last executing test programs: 9m36.587738142s ago: executing program 2 (id=208): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x100, 0x0, 0x5f, "eca13b059d1bbeb1109fd2dfb1d95cc2", "b8487ecbd605639dbfb7fdb182e9aa01d765f1b3f64bc828d96074201425a27eb04a944ce89cba554f42d7294ca74a495e19beb878d0e2767b381fbdb0c4534d9004bfeddc255b44ae8d361bd37737576ff6c6fdd234666527eaf396196055c319a60094f3a6ac0e52ad2222af2f9563bcb8d052a090bed55b4d0e2e4c36c9a064f1c1b2d404a3251acf7d27f1256ff8faedf489d4cc0d5df364279a4cde472ae0dbe9d9fdff430fa6bd3df4a69d67b96bafcb22024e5be2e0d2b31c95647b2764854a5135dd40c1042743c07007dd3d2c827bc1c9674124e782bea2e1e9a987706f9b9a2fe84370de7a56"}, 0x100, 0x3) r1 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x7fffffffffffffff, 0x800) ioctl$DVB_DEMUX_DMX_DQBUF(r1, 0xc0186f40, &(0x7f00000001c0)={0xb6e, 0x5, 0xa3, 0x101, 0x12, 0xffffff64}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffffff7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r3 = socket$inet(0x2, 0x6, 0x1ff) getsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f0000000280)=""/173, &(0x7f0000000340)=0xad) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000002480)={0x20, 0x0, r6, {0x0, 0x15}}, 0x20) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003500)={r2, &(0x7f00000024c0)="641a818995f12ecd1daf4ab562771869d6a2363a7d842bdc2a3d0ddef365917c358cc36a5692df7faa211b4e98e1d1d47b2cc3249d4c", &(0x7f0000002500)=""/4096}, 0x20) sync_file_range(r0, 0x8, 0x5, 0x0) chmod(&(0x7f0000003540)='./file0\x00', 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000003580)) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000003600)={0x1f, 0x0, @none}, &(0x7f0000003640)=0xe, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000003680)=0x1, &(0x7f00000036c0)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003740), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x78, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x1a}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x4, 0x10, 0x1, 0x8, 0xe95b, 0x5, 0x5, 0x5, 0x0, 0x6, 0x3, 0x8, 0x3, 0x4, 0x8001, 0x3]}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x1c, r9, 0x701, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x81) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000003980)=0x0, &(0x7f00000039c0)=0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000003a00)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x9, 0x401, 0x7, 0x0, 0x9, 0x2, r10}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000003e40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x250, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc2}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x70, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x34, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x10001}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1000}]}}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xff16}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xb6, 0x7, 0x1, 0x0, "f009c069faaa462fc2c42eb3b4c917ae06a2c0b86ca9dbe9443272c2708faa655c35d8e91848826bb8a233d102be6ba9beedae2d2615455553d8865088f876434379fd0f5d145fe6d443bd786f6d5f2aa14f2c2e452859aa66d5fd923db4a961ee0e0590d92bc1e0a10375c9ef8b117c91d58f8e854e1625b7f48d22e56acb703fd79ed461b7a837fade8c222fb19d4b8afc711c5b87eee91f591df0ff5832ce228446deadd3410cb177cb733b11d0cfd029"}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0xb00, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x328}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) r12 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8982, &(0x7f0000003e80)={0x8, 'pim6reg1\x00', {'gretap0\x00'}, 0x60d}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000003ec0)) 9m36.475045185s ago: executing program 2 (id=210): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000000)={0x110000, 0x0, {[0x0, 0x6, 0x8, 0x0, 0x6, 0x4cd, 0x0, 0x8000]}}) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x70) chdir(&(0x7f00000000c0)='./file0\x00') (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), 0x4) (async) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xff, 0xff, 0x9, [@fwd={0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x69, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0xb}, {0x10, 0x1}, {0xb, 0x2}]}, @datasec={0xa, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x9, 0x3}, {0x2, 0x9, 0x81}, {0x3, 0x4}, {0x5, 0x800, 0x6}, {0x1, 0x5, 0x1}, {0x3, 0x80000000, 0x6}, {0x1, 0x7fff, 0x9}], "9ea7d5"}, @func={0x1, 0x0, 0x0, 0xc, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x59}, @ptr={0xd}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8}]}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000300)=""/238, 0x121, 0xee, 0x0, 0x7, 0x10000, @value=r2}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, r3, 0x2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x17, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf6f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff}, @jmp={0x5, 0x1, 0x7, 0x9, 0x4, 0x2, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x1, 0x4, 0x5, 0x2, 0xb2}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000500)='syzkaller\x00', 0xf68, 0x1000, &(0x7f0000000540)=""/4096, 0x41000, 0x2c, '\x00', 0x0, @cgroup_sysctl, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x8, &(0x7f00000015c0)=[r2, r2, r2, r2, r4, r2, r2], &(0x7f0000001600)=[{0x3, 0x1, 0xf, 0xf}, {0x0, 0x3, 0x9, 0xb}, {0x2, 0x2, 0xf}, {0x2, 0x2, 0xe}, {0x2, 0x3, 0x8, 0x9}, {0x2, 0x5, 0x8, 0x1}, {0x0, 0x1, 0xc, 0xc}, {0x0, 0x1, 0xf, 0x2}], 0x10, 0x5}, 0x94) bind$can_raw(r2, &(0x7f0000001740), 0x10) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x36) fcntl$setpipe(r2, 0x407, 0x9d) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001780)={r1}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000017c0)) (async) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000001800)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000001900)={0x28, 0x1, r6, 0x0, 0x0, 0x0, 0x0, 0x5c, &(0x7f0000001880)="b6674751cd9733902e28c6e43bc6a6e3ae4bb607640026ca02942c5574b8e1d450c591d24c4ca50fd53779a2d87e487ba7910f362865f0f19604caac39b52dc431e6722a3930343836f425a8df3b5b61865fae9eb52d87e2eba6356d"}) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001940)={0x6, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0xb, 0x6, [0x5, 0x77, 0xa3, 0x5, 0xc9c]}}]}, 0x40) (async) write$char_usb(r2, &(0x7f0000001980)="50533e4d9338c830b03ac6fc6c566d3c2531e80602d5f19978776a0d151d7dec78b6fde174955fbba5aa857e610ae86090281821ac4375216194816c3d06d02ced694b", 0x43) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001a00)={0x0, 0x8cb5}, &(0x7f0000001a40)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001a80)=@sack_info={r7, 0x0, 0x4}, &(0x7f0000001ac0)=0xc) (async) syz_open_dev$vcsn(&(0x7f0000001b00), 0xb, 0x4800) (async) r8 = creat(&(0x7f0000001b40)='./file0\x00', 0x114) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001b80), 0x3100, 0x0) (async) getpid() (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001bc0)=r8, 0x1) (async) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x50, r8, 0x8000000) syz_io_uring_submit(r9, 0x0, &(0x7f0000001c40)=@IORING_OP_UNLINKAT={0x24, 0x18, 0x0, r8, 0x0, &(0x7f0000001c00)='./file0\x00'}) 9m36.470155828s ago: executing program 2 (id=212): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @stop_pts=0x8}) 9m35.468607037s ago: executing program 2 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYRES16=r0], 0x1a0}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="6c385a7af3", 0x5) r5 = accept4(r1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0x44}, {&(0x7f0000000b40)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce", 0xdd}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d1", 0x31}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x10f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x2000c011) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000680)=""/76, 0x4c}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000a00)="66b9bd0a00000f3266b9ae03000066b8bb4e000066ba000000000f30360f01d49a00807d000f20e06635000020000f22e0b8f2008ed066b9800000c00f326635010000000f30baf80c66b8c424d98a66efbafc0c66ed0f01fc660f71f59c", 0x5e}], 0x1, 0x51, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002840)="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", 0xfa7}], 0x1, 0xfffffffd, 0x8000008) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000980)="0f01cf0f50e866b9800000c00f326635008000000f30ba6100ed66b8298600000f23c80f21f86635040090000f23f80f32670f01cb640fc71b0f38c95808b8a7068ee8c4e251cf7f74", 0x49}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) socket$kcm(0x2, 0x5, 0x0) 9m34.954214126s ago: executing program 2 (id=218): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)={0x18, 0x1a, 0x601, 0x70bd2b, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x18}], 0x1, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000d40)={{0x3, @bcast}, [@bcast, @remote, @rose, @rose, @remote, @rose, @default, @netrom]}, &(0x7f0000000dc0)=0x48) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000e00)=0x4, &(0x7f0000000e40)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x6e, 0x6, "863b22513339e0bdc234357962a0f4cb2a6ab09bc043cf4f9b1c9c7cff7679b741b6206eab4dbe5937c9116e6ed68351b6b2b0a00752cd1891b0c46aeda5f3d831c4b653ab8f11a3b4e6fa8b89035bc360ae5d43294a4650e59e2eb838bfe0ee7e3b915908c924815006"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x24, 0x6, "ccb4325b23b16aa01b2a3d9aab86dadcb313c11a3032c00d7f5da4ad7e97070f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "98f2d2ee9253a2eddb92d5c15d4c82fee0dfc84021d91f33dd522bbb2e9a9c14450442924a4db956fd4ca491fac5b3d31ca56f7071d101997d819058e6f8da6ffe05429d7ea3df248259bfb210107c67d8c234add5a8e4f14415e42cfb5cc0ee5df8fd3e8ea54991d736b323e44cea2bad474e54efb0cc5f46d196b696532e8cd3a66df01ff5634c6dcead14d353e397efb4be17e3039ebcf97a9d5ca7f6ca22c4a9e023b167"}]}, @NFT_MSG_DELSETELEM={0x848, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x808, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40b2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x3f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x22, 0x1, "5378f2c2ef704a7fcdc11f8a32b141a66e56fc3da16f53686dca16d52f2b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "d22ab371879938a32b788908d5a894938639d1e8e88a1d384ae50049742afdaefec7c495d53de718423b114a7dc718c6c4f21b1c8dd73bd14acb22ef767d4344e3ec227b73ff49dcd3f79a16082bb77fcfa09394c5fa616ab804fdc9c0814666fc994ab24e6a250a335c0cfff6a3158cbeaca221563612472474d77017255f187477ac106ba44d42deb22ec02cc70528da6b207dc15be5f7ce262b1b3332c0b8e9557efddceacac471f779546c176b17dd055c3db7fc470cb1dd8a195ca0e901c6d221880f1b2015613dc7879632e85004fc6f72cb1f2011c3cd93"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x88, 0x1, "e5dc35253e3ddcf24d0303f70bd382650bae9130dddbb9722f404b7c6aa4b95796a7cb524b8db255894d73999bff0ed2ed1ffe4628e3ddd376408272926c0c4a36fcffb7448442b57206d4be5160f30ccbf8204f572b559328b3571c8faefebb38d21f06aff096e557d4a4a1b040dd50b1b0a4cc6ba192dbcf3f3c25df0b7b7f2cb0cc88"}]}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "864eccb7b9457df345fcad7dc46cd82d78bb7670fee3637c0bfe4597151d7efaa85e0aa542135bc474b1e96778cdf9ea28c6dbfe2dd9c826e78a74f56e83788f1a496981abc12533d6da28500cb582f650645dfb16192063e3691794097e9a2c7e683f790a02db5de2ec6d5cb63f2dab3d467a3696925ceda70bd41a148bce690526542f9e930953b12279830f69d004ff7a6909c814bbdc462c6cb2da7d48fb885db30779885f35ceac532a0de114b7cd2d831f2f4fbb0174ae496a36e31a0544ee61"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x56, 0x1, "83eed27dfdd9069298bcf1393773b50df0837f7db32a81238d25611388389e386ba58e2dee058f2b1064df16eb44d374111790adc7f457f38fc37ece09916cc114d554746b8538cefa471df1463696738b19"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}]}, {0x4}, {0x3b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7, 0x1, "8341fd"}]}, @NFTA_SET_ELEM_DATA={0x394, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "aecb2240c9d1d52bba3a54a10c87eba7370a273785d438d7e7913614915d3a6f40dff57d315c2f5fe8d42d304b2b0d772a760fa751d591c6430f194bed7e5402167137f39995e3e86b537c1b5ac1e6d542ee25ee346b3b71f7329de73adebb1237ea6b23a62d318f069e3f2a0ffa7d0d7199b23befdadb16ec149ff86731f1b00db1c54050c21abc1a4c2ef35c5c5a1b7e29195ec89f5b76d9996af24667202ebcf21a36951755b9f5d22f94272d967676993e89574f905fab0e63df81d908d9d0"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "d68a834e83465cd8405ee2409a29cb78420303fb43a9d6c0a9c62ce4042c24f2a8ab768440aa51900b4d82f26a8d3acc563dec5af4edf804a5c20caecaf1b8489e96c8b06212fa965f0c57e325b0a7f8dc0f626e801933aaaaa83f3f2fbd728c31a11f3e654ac0120cb28574d306f4f2e2375282d2124efdf3cf5b8044637db479bb14b029e9aa11129291636797d7947123b4c7ceb4314131"}, @NFTA_DATA_VALUE={0xe3, 0x1, "31f8e4e8e8c48e94493367418b2f8fbbe7f0986505a3dc06a481d432c8284ef29b316a876e827c88af86964f0391b2899506d8efcf7f375e2c7351e2e962c04b731c65b0320a8d7167d03be0664fa746a8728a0b64c8e7cd565f316e2a9ed27eb7fde14c19e3d58c00001d41803fe4c61765f8cb4c20597117129400efc885d00283693b88cf7b81be51dfdabe423f9b65d19d28a7e16f0a3964387dce1e7804644366e53e3086b33b14bf0dfa2d1ef4cebad589614545fb66eadc28b1a50b86e9e601fe97d9bb8b2adc47907a1debcfa9779cc5c56c96d9c7b04bdd946f51"}, @NFTA_DATA_VALUE={0x46, 0x1, "5dae283a1192c8c3b136148a653ffb647343a5c45e4086eebfc1b255bd8a827d672a2b0adb9caf04ce117d9c23131a7e001a47891b63fc68b9c50632812e22bd5534"}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc60}, 0x1, 0x0, 0x0, 0x1}, 0x10004004) 9m34.743167647s ago: executing program 2 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000480)) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="200000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900b8450100320000001c005e80080003008000000008000100090000000800090002000000"], 0x44}}, 0x0) 9m34.483134348s ago: executing program 32 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000480)) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000087b7f0e2931521a4b3e64a0f7212a90b04c63408868e95f11939437198a35a25db85e7b55c9aa1070ccf34c3fa0550c2250657ad34a7979cff74852c2f2dc1304686687e07046c797f282b8e0af0f62d6dc8742de8f4203312482443cfa69bd0343b7c7f024de4e6c831233f84854e5e490b5d99eaa75f7b06f1a5969dfd61d8feb1d8a7d97227597d35d5ee2cdec2820542854d2e75ad28c251570c1a3bbbf6f65b5e551d2efc29e84c878ec5247ae5135e92021707051156da80ace179e14edb1bee88176c16dd2af43b86b470995fc4a3356030a4be4ee61fa57e0179c834741863b519db45602482dc44a14ac74c3e4ad3dc6bed893e0ae858fc79c499fd7ebdb081f6ebf274fa0a91b1b93e5af3683b9e9450e6b231e608b4eae1592e6dad4c9e", @ANYRES16=r1, @ANYBLOB="200000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900b8450100320000001c005e80080003008000000008000100090000000800090002000000"], 0x44}}, 0x0) 4m14.805300761s ago: executing program 0 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) statx(r3, 0x0, 0x800, 0x7ff, &(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone3(&(0x7f0000000480)={0x4808000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), {0x2c}, &(0x7f0000000380)=""/92, 