to 524287999 [ 348.325602][ T117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.336942][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 348.348213][ T117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.624132][ T117] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 348.633187][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.155338][ T117] usb 1-1: config 0 descriptor?? [ 349.455215][ T9218] loop6: detected capacity change from 0 to 524287999 [ 351.358962][ T5957] usb 1-1: USB disconnect, device number 17 [ 352.850734][ T5962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.025539][ T5962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.130898][ T5962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.195243][ T5962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.261947][ T5962] bridge_slave_1: left allmulticast mode [ 353.267612][ T5962] bridge_slave_1: left promiscuous mode [ 353.273337][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.282409][ T5962] bridge_slave_0: left allmulticast mode [ 353.288354][ T5962] bridge_slave_0: left promiscuous mode [ 353.295947][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.490018][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.500382][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.510161][ T5962] bond0 (unregistering): Released all slaves [ 353.734631][ T5962] hsr_slave_0: left promiscuous mode [ 353.740303][ T5962] hsr_slave_1: left promiscuous mode [ 353.746169][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.753597][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.763318][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.770956][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.786801][ T5962] veth1_macvtap: left promiscuous mode [ 353.792445][ T5962] veth0_macvtap: left promiscuous mode [ 353.798024][ T5962] veth1_vlan: left promiscuous mode [ 353.803251][ T5962] veth0_vlan: left promiscuous mode [ 354.297886][ T9249] loop6: detected capacity change from 0 to 524287999 [ 355.685831][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.701710][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.733527][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.773418][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.847059][ T9266] netlink: 'syz.1.769': attribute type 5 has an invalid length. [ 355.871883][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.094596][ T9274] Can't find a SQUASHFS superblock on nullb0 [ 357.444844][ T30] audit: type=1800 audit(1750761285.815:468): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.772" name="SYSV798dd81c" dev="tmpfs" ino=0 res=0 errno=0 [ 357.485990][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 357.528149][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 357.596232][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 357.757521][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.771398][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 357.797951][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.812538][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 357.826888][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.841199][ T10] usb 3-1: config 0 descriptor?? [ 358.035196][ T5816] Bluetooth: hci2: command tx timeout [ 358.203797][ T9256] lo speed is unknown, defaulting to 1000 [ 358.238032][ T9256] lo speed is unknown, defaulting to 1000 [ 358.871777][ T9256] chnl_net:caif_netlink_parms(): no params data found [ 359.879921][ T9] usb 3-1: USB disconnect, device number 15 [ 360.012701][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.020109][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.057293][ T9256] bridge_slave_0: entered allmulticast mode [ 360.075654][ T9256] bridge_slave_0: entered promiscuous mode [ 360.088886][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.129403][ T5816] Bluetooth: hci2: command tx timeout [ 360.175785][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.183690][ T9256] bridge_slave_1: entered allmulticast mode [ 360.196198][ T9256] bridge_slave_1: entered promiscuous mode [ 360.667329][ T9348] input: syz1 as /devices/virtual/input/input36 [ 361.255450][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.271269][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.422771][ T9256] team0: Port device team_slave_0 added [ 361.443977][ T9256] team0: Port device team_slave_1 added [ 361.496741][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.598294][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.631991][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.644217][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.651164][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.648588][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.024177][ T5816] Bluetooth: hci2: command tx timeout [ 363.454942][ T9256] hsr_slave_0: entered promiscuous mode [ 363.466028][ T9256] hsr_slave_1: entered promiscuous mode [ 363.550611][ T9375] /dev/nullb0: Can't open blockdev [ 363.976257][ T9376] loop6: detected capacity change from 0 to 524287999 [ 364.464518][ T9256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.482288][ T9256] Cannot create hsr debugfs directory [ 364.844257][ T5888] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 365.039159][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.074753][ T5820] Bluetooth: hci2: command tx timeout [ 365.081907][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 365.122301][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.145697][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 365.155064][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.169638][ T5888] usb 3-1: config 0 descriptor?? [ 366.507839][ T9256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.687397][ T5868] usb 3-1: USB disconnect, device number 16 [ 366.701129][ T9256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.749402][ T9256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.779615][ T9256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.186276][ T9426] loop6: detected capacity change from 0 to 524287999 [ 367.222007][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.243401][ T9256] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.261801][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.268945][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.295859][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.302968][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.023353][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.145968][ T9256] veth0_vlan: entered promiscuous mode [ 368.262382][ T9256] veth1_vlan: entered promiscuous mode [ 368.337171][ T9256] veth0_macvtap: entered promiscuous mode [ 368.498738][ T9444] sctp: [Deprecated]: syz.2.801 (pid 9444) Use of int in maxseg socket option. [ 368.498738][ T9444] Use struct sctp_assoc_value instead [ 368.812938][ T9256] veth1_macvtap: entered promiscuous mode [ 368.841078][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.887961][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.916572][ T9256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.085661][ T9256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.190148][ T9256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.275887][ T9256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.809737][ T9316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.820819][ T9316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.862009][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.947548][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.283029][ T9471] /dev/nullb0: Can't open blockdev [ 372.815576][ T5868] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 373.455505][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.479309][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 373.489836][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.502821][ T5868] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 373.512011][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.521497][ T5868] usb 6-1: config 0 descriptor?? [ 374.229732][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.319447][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.385007][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.443927][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.528175][ T13] bridge_slave_1: left allmulticast mode [ 374.533830][ T13] bridge_slave_1: left promiscuous mode [ 374.539689][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.548521][ T13] bridge_slave_0: left allmulticast mode [ 374.554425][ T13] bridge_slave_0: left promiscuous mode [ 374.560051][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.799718][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.809807][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.819636][ T13] bond0 (unregistering): Released all slaves [ 375.032673][ T13] hsr_slave_0: left promiscuous mode [ 375.038633][ T13] hsr_slave_1: left promiscuous mode [ 375.044897][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.052333][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.060384][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.068111][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.088408][ T13] veth1_macvtap: left