0x5c, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) fcntl$lock(r0, 0x24, &(0x7f0000000500)={0x0, 0x3, 0xd1, 0x3e, r4}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000118}]}) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 4m12.127220558s ago: executing program 0 (id=1293): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x4}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x10) madvise(&(0x7f0000004000/0x3000)=nil, 0x3000, 0xe) 4m11.523168775s ago: executing program 0 (id=1297): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = msgget$private(0x0, 0x13) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0xb6c4b1c45c6800af, 0x3800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0xffffffffffffffff}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) close_range(r5, 0xffffffffffffffff, 0x0) 4m10.661809136s ago: executing program 0 (id=1299): mkdir(&(0x7f0000000200)='./file1\x00', 0x6b) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2101) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fcfffffffc000000000000000000000000000000366aa12c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000000000000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000000000000000000000000000000002ff0100000000000000080000ba6b6e000000000100000000"], 0xb8}}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x47, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000800200000000000000000000000000001800", [0x3, 0xfffffffffffffdff]}}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "faffffff"}, 0x0, 0x1, {0x0}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4m6.91087713s ago: executing program 0 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440)) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x90100) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x2) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 4m6.220110715s ago: executing program 0 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) setuid(0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x4005, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setscheduler(0x0, 0x3, &(0x7f0000000140)=0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCGUNIT(r4, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) pidfd_send_signal(r5, 0x36, &(0x7f0000001300)={0xd, 0x5, 0x5994}, 0x0) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4m5.47474488s ago: executing program 33 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) setuid(0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x4005, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setscheduler(0x0, 0x3, &(0x7f0000000140)=0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCGUNIT(r4, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) pidfd_send_signal(r5, 0x36, &(0x7f0000001300)={0xd, 0x5, 0x5994}, 0x0) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3m1.276481652s ago: executing program 1 (id=1510): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="68174badb660fc39374841d345f121893f2d95760dc95d9c1df73e307982ec6d7ac95806c5c09e9758e0728076fe221155e2aae93e7ac7662dcb953f90a9c1bfcfd738ade2f96071f7ae4d51b253e39e0775ce42093480a7c59126f71e3d5cee9666624510955c3fd7b3ada62b7e9da09950d3541fd07d116e251de3e1196a4c5961cc9796bf0b37b41682a3fb295b383364c838f962c2f57827e2fc6ebbeb8112352ea418c0fe07475419058768c64543706fd13fad46fc9ae6ae85fb03fc377e70619bfbb58212e5e39c70ec26510c30b9c6bcb5474dfa4219466907e8bb59aef6a1a979ac", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xfffffffffffffcc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000600)={0x0, 0x16, 0x6, "252dd45a148e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="8f42c11d03e94a3b628eeec25a183efa71abdb5bc0134a3e8de9145f73be3dd790503984f505f40efd6a55b84e93c9f60fc834825e979cda8bca3ace1b1ff7c0e9d83159433320e653ffcfcaccb007690cf2088e7096c34565a0cd9db7fd9013"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="200025bd7000fedbdf254f00000008000300", @ANYRES32=r8, @ANYBLOB="24007a800c000300ab6118d121dc5f0800000000000000ab86c0a84a5f073ca99ba6307b10007a800c00030021861d345c1f7f0b60007a80080004000b000000140002007cb04ddd2d0da17895a4e6bcbfefceaf24a2269e4302206953f3727c86cdfe1d000100c78cc686280f8be781770ea28c2f9728d53949884f0839b500010000000c000300d5cd97d9849dfb8c0800040007000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x4) 3m0.475245744s ago: executing program 1 (id=1520): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x26, 0x3, 0x8000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0xffffff3f, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40489, 0x10880}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}}, 0x640048e0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x90}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb3, &(0x7f0000000600)=""/179, 0x41100, 0x2b, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(r5, 0x4, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) 2m58.221352734s ago: executing program 1 (id=1526): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000001200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40010040, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$loop(0x0, 0x47ffffa, 0xa7dc2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000380)={[{@metacopy_off}], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000000901080000000000000000000000000900010073797a30000000003c0002002c00018014000300ff01000000000000000000000000000114000400200100000000010000000000000000010400028005000100000000"], 0x5c}}, 0x0) setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf6", 0x2e) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_emit_vhci(&(0x7f0000002bc0)=ANY=[@ANYBLOB="02c9001000c5"], 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2m57.6899304s ago: executing program 1 (id=1530): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) tee(r0, r0, 0x7, 0x4) (async) tee(r0, r0, 0x7, 0x4) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) init_module(0x0, 0x0, 0x0) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000540)="528efde6ea0237702b5a2b754027abd1b38a770c3d5c478b5f929127425619ecce1ce6db9d71c99669bc3d766257fa20241dca18d045ef50309bd5e61fc45519751d5d948d4d47ae302f47b90511bc4b4f559d46c6648392660a9369c2bf94a855ffd8", 0x63}, {&(0x7f00000005c0)="4fd0254d97c767dc9e4edb0c6231fb6f95622ac9d694896e483bf49e98634e6fd15c7c2fb9b521583f72e2c5bb40d2cacf1371ff36a65c7398daf8016dc648aa3f00304775af492bd1ece5f52650745652384c90854cbd04126111ea701fdf4d4fda83ad50f5647f9bd2d4b7b5699ab0d16e77d90c7d0798a177277f8c4b8b00ef81c2579b17aea9c5c4fa82191936bbeb7441681f6b217772ce5404fcdea6", 0x9f}, {&(0x7f0000000680)="ed2b518c56b768df325ae6c000838a4b7c19f3324988c7eeb4c5b03cc7267d56552b53e4ba10ed9d1e2be77e7045b1a3ca0b1819b52f4c5c86272a9171a6b6eef864b58c5dd062c32d87856be87434139673cbf1b0d89d26cd52dfb09afd9355329acae2d8", 0x65}, {&(0x7f0000000700)="353226e72b2387ec13c8763dfd417d7cf4cb7914a85947b61f04fef40f7c0968b25b583288dd9171e02a879168479e9f4268ad57cbd0ead31bc248d6b21ceaa08e05cd97b63259f0e46080e6b2f7ce338fc62c76f4a6e365e2896505ecf170d7234a65a3f598bfe361446892ce06aca1520277d54b95b21914", 0x79}, {&(0x7f0000000780)="c36b6b6509c84cb3730151cb18f6e1035ddb8815ed21470602687181feb08028dcdc4d76107baf52a62a72f251681f512953dba41877566855485f876c79aaeeb178644a9b2866dcfd17fd8af28188788473e6333d8f2bdf4fa67471ab0b31c25d44bb955007dc4d51794323cd549914d5b833b4522b6e706d1fe45f6dc2e90c195caa50b1455e1d0de189f2e7c4c20c39", 0x91}, {&(0x7f0000000840)="961c0ec458f5b9f1a9513fd994f861a19abfe3495998a97852f4eb1e8065967f8510f0e67fcf8cc1a127e38ca22493eef5dfae73bb4e6250deae2c0a9646c53f9f66f3f83606037e3d7b27e8c25146a93ff1f828e68a090d2fb81eee74352c6575bbaeb413c6f53b121bf989ea0d788e670e42499f1aa923184b72f0055b456467778e955db20282128ea52b2e2ec76d0a1472bc5d54a0bd1283fc3e2cef3d5e61819b8fa0f604f69fa15e84d1c425b05ccee0f11826b6d66079f6b18652ef8bc92773f2dc", 0xc5}, {&(0x7f0000000940)="e28e9837214938e0b557a9619a3a1ab6d9cb77523acf1210994ce683f73ade304f1fe0efcc3e97660f38ec6ff3f86a617961f43294e14a5e15628226438a38de1e3ba87d1d2690a7f07d9a7e09099983fcc16af508e154e7c9c45055f00f86a2dc078148eee228c4070b7bd85ab4e223356d1994653f4a6040d49049714ea495eba99106a58dc0fa72c54e1e1bbdf21647b4b924293fce3a74b806a1812d4128122d742e6b7e9ddfc0ceed3692a438d56599ac61d089adbbf715650d1989ee", 0xbf}, {&(0x7f0000000a00)="21250ceffbd46a340e45c7b6a3e6e293745822fc615734378b666240b983477789e92f9dc661a9c72590275fd9663b07332d8a7d6678b2d3a32c86cb3fcba2f40bba1df2b8f85416dae6f32eb7b1b6c391f512aa5f2602fd5dabca0cbb196659", 0x60}, {&(0x7f0000001900)="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", 0x1000}], 0x9, &(0x7f0000000bc0)=ANY=[@ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0020000006b06b4605000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x20048811}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="112a424744071c860eecc440a96cef79564b00662d1acf4202e1899efea930e4c56572a37c5eb403810628e8f297c4e2afe93349910bc64112b5d8899cd3707590948d2665d662d0f69055b340ac0e1e0e8d1fd769f1f4f2e90cf64f76281e72b74c57c7134b90353d54acbe28e830930bc9f44b3d518b81600197f47487f6", 0x7f}, {&(0x7f0000000d40)="587b9f9fe0e8c29de0b88684602fdf13823ba23742a3f149af1c40d728f20caf76831b", 0x23}, {&(0x7f0000001080)="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", 0x151}, {&(0x7f0000000e00)="d36544013bc9a705dec28a458493d64f835e6345e95377dc128aaa7ced073ee2c71ce15d093e38351dfc3e4fff4fe7fa8f458e1e1ccabc9f18092df0f4b2b2c80e855f8724a320b2d97679bac17b45c614feb737605f225bb274c588e28794c51df7285350c0bbcfd141e97ee23cf466a065b5b9a4d755df949444a2cafaf4b306e28b45bebbdbab160ef90cfa2283f2da426a2ae2ebb64ecd785dab4d22", 0x9e}, {&(0x7f0000000ec0)="1a6a1fdf4621ac47d2fec4b21fe9a27447d09dcf292bc3ebf6998fe0c7b44c261a659f7d7ba2bad975de8715fcdc84d8eb4b25c743a3775b5700b33d7f6fe33b78aea8a5c489479ed264843c58a0ed8d", 0x50}], 0x5, &(0x7f0000000fc0)=[@cred={{0x1c}}], 0x20, 0x40080}}], 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) (async) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) r6 = open(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x135) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r6, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x313b02) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) (async) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) accept4(r0, 0x0, 0x0, 0x800) (async) r8 = accept4(r0, 0x0, 0x0, 0x800) ppoll(&(0x7f0000000340)=[{r8, 0x2}], 0x1, &(0x7f0000000500)={0x0, 0x989680}, 0x0, 0x0) 2m56.681954723s ago: executing program 1 (id=1534): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) gettid() (async) r2 = socket(0x10, 0x803, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) fchdir(r3) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r2, &(0x7f0000000000)='veth0_macvtap\x00', 0x70d540, &(0x7f0000000040)={@align=0x4, {0x44a4, 0x1134, 0x0, 0x2}}, 0xd, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}, 0x1, &(0x7f0000000300)=[{0x5, 0x2, &(0x7f0000000180)='@@\x00', &(0x7f00000002c0)="a0d9d9498f2b9dffc2a42ecd833ee6f0fa8f4ef75c285b918c9196242aec9f19a933af700503140244", 0x29, 0x10}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async, rerun: 64) chdir(&(0x7f0000000140)='./file1\x00') (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000500)=0x1) (async, rerun: 32) r9 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) (rerun: 32) setpgid(r9, 0x0) 2m56.219484223s ago: executing program 1 (id=1536): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xb79, 0x0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x77}, @call={0x85, 0x0, 0x0, 0x8c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x40000000, 0x4a, &(0x7f00000005c0)=""/74, 0x41100, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xe, 0x2, 0x7fff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r0, r0, r0, r0], &(0x7f0000000700)=[{0x0, 0x3, 0xf, 0xc}, {0x2, 0x2, 0xd, 0xa}, {0x3, 0x1, 0xe, 0xf}, {0x0, 0x2, 0x4, 0x9}, {0x5, 0x4, 0xe}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x34}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x971df049c522aedd, 0x0, 0x6, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe6, &(0x7f00000002c0)=""/230, 0x41100, 0xb, '\x00', r1, @fallback=0x11, r0, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x6, &(0x7f0000000840)=[r0], &(0x7f0000000880)=[{0x5, 0x2, 0x0, 0x6}, {0x1, 0x4, 0x7, 0x4}, {0x4, 0x6, 0x0, 0x1}, {0x5, 0x3, 0xb, 0xa}, {0x0, 0x1, 0x5, 0x1}, {0x2, 0x5, 0x10, 0x7}], 0x10, 0xffff7fff}, 0x94) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000040)={0x0, 0x0, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) 2m54.76893928s ago: executing program 34 (id=1536): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xb79, 0x0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x77}, @call={0x85, 0x0, 0x0, 0x8c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x40000000, 0x4a, &(0x7f00000005c0)=""/74, 0x41100, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xe, 0x2, 0x7fff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r0, r0, r0, r0], &(0x7f0000000700)=[{0x0, 0x3, 0xf, 0xc}, {0x2, 0x2, 0xd, 0xa}, {0x3, 0x1, 0xe, 0xf}, {0x0, 0x2, 0x4, 0x9}, {0x5, 0x4, 0xe}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x34}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x971df049c522aedd, 0x0, 0x6, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe6, &(0x7f00000002c0)=""/230, 0x41100, 0xb, '\x00', r1, @fallback=0x11, r0, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x6, &(0x7f0000000840)=[r0], &(0x7f0000000880)=[{0x5, 0x2, 0x0, 0x6}, {0x1, 0x4, 0x7, 0x4}, {0x4, 0x6, 0x0, 0x1}, {0x5, 0x3, 0xb, 0xa}, {0x0, 0x1, 0x5, 0x1}, {0x2, 0x5, 0x10, 0x7}], 0x10, 0xffff7fff}, 0x94) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000040)={0x0, 0x0, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) 1m3.604527269s ago: executing program 4 (id=1910): mkdir(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa2240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xf, 0x0) r1 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x14, 0x0, @fd=r2}) io_uring_enter(r2, 0x2aed, 0xfffffffe, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000ae9fe9fa67052e34ef8a24fe8b1cacd32ec4361175189580c1b94107b6c5804734955c0cba854048b5eaa072c2c79573715cfbabfd15dc97867746f0a1833a7f2bf57ab5eee20f795b2f07250194c8fc28c79c7e15515b6cca7ff372a741cd3749f0f8f968c7559920d9e429368b9468a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, 0x0, &(0x7f0000000380)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x80, 0xfffffffb, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, 0x0) 1m2.310882088s ago: executing program 4 (id=1913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0xc, 0x0, "a0ab3cb55fa00c8c700e5e09285f491eac0cea1ce9f0ec42ea14458ee7781bec402d2d321b88022cf1948c5293dc6ad261085cf4a3985220570ea63beac9bd0280683400429fdad3e08006b7b7038662"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYBLOB="7132f843a95192c098c58ce1aa8f30db6719d69ea8e2bf204ae75d1ee113323af68ef0f9f4ce384e5fd19f379b231de799569f4306e09797d27690d5f7eb6224378c83c18032d2825ded1a12a95d88e112ed4afd2468b5d3edc67695462c80169db66e6c2d28ba8733fc395ca30d533f9c4a8ec16e40fff8b03b18c2a913"], 0x3c}}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000600)=[{0xe, 0x0, [0xf0c, 0x4, 0x6be9d3e7, 0x5, 0x7654, 0x8, 0x2, 0x9, 0x3, 0x8, 0x707d, 0x2, 0x1, 0x3ff, 0x1b, 0x8]}, {0x2, 0x0, [0x40, 0x1, 0x407fff, 0x886, 0x3, 0xc5, 0x3, 0x56, 0x7, 0x5, 0xe, 0x6, 0xffff, 0x3ff, 0x7ff, 0x3f768c2d]}, {0x8, 0x0, [0x2, 0x9, 0x5, 0x0, 0x7, 0xdf, 0x401, 0x2, 0x7, 0xe, 0x5, 0x9, 0x80000000, 0xe3c4, 0xe888, 0x4]}, {0x10, 0x0, [0x3, 0xffc, 0x4000f24, 0x1, 0x4, 0x8, 0xa, 0x7, 0x8000006f, 0x2, 0x0, 0xb, 0x6, 0xf49, 0x2, 0x1]}, {0x1, 0x0, [0xfffff800, 0x5d, 0x3ae54991, 0x1, 0x4, 0x7, 0x7, 0x7, 0x7, 0x2, 0x0, 0x400, 0xfffffffa, 0xd, 0x4, 0x5]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x48002, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x70}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 56.261657021s ago: executing program 4 (id=1931): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b45, 0xc43) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDENABIO(r2, 0x4b36) 55.246660815s ago: executing program 4 (id=1933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x4, 0x0, 0x3, 0xc, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x44}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x60}, 0x1, 0x7}, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x2c, &(0x7f00000005c0)=[@sack_perm, @mss={0x2, 0x7fdfffff}, @timestamp, @timestamp], 0x4) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 54.808867474s ago: executing program 4 (id=1936): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa2240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xf, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000ff8000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000001c0), &(0x7f0000000380)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 52.999921534s ago: executing program 4 (id=1946): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) (async) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x10000000008, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040810) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 52.375855411s ago: executing program 35 (id=1946): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) (async) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x10000000008, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040810) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 9.869997443s ago: executing program 8 (id=2118): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000060000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x11f040, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x3) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 8.350841651s ago: executing program 5 (id=2125): syz_io_uring_setup(0x471, &(0x7f0000000040)={0x0, 0x5a9, 0x1, 0x2, 0x284}, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300002e96a667160f00092100000001220700091581030000000000"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x1000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x1e, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}]}}, 0x0, 0x3a}, 0x28) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x400000036, 0x40000000788, 0x80000000402, 0x183, 0x400000004, 0x0, 0xee, 0x0, 0x100000000, 0x100000001, 0x10000, 0x6, 0xf, 0xd99, 0x0, 0x10000ab], 0x8000000, 0x1d5250}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae000000100000000000000000000000000000000ffff00000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x200, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0xfffffffffffffffe, 0x2}, {}, {0x7, 0xfffffffd}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$sg(&(0x7f00000006c0), 0x0, 0x8002) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r8 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno', @ANYRESHEX=r7]) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000001c0)) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="0000080000000800392cda2c9374b2ab4a9a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r9, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0xa, 0xb6, {0xb6, 0x21, "918bc6d4aaa88ae99023ecbe8f7716f248e399e3476d4b7274de185835012960ece6e62c465b446c9fc8cc89b0c3f91c0e8b76fbce4cc381c9231fa34f7a3a5cdf74db64ed7b10d57d598c8416c67c0d85eb91b6f4eb5ce570e4a9a1be1e433f50ae68bb15c7bb20c50a2311dcb8131565db056a9ab46968ddc510a2c907f3e09c908c37789c40d720990a78a35f7a18786eb0e275559422f594de0c50fa0d1cad31a5df3b4179ae4d6de4a9c26c1399786e7ae8"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000004"]}, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x19, 0xf1, "1cd9ccf544924c43a3e7512e52e1a312ba1eab5e935dedc5a013c97d6f6cebdee7cbf724993d4cd4f417433d68d71d07afa973dc0fabe7e863a55ae2b8d965af8a0114a696d50fcd99e846d4132c45407b3cd98a14eca28e15636e65647b4d00dc55b58aba6979d6dd9cac9a73425e0fcfd320488803b628822608aef3f2071b9e1a1b88977b5ac919a670994a8cd25912921e1209e8cd05db4fcc120eb51136487e02ac93a1c4651075e42337a3f888248b69467336e258ae162c5ca6027ee9b7e2dc993a937d7a87fc6faee403f0c5aa44d38754474be8cb85b66183d3bde7d745bd6d3b371b1153937523c08e359cb7"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xe3}, &(0x7f0000000580)={0xc0, 0x5, 0x3, "b9cefc"}, &(0x7f00000005c0)={0x40, 0x5, 0x3, "941b3e"}}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) 6.697634379s ago: executing program 8 (id=2130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="f2670f0178b8ba4100ed660f78c0cac6bad00466edb8de000f00d866b8001000000f23c80f21f86635080080000f23f8baf80c66b82c90958e66efbafc0c66b80030000066ef64d50cbaf80c66b8fcf7418366efbafc0c66b80070000066ef"}], 0x0, 0x18, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xc54, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc40, 0x1, [@m_police={0xc3c, 0x1, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xeb, 0x7fffffff, 0x6, 0x0, 0x0, 0x8000, 0x10001, 0x10b, 0x9, 0x9ec, 0x200, 0x1, 0xffff, 0x6, 0x4, 0x9, 0x6, 0x70000000, 0x5, 0x37, 0x7fff, 0xfc8, 0x4, 0x8000, 0x9, 0x6b4, 0x0, 0xd2c, 0x8, 0x0, 0x1ff, 0x62, 0x0, 0xd, 0x100, 0x0, 0x9d, 0x10001, 0xffffffff, 0x1, 0xaa9, 0xd33c000, 0xffffffff, 0xffffffcf, 0x9, 0x5, 0x8, 0x4, 0x0, 0x1, 0xc9cf, 0x6f, 0x4, 0x5, 0x3, 0x7, 0x7, 0x1, 0x3, 0x4, 0x80000001, 0x4, 0xfffffffc, 0x3, 0x8, 0x401, 0x7, 0x8, 0x8, 0x8001, 0x401, 0xc693, 0x1, 0x2, 0x80000000, 0xe, 0x0, 0x248, 0x7, 0x200, 0x0, 0x8, 0x8e, 0x7, 0x20000000, 0x10001, 0x40, 0x4, 0x0, 0xe68, 0x1, 0x8000001, 0x1, 0x0, 0xffff, 0x8, 0x6, 0xa8, 0x9, 0x633, 0x5, 0x4, 0x2, 0x7, 0x1ff, 0x2, 0x1, 0x8, 0x2, 0xfffff109, 0x7fff, 0x8, 0x5, 0x48d, 0x9, 0x2, 0x1, 0x9, 0xfffffffe, 0x9, 0x3, 0x80000000, 0x2, 0x3, 0x7f, 0x6, 0x0, 0x5, 0x8, 0x4, 0x0, 0x9e, 0xfffffffe, 0x3, 0x7fff, 0x2, 0x2, 0x8, 0x200, 0x2, 0xd1e, 0x6, 0x80000000, 0xd, 0xacc1, 0xa, 0x2, 0x6, 0x9, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3, 0x7fffffff, 0xfffffffd, 0x9, 0x9, 0x200, 0xc, 0xfff, 0x2, 0x8, 0x9, 0x7, 0xb, 0x7, 0x0, 0x5, 0x7ff, 0x5, 0x8, 0x4, 0x5, 0x4, 0x4, 0x5, 0x4, 0x3, 0x6, 0xbc59, 0x3, 0xd53, 0x3ff, 0x1, 0x1, 0x1000, 0x0, 0x5, 0x8001, 0x8, 0x4, 0x4, 0x4, 0x0, 0x401, 0x7f, 0x574, 0x0, 0x1ff, 0x51343c33, 0x1ff, 0x3, 0x6, 0x401, 0x5, 0xffffffc0, 0x1, 0x1, 0x7ff, 0x2c09, 0x8, 0x0, 0x8, 0x1, 0x2, 0x4, 0x3, 0x401, 0x2, 0x4, 0x7fffffff, 0x2, 0xff, 0xfff, 0x0, 0x2, 0x1000, 0x80, 0x5, 0x2, 0xb6c, 0x0, 0x7, 0x5, 0x2, 0x7, 0x6, 0x8, 0x0, 0x160e, 0xfffffffb, 0x4d2e, 0x8001, 0x2, 0xfffffffd, 0x1, 0x9, 0x5, 0x7, 0x5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa71f, 0x3, 0x8, 0x8001, 0x9, 0x9, 0x7, 0x2, 0x7af, 0xfffffff4, 0x5, 0x1ff, 0x8, 0xda, 0x8, 0x7, 0xaeb41200, 0x0, 0x6, 0x0, 0x0, 0x8, 0x9, 0xffffffff, 0x916, 0x8000, 0x6, 0x9, 0x5, 0x0, 0x3, 0x4d74, 0x7, 0x6, 0x7, 0x7fffffff, 0x9, 0x9, 0x9, 0x0, 0x8, 0x80000001, 0x7, 0xffffff7b, 0x5, 0x81, 0x2, 0xffffffff, 0x9, 0x0, 0x3, 0x1000, 0x4, 0x0, 0x8, 0x8, 0xd, 0x4, 0xc, 0x4, 0x101, 0x1ff, 0xc, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x80000001, 0x401, 0x8, 0x0, 0x7fff, 0x7, 0xec, 0x3ff, 0x8, 0xf, 0x0, 0xb, 0x4, 0x2, 0x2, 0x7, 0x1, 0x10, 0x9, 0x6, 0x0, 0x27, 0xfff, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x9e4a, 0xf, 0x6, 0x68a4, 0x6, 0x401, 0x10001, 0x4, 0x3cd, 0x1000, 0x3, 0x2, 0xe, 0x0, 0x7fda, 0x40000, 0xb299, 0x7, 0x14000000, 0x4c8, 0x5, 0x3, 0xea, 0x1, 0x1, 0x3, 0x3, 0x7, 0xb8, 0x8f, 0x4, 0x3, 0x4, 0x3, 0xc2, 0xfffeffff, 0x2, 0x2, 0x8, 0x5, 0xfad, 0x2, 0x10001, 0x4aa, 0x6, 0x9, 0x2, 0x10000000, 0x7, 0xffffff0a, 0x3, 0x7, 0x8001, 0xce, 0x30, 0x4, 0x0, 0x0, 0x1000, 0x1, 0x10, 0x1, 0x10001, 0x689, 0x0, 0x9, 0x7, 0x8, 0xb, 0x9, 0xe2cf, 0x2, 0xa, 0xff, 0x1, 0x4, 0x4, 0x1ff, 0xffff542b, 0x0, 0x1, 0x8, 0xc394, 0xffffffff, 0x5, 0x8000, 0x5, 0xe, 0x9, 0x9, 0x7fffffff, 0x2, 0x3, 0xdd, 0x4, 0x4, 0x9, 0x3, 0x1, 0x7, 0xd4, 0x7, 0x6, 0x7fffffff, 0x4, 0x4, 0x9, 0xb9, 0x5, 0x2, 0x4, 0xfff, 0x0, 0x1285, 0xbdf, 0x5558, 0xfffffff7, 0x4, 0x5, 0x9, 0xfcca, 0x20004000, 0x80000001, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0xf1b3, 0x4af2, 0x101, 0x4, 0x1, 0x96, 0x8001, 0xc6, 0xa321, 0x1, 0x59115142, 0x400, 0x2, 0x3, 0xfff, 0x1, 0x7, 0x5, 0xff, 0x5, 0x5, 0x7, 0x8, 0x5, 0xa2af, 0x6, 0x1, 0x0, 0x6, 0x800]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0xd9, 0xfffffe01, 0x8, 0x6, 0x3, 0xffffff81, 0x8001, 0x7, 0x200, 0x1, 0x5, 0xe6, 0x6, 0x3, 0x4, 0x6, 0xfff, 0xfffffff9, 0xfffffff7, 0x4, 0x0, 0x2, 0x1, 0x8, 0x7ff, 0x7, 0x9, 0x6, 0xffff5c91, 0x9, 0x8, 0x2, 0x6, 0x3, 0x6, 0x8, 0x7f, 0x2be, 0x8001, 0x5, 0x0, 0x7, 0x4, 0x7f, 0x8, 0x4, 0x80aa, 0x0, 0xe1, 0x48e6, 0x9, 0x1, 0x0, 0xffffffff, 0x5, 0x3ff, 0x5, 0xffff7fff, 0xffffffff, 0x0, 0x7, 0x80000000, 0x3ff, 0x0, 0x6, 0x7, 0x3, 0x7, 0x3ff, 0x404, 0x1ff, 0x9, 0xd7cc, 0x8001, 0xc1a, 0x7, 0x5, 0xc, 0x0, 0x6, 0x276d, 0xfffffff8, 0x954, 0x8, 0x7a000, 0x1, 0x3, 0x5a0, 0x80000000, 0x7, 0x1, 0x2, 0x4, 0x5, 0x9, 0x8, 0x3, 0x70, 0xc, 0x3, 0x1d6, 0x2, 0x8001, 0x30000, 0x0, 0x4, 0x8, 0x1, 0x20e, 0x16, 0xe89, 0x3, 0x1, 0x101, 0xf9, 0x3, 0x7, 0x3, 0x9, 0xfffffffd, 0x71d, 0x0, 0x8, 0x6, 0xfffffa91, 0x4, 0x96027000, 0x4, 0x3, 0xfffffffe, 0x4, 0x0, 0x1, 0x101, 0xfa2, 0x2, 0x3, 0x200, 0xb, 0x5, 0x5, 0x4, 0x9, 0x100, 0x41c3, 0x1, 0xff, 0x80000001, 0x7, 0xb0, 0x6, 0x9, 0x401, 0x0, 0xfffffffa, 0x7, 0x4, 0x4, 0x160d, 0x9, 0xcb61, 0x0, 0xffff, 0xf33, 0x1, 0x4, 0x5, 0x6, 0xfffffffa, 0xffffffff, 0x7fffffff, 0x23, 0x4, 0x0, 0x3, 0x100, 0x1, 0x9, 0x6, 0x10, 0x9, 0xc2, 0xc27, 0x80, 0x4, 0x6, 0x10001, 0x6, 0xfffffff9, 0x2, 0x10000, 0x1, 0x100, 0x6, 0xffffff01, 0xe, 0x5498, 0x2, 0x1, 0x6, 0x9f, 0x81, 0x2f, 0x0, 0x800, 0xc, 0xfffeffff, 0x5053, 0x8, 0x3, 0x1, 0x10000, 0xff, 0x3, 0xfffffffb, 0xe, 0x4, 0x80000001, 0x1, 0x5f6, 0x6, 0x5, 0xfc, 0xe, 0x1, 0x3, 0x4, 0x7, 0xffff, 0xffff, 0xfffffa56, 0x2, 0x6e, 0xa, 0x4, 0x65, 0x1, 0xb, 0x3, 0xad, 0x3, 0x7946, 0x1ff, 0x2, 0x3, 0x3f, 0x7, 0x0, 0x6, 0x600c6250, 0x50, 0x2, 0xb0000000, 0x7]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)=0x7) readv(r5, &(0x7f0000000240), 0x0) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) lseek(r6, 0x1, 0x1) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) ftruncate(0xffffffffffffffff, 0x5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 5.672945909s ago: executing program 6 (id=2133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x7ff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 5.609695828s ago: executing program 5 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0x6, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x9896, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0xffff, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0x8, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x4020, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) (async, rerun: 32) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) (async, rerun: 32) syz_emit_ethernet(0x42, 0x0, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, 0x0, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3, 0xf, 0x0, 0x9}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) socket$inet6(0xa, 0x805, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f00000003c0)}}, &(0x7f0000000300)) 5.386965398s ago: executing program 7 (id=2135): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = socket(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 3.903338616s ago: executing program 3 (id=2136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x24000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r5, 0xa11, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.779914994s ago: executing program 8 (id=2137): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000000280), 0x2c, 0x40000002, 0x0) (async) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'L-', 0x4}, 0x16, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) (async) keyctl$join(0x1, 0x0) (async) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e, 0x3) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x18}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae27"], 0x28}}, 0x0) socket(0x28, 0x2, 0x0) 3.614918631s ago: executing program 8 (id=2138): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2, 0x0, @private1, @mcast1, [@hopopts]}}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40000, 0x2b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008840) 3.614399796s ago: executing program 5 (id=2139): socket(0x2, 0x80805, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000400007012bbd0000040001800c0002a005001780b0000000256cca4200007d0e69dd9fcf5d09d7f28786535678173d6b70a5628416226f738d8c82da05141e4ddff6391a"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0xc8, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 3.551816175s ago: executing program 8 (id=2140): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, 0x0, 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000809000000000000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) 3.514099288s ago: executing program 6 (id=2141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) 3.33506458s ago: executing program 6 (id=2142): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) getpgid(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0xa11, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) io_uring_setup(0x5d59, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0xffe0}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000080)={r0, 0x0, 0xe000, 0x10000, 0x7, 0x4, [0x6, 0x8000000000000001, 0x9, 0x5]}) 2.399440196s ago: executing program 6 (id=2143): setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) (async) alarm(0x38) (async) socket(0x2, 0x80000, 0xfffffffc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$FUSE(r2, &(0x7f00000025c0)={0x2020}, 0x2020) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2006}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000400)={r3, &(0x7f0000000300)='\x00', 0x400, &(0x7f0000000340)={@_ha_fsid={[0x200, 0x9]}, {0x6, 0xbf, 0x2, 0x6}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x7}) syz_io_uring_setup(0x5dcf, &(0x7f0000000440)={0x0, 0xcbaf, 0x10000, 0x1, 0x2f5, 