promiscuous mode [ 375.093946][ T13] veth0_macvtap: left promiscuous mode [ 375.094104][ T5868] usb 6-1: USB disconnect, device number 16 [ 375.099646][ T13] veth1_vlan: left promiscuous mode [ 375.111869][ T13] veth0_vlan: left promiscuous mode [ 375.358657][ T13] team0 (unregistering): Port device team_slave_1 removed [ 375.382866][ T13] team0 (unregistering): Port device team_slave_0 removed [ 378.214070][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.220437][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.944227][ T9510] netlink: 'syz.0.816': attribute type 5 has an invalid length. [ 379.047313][ T30] audit: type=1400 audit(1750761307.045:469): avc: denied { read } for pid=9502 comm="syz.1.817" laddr=::ac14:14aa lport=35633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.084214][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 379.213383][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.222313][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.231120][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.290809][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.300895][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.739947][ T9518] lo speed is unknown, defaulting to 1000 [ 380.136996][ T9518] lo speed is unknown, defaulting to 1000 [ 381.395112][ T5820] Bluetooth: hci2: command tx timeout [ 382.436914][ T9518] chnl_net:caif_netlink_parms(): no params data found [ 383.034986][ T9553] loop6: detected capacity change from 0 to 524287999 [ 383.336714][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.351083][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.370210][ T9518] bridge_slave_0: entered allmulticast mode [ 383.390352][ T9518] bridge_slave_0: entered promiscuous mode [ 383.400666][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.408136][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.415343][ T9518] bridge_slave_1: entered allmulticast mode [ 383.423117][ T9518] bridge_slave_1: entered promiscuous mode [ 383.459215][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.464179][ T5820] Bluetooth: hci2: command tx timeout [ 383.470586][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.564147][ T5881] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 383.623584][ T9518] team0: Port device team_slave_0 added [ 383.658417][ T9518] team0: Port device team_slave_1 added [ 383.755413][ T5881] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.774142][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.813264][ T5881] usb 6-1: config 0 descriptor?? [ 383.875869][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.887289][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.926932][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.939672][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.946655][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.171829][ T9563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.827'. [ 384.194646][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.262160][ T9575] netlink: 'syz.2.830': attribute type 5 has an invalid length. [ 384.316652][ T9518] hsr_slave_0: entered promiscuous mode [ 384.334732][ T9518] hsr_slave_1: entered promiscuous mode [ 384.341750][ T9518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.349949][ T9518] Cannot create hsr debugfs directory [ 384.395240][ T5881] usb 6-1: Cannot read MAC address [ 384.407081][ T5881] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 384.493006][ T5881] usb 6-1: USB disconnect, device number 17 [ 385.579724][ T30] audit: type=1400 audit(1750761314.305:470): avc: denied { bind } for pid=9590 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.583671][ T5820] Bluetooth: hci2: command tx timeout [ 385.912941][ T9602] loop6: detected capacity change from 0 to 524287999 [ 386.683123][ T9603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 386.689666][ T9603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.697660][ T9603] vhci_hcd vhci_hcd.0: Device attached [ 386.946891][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.837'. [ 386.989267][ T5868] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 386.996973][ T9608] vhci_hcd: connection closed [ 387.013838][ T9326] vhci_hcd: stop threads [ 387.089875][ T9326] vhci_hcd: release socket [ 387.136657][ T9326] vhci_hcd: disconnect device [ 387.689764][ T5820] Bluetooth: hci2: command tx timeout [ 387.704779][ T9622] loop6: detected capacity change from 0 to 524287999 [ 387.937853][ T30] audit: type=1400 audit(1750761316.665:471): avc: denied { getopt } for pid=9629 comm="syz.0.841" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 