0x0, r6}, &(0x7f00000004c0), &(0x7f0000000500)) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0x8, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRESOCT=r8], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80da38aebf57f550) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x359, 0x3, 0x1}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) rt_sigtimedwait(&(0x7f0000000240)={[0x3]}, 0x0, &(0x7f0000000600)={0x77359400}, 0x8) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000012c0)={&(0x7f0000000080), 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="74110000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f6873720000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f766972745f7769666900"], 0x1174}, 0x1, 0x0, 0x0, 0x1}, 0x4005) 2.187885169s ago: executing program 3 (id=2144): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) getpgid(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0xa11, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) io_uring_setup(0x5d59, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 2.051424544s ago: executing program 7 (id=2145): r0 = inotify_init() preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/25, 0x19}], 0x9, 0x1, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000640)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000016c0)={&(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000001700)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)={0x120, r3, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc5c5, 0x6e}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2e}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x118}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x90}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x34}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x46}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x46}]]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a00), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000001b00)={0xfffffffb, 0x0, r1}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x2e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20004040) read$snapshot(r6, &(0x7f0000001c80)=""/201, 0xc9) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000001d80), 0x2) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0xac, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xde1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe34}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x805}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000001f80), 0x4) r11 = getpid() r12 = syz_open_procfs(r11, &(0x7f0000001fc0)='net/icmp6\x00') r13 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r13, 0x0, 0x23, &(0x7f0000002000)="8adbcacef9c8c14b193cc9de150c33d33016c0b3e6b264d8582ebe05df0b440b7345eefbaa7170714cc91aff8436e2562d1964131880d3d6c5150303ec78e1264d33c39f507c7edc3b1c765ea39a33dae3ac7aa223015ffcbdeedc12316dc1f90e36b9f06f396426e5caceb82cecdf16cac77aed15e3d81f60e8707d24490d56824b42b69671fc5d32ef194a950c751f6857", 0x92) sendmsg$NL80211_CMD_SET_MPATH(r12, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x7c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8891}, 0x40000) 1.935476511s ago: executing program 8 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\x9d\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad', 0x4) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000040801080000010000000000030000003c0004800800010000000000000001400800000008000140000000020800024000000001400000000408000140ffffffff00"/80], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) 1.905698441s ago: executing program 7 (id=2147): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x0, 0x20002, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r3, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, r3, 0x3}, 0x50) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x8801) getpgid(r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) eventfd2(0x3, 0x1) 1.872080936s ago: executing program 3 (id=2148): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x4, 0x84) connect$inet(r0, &(0x7f0000000300)={0x2, 0x6e21, @empty}, 0x2e) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40045}], 0x1, 0x4081) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x10, 0x700, 0x4, 0x1000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}}}}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff, 0x4, 0xfffffffc}}, 0x2e) close(r5) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x3, 0x9c, 0x5, 0x7, 0x16, "8ff965b3cdad1842c2fb9a8fafd54709d99229"}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x401, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000005280)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="390000004248cf2b0805b71a1735dc617a843063e95dae165a821042ee96329a3da5cb179a5e52c55db5d362c308bfd203be28915246d437dec1f4958e646bde42c0095e3df2c75cf55934fd8ff0f70256eb5c95fc6ad2c3cb3f6fef0107d150a357ff673a169ab497599644f25989210e7f6d22a9f91fc4a2acefd4a77bf3ad8c1dbba1b6eb5b958a4b", @ANYRES16=r9, @ANYBLOB="100025bd7000fddbdf253b00000004006c00040087001400cd000800000000800e0007000500ffff0c0004008e00"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x84) 1.790115003s ago: executing program 7 (id=2149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060088470000100002"], 0x34}, 0x1, 0x0, 0x0, 0x24009001}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmsg$inet6(r4, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) (async) sendmsg$nl_route(r7, 0x0, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d0000000000000000020010000e1bc4c233c12eee08001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800090300000000000000001ecf"], 0x24}}, 0x20000000) write$tcp_mem(r6, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) 1.68594277s ago: executing program 5 (id=2150): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="f30fc7b6a570494366baf80cb8bcc9fd8fef66bafc0ced2e26420fc7a800000000b9570b0000b800b0ffffbaffffffff0f30663e260f219bc744240021010000c7442402ad1da870ff1c2465640fc76c09cbc421db51bc6d0d00000042dcf9c4e13158f4", 0x64}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002d40)={0x0, [{0x3, 0x38, 0x3, &(0x7f00000004c0)="16d3926d3ae4d0"}, {0x0, 0x0, 0x4, 0x0}, {0x491f8c73f0741c88, 0x0, 0xffffffff, 0x0}, {0x3, 0x0, 0x5b7f, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff4, 0x0}, {0x3, 0x0, 0x834, 0x0}, {0x0, 0x0, 0x1f983878, 0x0}, {0x1, 0x0, 0x7bf, 0x0}, {0x7, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x400, 0x0}]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00_'], 0x20}], 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x2ee, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000240)={r6, 0x8, 0x1, 0xe, 0x635b, 0x0, 0x7, 0xbba1, {r6, @in={{0x2, 0x4e21, @empty}}, 0x8000, 0x8e54, 0xe4a, 0x10000, 0xe7}}, &(0x7f0000000300)=0xb0) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {0x1}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x100, 0xaa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x1, 0x2, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./file0\x00', r9, &(0x7f0000000140)='./file0\x00') readlinkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657668696d3000001cea8100736f757263655f6d61635f69735f6d756c7469636173740005008300010000004f55fc9b9daadbf40f6613b42590a78656c47a56a426bed97bddaced26c4004062761a100fed2f1e55b9e0ab5490af19c1581cb059eaa487c66f40ca"], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) 1.619676187s ago: executing program 6 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) fanotify_init(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000100)={r2}, 0x1) r4 = gettid() ptrace$peeksig(0x4209, r4, &(0x7f0000000240)={0x2, 0x0, 0x8}, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}]) ftruncate(r3, 0x51a9497) r5 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) syslog(0x4, 0x0, 0x0) syslog(0x3, &(0x7f0000002d00)=""/147, 0x93) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) 1.245870335s ago: executing program 3 (id=2152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000a) rt_tgsigqueueinfo(r0, r0, 0x31, &(0x7f0000005740)={0x2f, 0x1, 0xe0bb85b1}) (async) rt_tgsigqueueinfo(r0, r0, 0x31, &(0x7f0000005740)={0x2f, 0x1, 0xe0bb85b1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0x7f, &(0x7f0000000540)={0x0, 0x2bce, 0x8000, 0x1, 0x313}, 0x0, &(0x7f0000000180)) (async) r1 = syz_io_uring_setup(0x7f, &(0x7f0000000540)={0x0, 0x2bce, 0x8000, 0x1, 0x313}, 0x0, &(0x7f0000000180)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x121600) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x121600) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xc, 0x48001) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000640)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="24000000010006", 0x7) r6 = io_uring_setup(0x636d, &(0x7f00000004c0)={0x0, 0xca2c, 0x2, 0x0, 0x2f0, 0x0, r1}) syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000040), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000040), 0x0}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000640)=[0xa181], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000640)=[0xa181], 0x2) syz_io_uring_submit(0x0, r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.239956218s ago: executing program 5 (id=2153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x6, 0x3, 0x7, 0x1000, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000003c0)={r7, 0x3}, &(0x7f0000000440)=0x8) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x8f3, 0x80, 0x37974643, 0xf, 0x1000, 0xce60, 0x1002, 0x0, 0x2, 0x201, 0x1, 0x2372, 0xffffffffffffff00, 0xffffffffffffff00, 0x6, 0x400020], 0xeeff4000, 0x216155}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001800010025bd6300fbdbdf25021414f80002ff090008000008000400", @ANYRES32=r11, @ANYBLOB="08001e0040000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0x20}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r15, 0x4080aebf, &(0x7f0000000540)=@svm={0x1, 0x1, 0x1080, {}, {"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"}}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.235349486s ago: executing program 7 (id=2154): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) close_range(r3, 0xffffffffffffffff, 0x0) 939.005743ms ago: executing program 6 (id=2155): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_usb_connect(0x5, 0x34, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)={[{'lock'}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x39a8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x44, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'gretap\x00'}]}]}]}]}, 0x44}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x2d, 0x2eb, 0x20000, 0x4, 0x9, 0x3, 0x2, 0x0, 0x0, 0x1, 0xd}}, 0x50) landlock_restrict_self(0xffffffffffffffff, 0x4) r7 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x5, 0x80, 0xc, @loopback, @remote, 0x7, 0x80, 0x2, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r8, 0x25, 0x9, @void}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) 223.884714ms ago: executing program 7 (id=2156): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, 0x0, 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000809000000000000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) 191.081592ms ago: executing program 3 (id=2157): r0 = io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x80) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r1, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 82.692896ms ago: executing program 5 (id=2158): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000080)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000080)=0x84) setresuid(0x0, 0xee00, 0x0) (async) setresuid(0x0, 0xee00, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) setresuid(r4, 0x0, r5) mlockall(0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xde}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x78}}, 0x24040080) r7 = syz_open_procfs(r3, &(0x7f0000000140)='numa_maps\x00') chdir(&(0x7f0000000340)='./file0\x00') (async) chdir(&(0x7f0000000340)='./file0\x00') ioctl$UI_DEV_CREATE(r7, 0x5501) 0s ago: executing program 3 (id=2159): unshare(0x2020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00300, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) kernel console output (not intermixed with test programs): for pid=12803 comm="syz.3.1549" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 528.117248][T12744] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.186749][T12744] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.205599][T12744] bridge_slave_0: entered allmulticast mode [ 528.244505][T12744] bridge_slave_0: entered promiscuous mode [ 528.262345][T12744] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.273596][T12744] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.292880][T12820] overlayfs: failed to resolve './file0': -2 [ 528.355604][T12744] bridge_slave_1: entered allmulticast mode [ 528.542272][T12744] bridge_slave_1: entered promiscuous mode [ 528.791394][ T150] batadv0: left promiscuous mode [ 528.825303][ T5811] Bluetooth: hci3: command tx timeout [ 528.847483][ T150] hsr_slave_0: left promiscuous mode [ 528.873600][ T150] hsr_slave_1: left promiscuous mode [ 528.907666][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.935589][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.964402][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.983249][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.992104][ T150] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 528.999667][ T150] batman_adv: batadv0: Removing interface: ipvlan2 [ 529.010107][ T150] veth1_macvtap: left promiscuous mode [ 529.015665][ T150] veth0_macvtap: left promiscuous mode [ 529.021472][ T150] veth1_vlan: left promiscuous mode [ 529.027786][ T150] veth0_vlan: left promiscuous mode [ 529.180433][ T9801] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 529.342049][ T9801] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 529.364368][ T9801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.408253][ T9801] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 34 [ 529.449987][ T9801] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 529.473167][ T9801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.499659][ T9801] usb 6-1: config 0 descriptor?? [ 530.074958][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 530.087746][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 530.124655][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 530.350251][T12850] ceph: No mds server is up or the cluster is laggy [ 530.370866][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 530.390234][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 530.512014][ T150] team0 (unregistering): Port device team_slave_1 removed [ 530.543554][ T150] team0 (unregistering): Port device team_slave_0 removed [ 530.672528][ T29] audit: type=1400 audit(1771694172.397:1217): avc: denied { read } for pid=12861 comm="syz.4.1562" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 530.703910][ T29] audit: type=1400 audit(1771694172.417:1218): avc: denied { open } for pid=12861 comm="syz.4.1562" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 530.729494][ T29] audit: type=1400 audit(1771694172.417:1219): avc: denied { ioctl } for pid=12861 comm="syz.4.1562" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 530.861797][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 530.884782][T12744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.904536][ T5811] Bluetooth: hci3: command tx timeout [ 530.906097][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.933505][T12744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.031728][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.050575][ T9801] usbhid 6-1:0.0: can't add hid device: -71 [ 531.056630][ T9801] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 531.108327][ T9801] usb 6-1: USB disconnect, device number 65 [ 531.176091][T12744] team0: Port device team_slave_0 added [ 531.202151][T12744] team0: Port device team_slave_1 added [ 531.315917][T12744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.346913][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.375079][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 531.384739][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 531.461647][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 531.472419][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 531.486124][T12744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.570259][T12744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.609934][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.852633][T12744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.295175][ T150] IPVS: stop unused estimator thread 0... [ 532.365151][ T29] audit: type=1400 audit(1771694174.087:1220): avc: denied { create } for pid=12892 comm="syz.5.