388.446321][ T9518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.799867][ T9518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.985608][ T9518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.148072][ T9518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.885140][ T5896] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 389.971111][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.989718][ T30] audit: type=1400 audit(1750761318.705:472): avc: denied { ioctl } for pid=9650 comm="syz.0.845" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 390.023203][ T9651] ------------[ cut here ]------------ [ 390.028965][ T9651] WARNING: CPU: 0 PID: 9651 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 390.039473][ T9651] Modules linked in: [ 390.043469][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.0.845 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 390.052309][ T9518] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.055648][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.072319][ T9651] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 390.079251][ T9651] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f 5b 6d 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 33 66 7a 0e 00 75 0b c6 05 2a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 390.085683][ T5896] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 390.099429][ T9651] RSP: 0018:ffffc900038e74f8 EFLAGS: 00010246 [ 390.113799][ T9651] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 390.122038][ T9651] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040dc0 [ 390.130468][ T9651] RBP: 0000000002000000 R08: 0000000000000005 R09: 0000000000000000 [ 390.138759][ T9651] R10: 0000000000400000 R11: 0000000000000001 R12: 000000000000000d [ 390.147243][ T9651] R13: 1ffff9200071ceb4 R14: 0000000002000000 R15: 000000000000000d [ 390.155683][ T9651] FS: 00007f1d9f6ae6c0(0000) GS:ffff888124753000(0000) knlGS:0000000000000000 [ 390.165006][ T9651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.171594][ T9651] CR2: 00002000000037f0 CR3: 000000002cc41000 CR4: 00000000003526f0 [ 390.180113][ T9651] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.188702][ T9651] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.197067][ T9651] Call Trace: [ 390.200344][ T9651] [ 390.203289][ T9651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 390.210053][ T9651] ? rcu_is_watching+0x12/0xc0 [ 390.215233][ T9651] ? trace_kmem_cache_alloc+0x28/0xc0 [ 390.220615][ T9651] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 390.226636][ T9651] ? hashtab_init+0x1b1/0x290 [ 390.231319][ T9651] __alloc_pages_noprof+0xb/0x1b0 [ 390.236725][ T9651] ___kmalloc_large_node+0x84/0x1e0 [ 390.241934][ T9651] ? hashtab_init+0x1b1/0x290 [ 390.247013][ T9651] __kmalloc_large_node_noprof+0x1c/0x70 [ 390.252643][ T9651] ? __pfx_ebitmap_read+0x10/0x10 [ 390.257845][ T9651] __kmalloc_noprof.cold+0xc/0x61 [ 390.262869][ T9651] hashtab_init+0x1b1/0x290 [ 390.267591][ T9651] ? __asan_memcpy+0x3c/0x60 [ 390.272162][ T9651] policydb_read+0x7b4/0x3220 [ 390.277025][ T9651] ? __pfx_policydb_read+0x10/0x10 [ 390.282254][ T9651] security_load_policy+0x15c/0x12c0 [ 390.287633][ T9651] ? __pfx_security_load_policy+0x10/0x10 [ 390.293333][ T9651] ? find_held_lock+0x2b/0x80 [ 390.298010][ T9651] ? __might_fault+0xe3/0x190 [ 390.302666][ T9651] ? __might_fault+0xe3/0x190 [ 390.307364][ T9651] ? __might_fault+0x13b/0x190 [ 390.312124][ T9651] sel_write_load+0x332/0x1bd0 [ 390.316901][ T9651] ? __lock_acquire+0xb8a/0x1c90 [ 390.321821][ T9651] ? __pfx_sel_write_load+0x10/0x10 [ 390.327022][ T9651] ? __pfx_sel_write_load+0x10/0x10 [ 390.332207][ T9651] vfs_write+0x2a0/0x1150 [ 390.336624][ T9651] ? __pfx___mutex_lock+0x10/0x10 [ 390.341629][ T9651] ? __pfx_vfs_write+0x10/0x10 [ 390.346529][ T9651] ? __fget_files+0x20e/0x3c0 [ 390.351194][ T9651] ksys_write+0x12a/0x250 [ 390.355576][ T9651] ? __pfx_ksys_write+0x10/0x10 [ 390.360425][ T9651] do_syscall_64+0xcd/0x4c0 [ 390.365000][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.370893][ T9651] RIP: 0033:0x7f1d9e78e929 [ 390.375335][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.395070][ T9651] RSP: 002b:00007f1d9f6ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.403467][ T9651] RAX: ffffffffffffffda RBX: 00007f1d9e9b5fa0 RCX: 00007f1d9e78e929 [ 390.404319][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.411598][ T9651] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 390.421559][ T5896] usb 3-1: config 0 has no interface number 0 [ 390.429554][ T9651] RBP: 00007f1d9e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 390.435611][ T5896] usb 3-1: config 0 interface 255 has no altsetting 0 [ 390.443488][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.450251][ T5896] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 390.458245][ T9651] R13: 0000000000000000 R14: 00007f1d9e9b5fa0 R15: 00007fff6de8f298 [ 390.467301][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.475249][ T9651] [ 390.485427][ T5896] usb 3-1: config 0 descriptor?? [ 390.486328][ T9651] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.486342][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.0.845 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 390.486362][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.486371][ T9651] Call Trace: [ 390.486377][ T9651] [ 390.486383][ T9651] dump_stack_lvl+0x3d/0x1f0 [ 390.486408][ T9651] panic+0x71c/0x800 [ 390.486432][ T9651] ? __pfx_panic+0x10/0x10 [ 390.486454][ T9651] ? show_trace_log_lvl+0x29b/0x3e0 [ 390.486481][ T9651] ? check_panic_on_warn+0x1f/0xb0 [ 390.486510][ T9651] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 390.486530][ T9651] check_panic_on_warn+0xab/0xb0 [ 390.486553][ T9651] __warn+0xf6/0x3c0 [ 390.486574][ T9651] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 390.486595][ T9651] report_bug+0x3c3/0x580 [ 390.486614][ T9651] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 390.486635][ T9651] handle_bug+0x184/0x210 [ 390.486658][ T9651] exc_invalid_op+0x17/0x50 [ 390.486673][ T9651] asm_exc_invalid_op+0x1a/0x20 [ 390.486687][ T9651] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 390.486708][ T9651] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f 5b 6d 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 33 66 7a 0e 00 75 0b c6 05 2a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 390.486722][ T9651] RSP: 0018:ffffc900038e74f8 EFLAGS: 00010246 [ 390.486736][ T9651] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 390.486746][ T9651] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040dc0 [ 390.486755][ T9651] RBP: 0000000002000000 R08: 0000000000000005 R09: 0000000000000000 [ 390.486765][ T9651] R10: 0000000000400000 R11: 0000000000000001 R12: 000000000000000d [ 390.486774][ T9651] R13: 1ffff9200071ceb4 R14: 0000000002000000 R15: 000000000000000d [ 390.486808][ T9651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 390.486842][ T9651] ? rcu_is_watching+0x12/0xc0 [ 390.486861][ T9651] ? trace_kmem_cache_alloc+0x28/0xc0 [ 390.486883][ T9651] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 390.486906][ T9651] ? hashtab_init+0x1b1/0x290 [ 390.486924][ T9651] __alloc_pages_noprof+0xb/0x1b0 [ 390.486943][ T9651] ___kmalloc_large_node+0x84/0x1e0 [ 390.486961][ T9651] ? hashtab_init+0x1b1/0x290 [ 390.486978][ T9651] __kmalloc_large_node_noprof+0x1c/0x70 [ 390.486992][ T9651] ? __pfx_ebitmap_read+0x10/0x10 [ 390.487011][ T9651] __kmalloc_noprof.cold+0xc/0x61 [ 390.487038][ T9651] hashtab_init+0x1b1/0x290 [ 390.487056][ T9651] ? __asan_memcpy+0x3c/0x60 [ 390.487073][ T9651] policydb_read+0x7b4/0x3220 [ 390.487098][ T9651] ? __pfx_policydb_read+0x10/0x10 [ 390.487133][ T9651] security_load_policy+0x15c/0x12c0 [ 390.487162][ T9651] ? __pfx_security_load_policy+0x10/0x10 [ 390.487184][ T9651] ? find_held_lock+0x2b/0x80 [ 390.487201][ T9651] ? __might_fault+0xe3/0x190 [ 390.487219][ T9651] ? __might_fault+0xe3/0x190 [ 390.487236][ T9651] ? __might_fault+0x13b/0x190 [ 390.487263][ T9651] sel_write_load+0x332/0x1bd0 [ 390.487288][ T9651] ? __lock_acquire+0xb8a/0x1c90 [ 390.487311][ T9651] ? __pfx_sel_write_load+0x10/0x10 [ 390.487343][ T9651] ? __pfx_sel_write_load+0x10/0x10 [ 390.487358][ T9651] vfs_write+0x2a0/0x1150 [ 390.487381][ T9651] ? __pfx___mutex_lock+0x10/0x10 [ 390.487403][ T9651] ? __pfx_vfs_write+0x10/0x10 [ 390.487428][ T9651] ? __fget_files+0x20e/0x3c0 [ 390.487466][ T9651] ksys_write+0x12a/0x250 [ 390.487485][ T9651] ? __pfx_ksys_write+0x10/0x10 [ 390.487516][ T9651] do_syscall_64+0xcd/0x4c0 [ 390.487538][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.487553][ T9651] RIP: 0033:0x7f1d9e78e929 [ 390.487566][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.487580][ T9651] RSP: 002b:00007f1d9f6ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.487594][ T9651] RAX: ffffffffffffffda RBX: 00007f1d9e9b5fa0 RCX: 00007f1d9e78e929 [ 390.487605][ T9651] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 390.487614][ T9651] RBP: 00007f1d9e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 390.487623][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.487633][ T9651] R13: 0000000000000000 R14: 00007f1d9e9b5fa0 R15: 00007fff6de8f298 [ 390.487653][ T9651] [ 390.491239][ T9651] Kernel Offset: disabled