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 532.400157][T12744] hsr_slave_0: entered promiscuous mode [ 532.412515][T12744] hsr_slave_1: entered promiscuous mode [ 532.426762][T12744] debugfs: 'hsr0' already exists in 'hsr' [ 532.441330][T12744] Cannot create hsr debugfs directory [ 532.774117][T12908] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 532.981633][ T5811] Bluetooth: hci3: command tx timeout [ 534.136226][T12935] overlayfs: conflicting options: userxattr,redirect_dir=on [ 534.170902][T12934] overlayfs: conflicting options: userxattr,redirect_dir=on [ 534.359134][T12744] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 534.398586][T12744] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 534.443387][T12744] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 534.494870][T12744] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 534.646170][T12954] batman_adv: batadv0: Adding interface: ip6gretap1 [ 535.093044][T12954] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.156195][T12954] batman_adv: batadv0: Interface activated: ip6gretap1 [ 535.377484][T12744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.470748][T12744] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.484561][T12977] qnx4: no qnx4 filesystem (no root dir). [ 535.516292][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.523470][ T6004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.588851][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.596024][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.609605][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1584'. [ 535.621312][ T29] audit: type=1400 audit(1771694177.327:1221): avc: denied { nlmsg_read } for pid=12972 comm="syz.4.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 535.705705][ T29] audit: type=1400 audit(1771694177.407:1222): avc: denied { ioctl } for pid=12972 comm="syz.4.1584" path="socket:[44267]" dev="sockfs" ino=44267 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 536.331413][T12744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.714770][T13003] overlayfs: failed to resolve './bus': -2 [ 536.721473][ T29] audit: type=1400 audit(1771694178.377:1223): avc: denied { mounton } for pid=12981 comm="syz.5.1586" path="/file0" dev="ramfs" ino=45156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 537.245838][T12744] veth0_vlan: entered promiscuous mode [ 537.272784][T12744] veth1_vlan: entered promiscuous mode [ 537.319890][T12744] veth0_macvtap: entered promiscuous mode [ 537.350292][T12744] veth1_macvtap: entered promiscuous mode [ 537.370658][T12744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.372788][ T5817] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 537.386246][T12744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.436163][ T9103] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.458339][ T9103] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.490294][ T9103] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.505156][ T9103] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.540444][ T5817] usb 7-1: Using ep0 maxpacket: 32 [ 537.573585][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.599057][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.609346][ T5817] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 537.620135][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.637872][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.640274][ T5817] usb 7-1: config 0 descriptor?? [ 537.651022][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.663534][ T29] audit: type=1400 audit(1771694179.387:1224): avc: denied { listen } for pid=13017 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 537.681093][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.693599][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.737792][ T29] audit: type=1400 audit(1771694179.457:1225): avc: denied { accept } for pid=13017 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 538.846162][ T29] audit: type=1400 audit(1771694180.217:1226): avc: denied { create } for pid=13025 comm="syz.7.1537" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.899167][ T5817] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 538.906562][ T5817] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 538.970025][ T29] audit: type=1400 audit(1771694180.227:1227): avc: denied { write } for pid=13025 comm="syz.7.1537" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.974348][ T5817] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 538.994801][ T29] audit: type=1400 audit(1771694180.227:1228): avc: denied { open } for pid=13025 comm="syz.7.1537" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.487261][ T5817] ft260 0003:0403:6030.0013: failed to retrieve system status [ 539.495819][ T5817] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -71 [ 539.515790][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 539.553018][ T9783] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 539.593840][ T29] audit: type=1400 audit(1771694180.237:1229): avc: denied { ioctl } for pid=13025 comm="syz.7.1537" path="/0/file0" dev="tmpfs" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.629319][T13049] netlink: 'syz.6.1598': attribute type 2 has an invalid length. [ 539.642965][ T29] audit: type=1400 audit(1771694180.617:1230): avc: denied { unlink } for pid=12744 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.800406][ T9783] usb 5-1: Using ep0 maxpacket: 16 [ 539.801820][ T5817] usb 7-1: USB disconnect, device number 5 [ 540.460320][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1599'. [ 540.472769][T13054] IPv6: NLM_F_CREATE should be specified when creating new route [ 540.499217][ T9783] usb 5-1: config 0 has no interfaces? [ 540.572541][ T9783] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.584273][ T9783] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.631548][ T9783] usb 5-1: Manufacturer: syz [ 540.692484][ T9783] usb 5-1: config 0 descriptor?? [ 540.736946][T13050] xt_hashlimit: size too large, truncated to 1048576 [ 542.294576][ T29] audit: type=1400 audit(1771694183.897:1231): avc: denied { name_connect } for pid=13069 comm="syz.6.1604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 542.476131][ T29] audit: type=1400 audit(1771694184.157:1232): avc: denied { unmount } for pid=6840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 544.640776][ T29] audit: type=1400 audit(1771694186.357:1233): avc: denied { create } for pid=13107 comm="syz.6.1611" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 544.679874][ T29] audit: type=1400 audit(1771694186.397:1234): avc: denied { write } for pid=13107 comm="syz.6.1611" name="file0" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 544.800651][ T29] audit: type=1400 audit(1771694186.397:1235): avc: denied { open } for pid=13107 comm="syz.6.1611" path="/48/file0" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 544.863835][ T9783] usb 5-1: USB disconnect, device number 63 [ 545.342970][ T5811] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 545.354659][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.354692][ T5811] Tainted: [L]=SOFTLOCKUP [ 545.354698][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.354709][ T5811] Workqueue: hci2 hci_rx_work [ 545.354744][ T5811] Call Trace: [ 545.354750][ T5811] [ 545.354757][ T5811] dump_stack_lvl+0x100/0x190 [ 545.354788][ T5811] sysfs_warn_dup.cold+0x1c/0x28 [ 545.354813][ T5811] sysfs_create_dir_ns+0x24b/0x2b0 [ 545.354838][ T5811] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.354862][ T5811] ? find_held_lock+0x2b/0x80 [ 545.354883][ T5811] ? kobject_add_internal+0x25f/0x930 [ 545.354903][ T5811] ? kobject_add_internal+0x25f/0x930 [ 545.354924][ T5811] ? do_raw_spin_unlock+0x145/0x1e0 [ 545.354943][ T5811] kobject_add_internal+0x2c8/0x930 [ 545.354967][ T5811] kobject_add+0x16a/0x1e0 [ 545.354985][ T5811] ? __pfx_kobject_add+0x10/0x10 [ 545.355004][ T5811] ? class_to_subsys+0x10f/0x150 [ 545.355028][ T5811] ? kobject_put+0xb9/0x640 [ 545.355039][ T5811] ? _raw_spin_unlock+0x28/0x50 [ 545.355059][ T5811] device_add+0x294/0x1950 [ 545.355074][ T5811] ? __pfx_dev_set_name+0x10/0x10 [ 545.355091][ T5811] ? __pfx_device_add+0x10/0x10 [ 545.355106][ T5811] ? mgmt_send_event_skb+0x2fb/0x460 [ 545.355126][ T5811] hci_conn_add_sysfs+0x1a3/0x260 [ 545.355138][ T5811] le_conn_complete_evt+0x11cb/0x1f40 [ 545.355158][ T5811] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.355178][ T5811] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 545.355196][ T5811] ? skb_pull_data+0x15f/0x1e0 [ 545.355212][ T5811] hci_le_meta_evt+0x34a/0x5f0 [ 545.355229][ T5811] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.355248][ T5811] hci_event_packet+0x682/0x11c0 [ 545.355264][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.355282][ T5811] ? __pfx_hci_event_packet+0x10/0x10 [ 545.355299][ T5811] ? kcov_remote_start+0x374/0x660 [ 545.355314][ T5811] ? lockdep_hardirqs_on+0x78/0x100 [ 545.355330][ T5811] hci_rx_work+0x451/0xfc0 [ 545.355349][ T5811] process_one_work+0x9d7/0x1920 [ 545.355367][ T5811] ? __pfx_process_one_work+0x10/0x10 [ 545.355384][ T5811] ? __pfx_hci_rx_work+0x10/0x10 [ 545.355407][ T5811] worker_thread+0x5da/0xe40 [ 545.355425][ T5811] ? kthread+0x13a/0x450 [ 545.355435][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 545.355446][ T5811] kthread+0x370/0x450 [ 545.355456][ T5811] ? __pfx_kthread+0x10/0x10 [ 545.355468][ T5811] ret_from_fork+0x754/0xd80 [ 545.355481][ T5811] ? __pfx_ret_from_fork+0x10/0x10 [ 545.355493][ T5811] ? rcu_is_watching+0x12/0xc0 [ 545.355508][ T5811] ? __switch_to+0x7b4/0x1120 [ 545.355523][ T5811] ? __pfx_kthread+0x10/0x10 [ 545.355534][ T5811] ret_from_fork_asm+0x1a/0x30 [ 545.355556][ T5811] [ 545.358046][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 545.590412][ T5811] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.622368][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 545.627277][ T5811] Bluetooth: hci2: failed to register connection device [ 545.696714][T13114] ceph: No mds server is up or the cluster is laggy [ 545.957328][T13125] misc userio: Invalid payload size [ 545.963363][T13125] misc userio: No port type given on /dev/userio [ 546.017972][T13127] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 546.026010][T13127] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1615'. [ 546.294907][T13127] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1615'. [ 546.318479][T13127] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 546.363843][T13127] netlink: 634 bytes leftover after parsing attributes in process `syz.3.1615'. [ 546.385969][T13132] syzkaller0: entered promiscuous mode [ 546.391668][T13132] syzkaller0: entered allmulticast mode [ 548.861482][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1625'. [ 550.408458][T13187] XFS (nullb0): Invalid superblock magic number [ 550.458043][ T29] audit: type=1400 audit(1771694192.167:1236): avc: denied { map } for pid=13192 comm="syz.5.1629" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 551.047337][ T5915] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 551.208289][ T5915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 551.232113][ T5915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 256 [ 551.265903][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.319146][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.334034][ T5915] usb 5-1: Product: syz [ 551.340591][ T5915] usb 5-1: Manufacturer: ﶥ墬ㄨକéŒìŸ¦ë¦²î“ˆìº«ê©©á¶‹ê›–ꧢ峆 [ 551.348567][ T5915] usb 5-1: SerialNumber: syz [ 551.389531][ T29] audit: type=1400 audit(1771694192.167:1237): avc: denied { execute } for pid=13192 comm="syz.5.1629" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 551.511863][T13218] bridge0: entered promiscuous mode [ 551.532689][T13218] bridge0: port 3(vlan2) entered blocking state [ 551.557327][T13218] bridge0: port 3(vlan2) entered disabled state [ 551.577040][T13218] vlan2: entered allmulticast mode [ 551.582688][T13201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 551.590083][T13201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 551.607295][T13218] bridge0: entered allmulticast mode [ 551.632555][T13218] vlan2: left allmulticast mode [ 551.643887][T13218] bridge0: left allmulticast mode [ 551.655541][T13218] bridge0: left promiscuous mode [ 551.766011][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.792932][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.036743][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.047343][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.129840][ T5915] cdc_ncm 5-1:1.0: bind() failure [ 552.168706][ T5915] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 552.183677][ T5915] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 552.193051][ T5915] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 552.222971][ T5915] usb 5-1: USB disconnect, device number 64 [ 552.230946][ T9783] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 552.437763][ T9783] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 552.485719][ T9783] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.523652][ T9783] usb 8-1: Product: syz [ 552.539143][ T9783] usb 8-1: Manufacturer: syz [ 552.549131][ T9783] usb 8-1: SerialNumber: syz [ 553.460608][ T9783] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 553.538245][ T5817] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 553.563553][T13262] random: crng reseeded on system resumption [ 553.569748][ T29] audit: type=1400 audit(1771694195.277:1238): avc: denied { append } for pid=13252 comm="syz.4.1638" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 553.604104][ T9783] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 553.632133][ T29] audit: type=1400 audit(1771694195.287:1239): avc: denied { open } for pid=13252 comm="syz.4.1638" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 554.080427][ T5817] usb 7-1: Using ep0 maxpacket: 8 [ 554.091844][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short [ 554.629154][ T5817] usb 7-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 554.699763][ T5817] usb 7-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 554.747787][ T5817] usb 7-1: config 12 interface 0 has no altsetting 0 [ 554.781095][ T5817] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 554.809116][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.835394][ T5817] usb 7-1: Product: syz [ 554.851228][ T5817] usb 7-1: Manufacturer: syz [ 554.867524][ T29] audit: type=1400 audit(1771694196.587:1240): avc: denied { mounton } for pid=13289 comm="syz.3.1645" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.869511][ T5817] usb 7-1: SerialNumber: syz [ 554.892309][ T5811] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 555.360484][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1647'. [ 555.635004][T13303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13303 comm=syz.3.1647 [ 556.152438][ T29] audit: type=1400 audit(1771694197.027:1241): avc: denied { write } for pid=13263 comm="syz.6.1641" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 557.102934][ T5817] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.109944][ T5817] usb 7-1: selecting invalid altsetting 0 [ 557.299343][ T9783] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 557.373939][ T9783] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 557.421843][ T9783] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 557.560729][ T9783] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 558.012498][ T9783] usb 8-1: USB disconnect, device number 2 [ 558.046547][ T5817] snd-usb-audio 7-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 558.112613][ T5817] usb 7-1: USB disconnect, device number 6 [ 558.145079][T13320] fuse: Bad value for 'fd' [ 558.167493][ T7983] udevd[7983]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.412355][T13343] lo speed is unknown, defaulting to 1000 [ 559.419812][T13343] lo speed is unknown, defaulting to 1000 [ 559.434727][T13343] lo speed is unknown, defaulting to 1000 [ 559.501987][T13343] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 559.625096][T13343] lo speed is unknown, defaulting to 1000 [ 559.641166][T13343] lo speed is unknown, defaulting to 1000 [ 559.657304][T13343] lo speed is unknown, defaulting to 1000 [ 559.671196][T13343] lo speed is unknown, defaulting to 1000 [ 559.684595][T13343] lo speed is unknown, defaulting to 1000 [ 560.173850][ T29] audit: type=1400 audit(1771694201.887:1242): avc: denied { setcurrent } for pid=13348 comm="syz.5.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 560.350736][ T5811] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 560.350912][ T5814] Bluetooth: hci3: command 0x206a tx timeout [ 560.984487][T13322] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 561.112165][ T29] audit: type=1401 audit(1771694201.897:1243): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 561.131657][ T29] audit: type=1400 audit(1771694202.547:1244): avc: denied { read } for pid=13346 comm="syz.3.1655" lport=39734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 561.395821][T13367] kAFS: No cell specified [ 561.740412][ T9802] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 561.797074][T13376] loop5: detected capacity change from 0 to 7 [ 561.806635][T13376] Dev loop5: unable to read RDB block 7 [ 561.813161][T13376] loop5: AHDI p1 p2 p3 [ 561.818263][T13376] loop5: partition table partially beyond EOD, truncated [ 561.827438][T13376] loop5: p1 start 1601398130 is beyond EOD, truncated [ 561.834450][T13376] loop5: p2 start 1702059890 is beyond EOD, truncated [ 562.018815][ T9802] usb 8-1: unable to get BOS descriptor or descriptor too short [ 562.060030][ T29] audit: type=1400 audit(1771694203.777:1245): avc: denied { ioctl } for pid=13377 comm="syz.4.1664" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 562.090117][ T9802] usb 8-1: not running at top speed; connect to a high speed hub [ 562.136259][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 562.142741][ T9802] usb 8-1: config 2 has an invalid interface number: 212 but max is 1 [ 562.157978][ T9802] usb 8-1: config 2 has an invalid interface number: 226 but max is 1 [ 562.171666][T13381] FAULT_INJECTION: forcing a failure. [ 562.171666][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 562.180432][ T9802] usb 8-1: config 2 has no interface number 0 [ 562.190492][ T9802] usb 8-1: config 2 has no interface number 1 [ 562.196599][ T9802] usb 8-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 562.216214][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.5.1665 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.216247][T13381] Tainted: [L]=SOFTLOCKUP [ 562.216253][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.216263][T13381] Call Trace: [ 562.216269][T13381] [ 562.216276][T13381] dump_stack_lvl+0x100/0x190 [ 562.216310][T13381] should_fail_ex.cold+0x5/0xa [ 562.216333][T13381] ? nvram_misc_read+0x81/0x190 [ 562.216350][T13381] should_failslab+0xc2/0x120 [ 562.216377][T13381] __kmalloc_noprof+0xe0/0x850 [ 562.216404][T13381] nvram_misc_read+0x81/0x190 [ 562.216421][T13381] ? __pfx_nvram_misc_read+0x10/0x10 [ 562.216440][T13381] vfs_read+0x1e4/0xb30 [ 562.216468][T13381] ? __pfx_vfs_read+0x10/0x10 [ 562.216490][T13381] ? find_held_lock+0x2b/0x80 [ 562.216511][T13381] ? __fget_files+0x215/0x3d0 [ 562.216527][T13381] ? __fget_files+0x215/0x3d0 [ 562.216547][T13381] ? __fget_files+0x21f/0x3d0 [ 562.216570][T13381] ksys_read+0x12a/0x250 [ 562.216594][T13381] ? __pfx_ksys_read+0x10/0x10 [ 562.216624][T13381] do_syscall_64+0x106/0xf80 [ 562.216642][T13381] ? clear_bhb_loop+0x40/0x90 [ 562.216663][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.216682][T13381] RIP: 0033:0x7f34eb79c629 [ 562.216698][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.216714][T13381] RSP: 002b:00007f34e99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.216732][T13381] RAX: ffffffffffffffda RBX: 00007f34eba15fa0 RCX: 00007f34eb79c629 [ 562.216743][T13381] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003 [ 562.216753][T13381] RBP: 00007f34e99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.216763][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.216772][T13381] R13: 00007f34eba16038 R14: 00007f34eba15fa0 R15: 00007ffe9b6bd608 [ 562.216796][T13381] [ 562.230456][ T9802] usb 8-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 562.425593][ T9802] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 562.436984][ T9802] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64 [ 562.448651][ T9802] usb 8-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.461782][ T9802] usb 8-1: config 2 interface 212 has no altsetting 0 [ 562.470770][ T9802] usb 8-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 562.479821][ T9802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.488035][ T9802] usb 8-1: Product: syz [ 562.492374][ T9802] usb 8-1: Manufacturer: syz [ 562.497020][ T9802] usb 8-1: SerialNumber: syz [ 562.537987][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 563.108894][ T9802] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.226/input/input32 [ 563.185323][ T9802] usb 8-1: USB disconnect, device number 3 [ 563.191514][ C1] xpad 8-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 563.311871][T13409] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 563.473621][ T29] audit: type=1400 audit(1771694205.197:1246): avc: denied { write } for pid=13410 comm="syz.5.1675" lport=52440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 563.539967][ T29] audit: type=1400 audit(1771694205.197:1247): avc: denied { setopt } for pid=13410 comm="syz.5.1675" lport=52440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 564.120437][ T9802] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 564.183363][ T29] audit: type=1400 audit(1771694205.907:1248): avc: denied { write } for pid=13425 comm="syz.6.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 564.281831][ T9802] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.297062][ T9802] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.307544][ T9802] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 564.322203][ T9802] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.333036][ T9802] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.359663][ T9802] usb 8-1: config 0 descriptor?? [ 564.540693][ T5920] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 564.601094][ T29] audit: type=1326 audit(1771694206.327:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.1683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34eb79c629 code=0x0 [ 564.750950][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 564.784925][ T5920] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 564.824905][ T5920] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 564.903453][ T5920] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.966334][ T5920] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 565.021219][ T9802] usbhid 8-1:0.0: can't add hid device: -71 [ 565.023913][ T5920] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 565.030871][ T9802] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 565.057961][ T9802] usb 8-1: USB disconnect, device number 4 [ 565.068652][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.079427][ T5920] usb 5-1: Product: syz [ 565.084102][ T5920] usb 5-1: Manufacturer: syz [ 565.088806][ T5920] usb 5-1: SerialNumber: syz [ 565.107827][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 565.126251][ T5920] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input33 [ 566.070419][ T5920] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 566.078798][ T5920] (id 0x00) [ 566.370717][ T5875] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 566.426542][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.435152][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.462319][ T5920] rc_core: IR keymap rc-imon-pad not found [ 566.473800][ T5920] Registered IR keymap rc-empty [ 566.520069][ T5920] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 566.531706][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 566.542984][ T5920] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 566.558317][ T5875] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 566.696800][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.761829][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.864550][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 566.904307][ T29] audit: type=1400 audit(1771694208.627:1250): avc: denied { write } for pid=13464 comm="syz.7.1688" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 566.904339][ T5875] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 566.904365][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.962442][ T29] audit: type=1400 audit(1771694208.627:1251): avc: denied { open } for pid=13464 comm="syz.7.1688" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 567.080685][ T5875] usb 6-1: config 0 descriptor?? [ 567.211217][ T9783] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 567.391693][ T9783] usb 8-1: Using ep0 maxpacket: 8 [ 567.406855][ T9783] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.420681][ T9783] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.438915][ T9783] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.449718][ T9783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.466981][ T9783] usbtmc 8-1:16.0: bulk endpoints not found [ 567.526735][ T5875] itetech 0003:258A:6A88.0014: unbalanced collection at end of report description [ 567.534126][ T5920] imon:send_packet: packet tx failed (-71) [ 567.550739][ T5875] itetech 0003:258A:6A88.0014: probe with driver itetech failed with error -22 [ 567.567476][ T5920] imon 5-1:155.0: remote input dev register failed [ 567.577064][ T5920] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 567.633532][ T5920] imon 5-1:155.0: unable to initialize intf0, err 0 [ 567.665411][ T5920] imon:imon_probe: failed to initialize context! [ 567.670433][ T9802] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 567.689354][ T5920] imon 5-1:155.0: unable to register, err -19 [ 567.737321][ T5920] usb 5-1: USB disconnect, device number 65 [ 567.811883][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.820536][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.843623][ T9802] usb 7-1: Using ep0 maxpacket: 16 [ 567.859753][ T9802] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 567.878783][ T9802] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.902976][ T9802] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.920429][ T9802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.938944][ T9802] usb 7-1: Product: syz [ 567.949482][ T9802] usb 7-1: Manufacturer: syz [ 567.962313][ T9802] usb 7-1: SerialNumber: syz [ 568.017838][ T29] audit: type=1400 audit(1771694209.737:1252): avc: denied { ioctl } for pid=13464 comm="syz.7.1688" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 568.079557][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 568.124180][T13481] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 568.158087][T13481] team0: Port device batadv1 added [ 568.188343][T13472] veth0_vlan: entered allmulticast mode [ 568.196777][T13472] veth0_vlan: left allmulticast mode [ 568.209415][ T9802] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 568.258281][ T9802] usb 7-1: USB disconnect, device number 7 [ 568.303314][T11614] udevd[11614]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.327595][T13485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=13485 comm=syz.3.1694 [ 569.232253][ T5920] usb 6-1: USB disconnect, device number 66 [ 569.595728][T13503] netlink: 'syz.5.1699': attribute type 1 has an invalid length. [ 570.189599][T13503] bond4: entered promiscuous mode [ 570.197978][T13503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.246221][ T9783] usb 8-1: USB disconnect, device number 5 [ 570.494587][ T29] audit: type=1400 audit(1771694212.197:1253): avc: denied { ioctl } for pid=13508 comm="syz.6.1700" path="socket:[46305]" dev="sockfs" ino=46305 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.664923][T13521] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1701'. [ 571.330832][ T9802] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 571.586582][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1706'. [ 571.811467][ T29] audit: type=1400 audit(1771694213.537:1254): avc: granted { setsecparam } for pid=13536 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 571.820403][ T9802] usb 7-1: Using ep0 maxpacket: 32 [ 571.893268][ T9802] usb 7-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 571.925452][ T9802] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 571.941017][ T9801] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 571.941844][ T29] audit: type=1400 audit(1771694213.647:1255): avc: denied { name_bind } for pid=13540 comm="syz.5.1709" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 572.043908][ T9802] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 572.090736][ T9802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.109928][ T9802] usb 7-1: Product: syz [ 572.120620][ T9802] usb 7-1: Manufacturer: syz [ 572.133254][ T9801] usb 5-1: device descriptor read/64, error -71 [ 572.139917][ T9802] usb 7-1: SerialNumber: syz [ 572.151033][ T9783] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 572.182818][ T9802] usb 7-1: config 0 descriptor?? [ 572.300707][ T9783] usb 8-1: Using ep0 maxpacket: 16 [ 572.321168][ T9783] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.337395][ T9783] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.356688][ T29] audit: type=1400 audit(1771694214.077:1256): avc: denied { create } for pid=13551 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 572.385234][ T9783] usb 8-1: config 0 interface 0 has no altsetting 0 [ 572.390462][ T9801] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 572.405606][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 572.417894][ T9783] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 572.436710][ T9783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.445876][ T29] audit: type=1400 audit(1771694214.117:1257): avc: denied { write } for pid=13551 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 572.495799][ T9783] usb 8-1: config 0 descriptor?? [ 572.540480][ T9801] usb 5-1: device descriptor read/64, error -71 [ 572.671718][ T9801] usb usb5-port1: attempt power cycle [ 572.780116][ T29] audit: type=1326 audit(1771694214.497:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13559 comm="syz.3.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c06d9c629 code=0x7ffc0000 [ 572.842674][ T29] audit: type=1326 audit(1771694214.497:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13559 comm="syz.3.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c06d9c629 code=0x7ffc0000 [ 572.944472][ T29] audit: type=1326 audit(1771694214.537:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13559 comm="syz.3.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c06d9c629 code=0x7ffc0000 [ 572.982975][ T29] audit: type=1326 audit(1771694214.537:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13559 comm="syz.3.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c06d9c629 code=0x7ffc0000 [ 572.986537][ T9783] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 573.030435][ T9801] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 573.063568][ T9801] usb 5-1: device descriptor read/8, error -71 [ 573.950434][ T9801] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 574.165455][ T9801] usb 5-1: device descriptor read/8, error -71 [ 574.187980][ T9802] usb 7-1: USB disconnect, device number 8 [ 574.348303][ T9801] usb usb5-port1: unable to enumerate USB device [ 574.533333][ T5875] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 574.947060][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 574.947190][ T29] audit: type=1400 audit(1771694216.667:1281): avc: denied { bind } for pid=13602 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 574.979677][T13607] bond0: (slave gre0): Error: Device can not be enslaved while up [ 575.551489][ T9802] usb 8-1: USB disconnect, device number 6 [ 576.923585][T13619] kAFS: unable to lookup cell '(,c¾ûL' [ 577.292758][ T29] audit: type=1400 audit(1771694218.987:1282): avc: denied { mount } for pid=13625 comm="syz.7.1724" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 577.934277][ T29] audit: type=1400 audit(1771694219.637:1283): avc: denied { search } for pid=13625 comm="syz.7.1724" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 578.098018][ T29] audit: type=1400 audit(1771694219.817:1284): avc: denied { map } for pid=13658 comm="syz.3.1732" path="socket:[47470]" dev="sockfs" ino=47470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 578.135382][T13660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1731'. [ 578.161288][ T29] audit: type=1400 audit(1771694219.817:1285): avc: denied { read } for pid=13658 comm="syz.3.1732" path="socket:[47470]" dev="sockfs" ino=47470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 578.658282][T13673] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 578.667805][T13673] overlayfs: missing 'lowerdir' [ 579.866950][T13681] xt_bpf: check failed: parse error [ 580.047192][ T29] audit: type=1400 audit(1771694221.767:1286): avc: denied { bind } for pid=13679 comm="syz.5.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 580.501242][T13683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 580.541509][ T29] audit: type=1326 audit(1771694222.267:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.4.1741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f96f9c629 code=0x0 [ 581.420810][ T29] audit: type=1400 audit(1771694223.097:1288): avc: denied { create } for pid=13719 comm="syz.4.1748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 581.965837][T13711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.341314][T13731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1749'. [ 582.360234][T13731] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 582.933622][ T5817] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 584.187539][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.197729][ T5817] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.206955][ T5817] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 584.216259][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.212316][ T5817] usb 5-1: config 0 descriptor?? [ 585.930605][ T5817] usb 5-1: can't set config #0, error -71 [ 585.983810][ T5817] usb 5-1: USB disconnect, device number 70 [ 586.322284][T13753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.191049][T13766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1756'. [ 589.577684][ T29] audit: type=1400 audit(1771694231.217:1289): avc: denied { write } for pid=13759 comm="syz.7.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 590.126078][ T7908] udevd[7908]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 590.163961][T11614] udevd[11614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 590.519629][ T5920] Process accounting resumed [ 591.672086][ T5920] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 591.961962][ T5920] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.972713][ T5920] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 592.000713][ T5920] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.035459][ T29] audit: type=1400 audit(1771694233.757:1290): avc: denied { getopt } for pid=13793 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 592.150628][ T5920] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 592.280549][ T5817] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 593.157373][ T5920] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.166617][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 593.178094][ T5920] usb 7-1: SerialNumber: syz [ 593.287641][ T5920] usb 7-1: can't set config #1, error -71 [ 593.308971][ T5920] usb 7-1: USB disconnect, device number 9 [ 593.739634][T13814] netlink: 212372 bytes leftover after parsing attributes in process `syz.5.1770'. [ 593.994206][ T29] audit: type=1400 audit(1771694235.717:1291): avc: denied { accept } for pid=13820 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 594.166699][T13827] usb usb1: usbfs: process 13827 (syz.5.1772) did not claim interface 5 before use [ 594.725173][ T29] audit: type=1326 audit(1771694235.877:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 594.975161][ T29] audit: type=1326 audit(1771694235.877:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.528496][ T29] audit: type=1326 audit(1771694235.877:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.580962][ T29] audit: type=1326 audit(1771694235.877:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.609507][ T29] audit: type=1326 audit(1771694235.877:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.664345][ T29] audit: type=1326 audit(1771694235.877:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.688222][ T29] audit: type=1326 audit(1771694235.877:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.750783][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 595.756784][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 595.782510][ T29] audit: type=1326 audit(1771694235.877:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.810681][T13835] ceph: No mds server is up or the cluster is laggy [ 595.846892][T13843] FAULT_INJECTION: forcing a failure. [ 595.846892][T13843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.918036][ T29] audit: type=1326 audit(1771694235.877:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 595.945724][ T29] audit: type=1326 audit(1771694235.877:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb79c629 code=0x7ffc0000 [ 596.050608][T13843] CPU: 0 UID: 0 PID: 13843 Comm: syz.7.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.050651][T13843] Tainted: [L]=SOFTLOCKUP [ 596.050657][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.050667][T13843] Call Trace: [ 596.050672][T13843] [ 596.050677][T13843] dump_stack_lvl+0x100/0x190 [ 596.050707][T13843] should_fail_ex.cold+0x5/0xa [ 596.050728][T13843] _copy_from_user+0x2e/0xd0 [ 596.050750][T13843] copy_msghdr_from_user+0x9f/0x4f0 [ 596.050773][T13843] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 596.050805][T13843] ___sys_sendmsg+0x106/0x1e0 [ 596.050827][T13843] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.050874][T13843] __sys_sendmsg+0x170/0x220 [ 596.050892][T13843] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.050924][T13843] do_syscall_64+0x106/0xf80 [ 596.050940][T13843] ? clear_bhb_loop+0x40/0x90 [ 596.050967][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.050985][T13843] RIP: 0033:0x7f721019c629 [ 596.051000][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.051016][T13843] RSP: 002b:00007f721106e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.051034][T13843] RAX: ffffffffffffffda RBX: 00007f7210415fa0 RCX: 00007f721019c629 [ 596.051045][T13843] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 596.051055][T13843] RBP: 00007f721106e090 R08: 0000000000000000 R09: 0000000000000000 [ 596.051066][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.051075][T13843] R13: 00007f7210416038 R14: 00007f7210415fa0 R15: 00007ffe20ea3738 [ 596.051099][T13843] [ 597.428808][ T5920] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 597.817042][T13869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1784'. [ 597.830438][T13869] random: crng reseeded on system resumption [ 598.767665][ T9802] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 599.830602][ T9802] usb 5-1: Using ep0 maxpacket: 16 [ 599.848718][ T9802] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.893443][ T9802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.936343][ T9802] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 599.952451][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'. [ 599.960586][ T9802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.982925][ T9802] usb 5-1: config 0 descriptor?? [ 600.705787][ T9802] usbhid 5-1:0.0: can't add hid device: -71 [ 600.712206][ T9802] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 600.725188][ T9802] usb 5-1: USB disconnect, device number 72 [ 600.923264][T13896] tmpfs: Unknown parameter 'mpo' [ 602.541112][T13909] FAULT_INJECTION: forcing a failure. [ 602.541112][T13909] name failslab, interval 1, probability 0, space 0, times 0 [ 602.570899][T13909] CPU: 1 UID: 0 PID: 13909 Comm: syz.4.1794 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.570928][T13909] Tainted: [L]=SOFTLOCKUP [ 602.570934][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.570942][T13909] Call Trace: [ 602.570948][T13909] [ 602.570955][T13909] dump_stack_lvl+0x100/0x190 [ 602.570987][T13909] should_fail_ex.cold+0x5/0xa [ 602.571010][T13909] should_failslab+0xc2/0x120 [ 602.571038][T13909] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 602.571062][T13909] ? __alloc_skb+0x140/0x710 [ 602.571093][T13909] __alloc_skb+0x140/0x710 [ 602.571117][T13909] ? __alloc_skb+0x5b7/0x710 [ 602.571142][T13909] ? __pfx___alloc_skb+0x10/0x10 [ 602.571173][T13909] netlink_alloc_large_skb+0x69/0x150 [ 602.571196][T13909] netlink_sendmsg+0x680/0xda0 [ 602.571219][T13909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.571237][T13909] ? PageHuge+0x170/0x180 [ 602.571270][T13909] ____sys_sendmsg+0xa54/0xc30 [ 602.571293][T13909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.571325][T13909] ___sys_sendmsg+0x190/0x1e0 [ 602.571349][T13909] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.571400][T13909] __sys_sendmsg+0x170/0x220 [ 602.571417][T13909] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.571448][T13909] do_syscall_64+0x106/0xf80 [ 602.571466][T13909] ? clear_bhb_loop+0x40/0x90 [ 602.571488][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.571506][T13909] RIP: 0033:0x7f3f96f9c629 [ 602.571523][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.571539][T13909] RSP: 002b:00007f3f97d9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.571557][T13909] RAX: ffffffffffffffda RBX: 00007f3f97215fa0 RCX: 00007f3f96f9c629 [ 602.571569][T13909] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 602.571580][T13909] RBP: 00007f3f97d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 602.571590][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.571600][T13909] R13: 00007f3f97216038 R14: 00007f3f97215fa0 R15: 00007ffdf0a2ce58 [ 602.571624][T13909] [ 603.152133][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 603.152148][ T29] audit: type=1400 audit(1771694244.867:1341): avc: denied { ioctl } for pid=13920 comm="syz.3.1797" path="socket:[48131]" dev="sockfs" ino=48131 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 603.519400][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1800'. [ 603.679285][T13932] tipc: Enabling of bearer rejected, failed to enable media [ 605.182849][ T29] audit: type=1400 audit(1771694246.897:1342): avc: denied { watch } for pid=13953 comm="syz.5.1806" path="/308/file0" dev="tmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 605.240400][ T29] audit: type=1400 audit(1771694246.897:1343): avc: denied { watch_sb watch_reads } for pid=13953 comm="syz.5.1806" path="/308/file0" dev="tmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 605.332882][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 605.423560][ T29] audit: type=1400 audit(1771694246.997:1344): avc: denied { name_bind } for pid=13949 comm="syz.4.1807" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 605.501064][ T9784] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 605.533983][T13963] overlay: ./file0 is not a directory [ 605.646566][T13963] syzkaller0: entered promiscuous mode [ 605.655031][T13963] syzkaller0: entered allmulticast mode [ 605.707045][ T9784] usb 6-1: Using ep0 maxpacket: 8 [ 605.760909][ T9784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.152852][ T9784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57637, setting to 1024 [ 606.198430][ T9784] usb 6-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 606.219607][T13974] loop5: detected capacity change from 0 to 7 [ 606.260718][ T9784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.331855][T13974] Dev loop5: unable to read RDB block 7 [ 606.337971][ T9784] usb 6-1: config 0 descriptor?? [ 606.386882][T13974] loop5: unable to read partition table [ 606.409261][T13974] loop5: partition table beyond EOD, truncated [ 606.469433][T13974] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.683943][T13979] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1813'. [ 606.936703][ T9784] logitech-djreceiver 0003:046D:C71C.0016: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.5-1/input0 [ 607.825856][ T9784] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 608.018062][ T5920] usb 6-1: USB disconnect, device number 67 [ 608.039841][ T9802] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 608.056181][ T9784] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 608.069160][ T9784] usb 7-1: config 0 has no interface number 0 [ 608.192099][ T9784] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 608.228016][ T9784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.273140][ T9784] usb 7-1: Product: syz [ 608.277342][ T9784] usb 7-1: Manufacturer: syz [ 608.284879][ T9784] usb 7-1: SerialNumber: syz [ 608.305335][ T9784] usb 7-1: config 0 descriptor?? [ 608.418395][ T9802] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 608.442896][ T9802] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 608.720047][ T9802] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.729342][ T9802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.176788][ T29] audit: type=1400 audit(1771694250.897:1345): avc: denied { execute } for pid=13982 comm="syz.6.1814" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 609.259647][T13996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1814'. [ 609.280622][T13985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 609.324202][ T9802] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.398004][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.442388][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.483732][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.511882][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.531384][T13996] sg_write: data in/out 16777180/36 bytes for SCSI command 0x69-- guessing data in; [ 609.531384][T13996] program syz.6.1814 not setting count and/or reply_len properly [ 609.708331][ T792] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 610.186841][ T9784] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 610.232560][ T9784] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 610.278298][ T9784] asix 7-1:0.251: probe with driver asix failed with error -5 [ 610.324497][ T9784] usb 7-1: USB disconnect, device number 11 [ 610.492077][ T792] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 610.550270][ T792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.580034][T14010] overlayfs: failed to clone upperpath [ 610.595251][ T792] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 610.615914][ T792] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.648703][ T792] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 610.667945][ T792] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 610.685191][ T792] usb 6-1: Product: syz [ 610.694290][ T792] usb 6-1: Manufacturer: syz [ 611.167061][T14000] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1819'. [ 611.186137][ T9784] usb 6-1: USB disconnect, device number 68 [ 611.410254][T14026] overlay: filesystem on ./file1 not supported [ 611.501727][ T792] usb 5-1: USB disconnect, device number 73 [ 611.536811][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 611.583927][ T29] audit: type=1400 audit(1771694253.307:1346): avc: denied { read } for pid=14029 comm="syz.4.1827" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 611.724841][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1829'. [ 611.747362][T14035] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 611.866075][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 611.873965][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 612.846487][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 612.853129][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 613.348084][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1834'. [ 613.361600][ T9784] libceph: connect (1)[c::]:6789 error -101 [ 613.367675][ T9784] libceph: mon0 (1)[c::]:6789 connect error [ 613.387444][T14058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1832'. [ 613.586463][T14058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.842142][ T9784] libceph: connect (1)[c::]:6789 error -101 [ 614.919721][T14037] ceph: No mds server is up or the cluster is laggy [ 614.929868][ T9784] libceph: mon0 (1)[c::]:6789 connect error [ 615.398913][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1840'. [ 615.524037][ T29] audit: type=1400 audit(1771694257.237:1347): avc: denied { ioctl } for pid=14077 comm="syz.6.1841" path="socket:[49456]" dev="sockfs" ino=49456 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 615.590406][ T29] audit: type=1400 audit(1771694257.267:1348): avc: denied { ioctl } for pid=14079 comm="syz.7.1842" path="socket:[49468]" dev="sockfs" ino=49468 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 615.621885][T14085] trusted_key: encrypted_key: master key parameter 'djàt' is invalid [ 615.635287][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1843'. [ 615.711292][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1843'. [ 616.287142][T14089] geneve4: entered promiscuous mode [ 616.307370][T14089] geneve4: entered allmulticast mode [ 616.459405][T14093] geneve4: entered promiscuous mode [ 616.469479][T14093] geneve4: entered allmulticast mode [ 616.790952][ T5915] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 617.437174][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1849'. [ 617.450994][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 617.462823][ T5915] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.471632][ T5915] usb 8-1: config 0 has no interface number 0 [ 617.491015][ T5915] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.548705][ T5915] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.586618][ T5915] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 617.608340][T14097] lo speed is unknown, defaulting to 1000 [ 617.617371][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.729850][ T5915] usb 8-1: config 0 descriptor?? [ 617.977509][ T5915] usbhid 8-1:0.1: can't add hid device: -71 [ 617.986825][ T5915] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 617.995247][ T5920] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 618.024616][ T5915] usb 8-1: USB disconnect, device number 7 [ 618.381300][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 618.399762][ T5920] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 618.427858][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.454967][ T5920] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.481503][T14126] kvm: pic: non byte write [ 618.490182][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.520040][ T5920] usb 7-1: Product: syz [ 618.530098][ T5920] usb 7-1: Manufacturer: syz [ 618.542621][ T5920] usb 7-1: SerialNumber: syz [ 618.816463][T14097] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1847'. [ 618.868408][T14100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.878756][T14100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.938944][ T29] audit: type=1400 audit(1771694260.657:1349): avc: denied { setopt } for pid=14096 comm="syz.6.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 619.009662][ T5920] usb 7-1: 0:2 : does not exist [ 619.020800][ T9802] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 619.050932][ T5920] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 619.084119][ T5920] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 619.104645][ T5920] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 619.128103][ T5920] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 619.228888][ T5920] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 619.253405][ T9802] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 619.300733][ T5920] usb 7-1: USB disconnect, device number 12 [ 619.378609][T11614] udevd[11614]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.628077][ T9802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 620.059240][ T5817] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 620.092992][ T9802] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 620.255046][ T9802] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 620.394350][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 620.406826][ T9802] usb 5-1: Product: syz [ 620.420975][ T5817] usb 6-1: config 0 has no interfaces? [ 620.426831][ T9802] usb 5-1: Manufacturer: syz [ 620.437881][ T9802] usb 5-1: SerialNumber: syz [ 620.448017][ T5817] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 620.464581][ T5817] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 620.473098][ T5817] usb 6-1: Manufacturer: syz [ 620.573488][ T9802] usb 5-1: config 0 descriptor?? [ 620.585551][ T5817] usb 6-1: config 0 descriptor?? [ 620.619941][ T9802] usb 5-1: selecting invalid altsetting 0 [ 620.685821][T14177] lo speed is unknown, defaulting to 1000 [ 620.806877][ T5920] IPVS: starting estimator thread 0... [ 620.857152][ T9802] usb 5-1: USB disconnect, device number 74 [ 620.900950][T14198] IPVS: using max 46 ests per chain, 110400 per kthread [ 621.028772][ T7905] udevd[7905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.080628][ T5817] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 621.103984][T14207] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 621.110525][T14207] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 621.134994][T14207] vhci_hcd vhci_hcd.0: Device attached [ 621.234312][ T5817] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 621.243865][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.254895][ T5817] usb 7-1: Product: syz [ 621.259882][ T5817] usb 7-1: Manufacturer: syz [ 621.269664][ T5817] usb 7-1: SerialNumber: syz [ 621.277904][ T5817] usb 7-1: config 0 descriptor?? [ 621.387496][T14209] vhci_hcd: connection closed [ 621.387659][ T9103] vhci_hcd vhci_hcd.7: stop threads [ 621.398285][ T9103] vhci_hcd vhci_hcd.7: release socket [ 621.404613][ T9103] vhci_hcd vhci_hcd.7: disconnect device [ 621.411609][ T5920] usb 48-1: SetAddress Request (2) to port 0 [ 621.421906][ T5920] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 621.505563][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1866'. [ 621.549218][T14200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14200 comm=syz.6.1866 [ 621.563418][ T5920] usb 48-1: enqueue for inactive port 0 [ 621.578899][ T29] audit: type=1400 audit(1771694263.297:1350): avc: denied { map } for pid=14199 comm="syz.6.1866" path="socket:[49838]" dev="sockfs" ino=49838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 621.682452][T14221] Device name cannot be null; rc = [-22] [ 621.984706][ T5920] usb usb48-port1: attempt power cycle [ 622.170715][ T5817] usb 7-1: Firmware version (0.0) predates our first public release. [ 622.178954][ T5817] usb 7-1: Please update to version 0.2 or newer [ 622.257403][ T9801] usb 6-1: USB disconnect, device number 69 [ 622.347042][ T5915] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 622.704933][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 622.762804][ T5920] usb usb48-port1: unable to enumerate USB device [ 622.817634][ T5915] usb 8-1: config 0 has no interfaces? [ 622.952997][T14232] lo speed is unknown, defaulting to 1000 [ 622.971409][ T5915] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 622.981680][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.039147][ T5915] usb 8-1: config 0 descriptor?? [ 623.470630][ T9801] usb 8-1: USB disconnect, device number 8 [ 624.172871][ T5915] usb 7-1: USB disconnect, device number 13 [ 624.265229][T14255] netlink: 'syz.4.1875': attribute type 21 has an invalid length. [ 624.290551][T14255] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.324861][ T29] audit: type=1400 audit(1771694266.047:1351): avc: denied { setattr } for pid=14253 comm="syz.6.1877" name="PNPIPE" dev="sockfs" ino=48866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 624.493632][T14264] netlink: 'syz.5.1880': attribute type 21 has an invalid length. [ 624.501625][T14264] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.654317][T14264] netlink: 'syz.5.1880': attribute type 10 has an invalid length. [ 624.762714][T14264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 624.818911][ T29] audit: type=1400 audit(1771694266.537:1352): avc: denied { mounton } for pid=14263 comm="syz.5.1880" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 626.601733][T14293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.692029][T14293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1887'. [ 627.148574][T14263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.887549][ T5920] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 628.024676][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'. [ 628.485364][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.514973][ T5920] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 628.531053][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.548803][ T5920] usb 5-1: Product: syz [ 628.561246][ T5920] usb 5-1: Manufacturer: syz [ 628.571698][ T5920] usb 5-1: SerialNumber: syz [ 628.592424][ T5920] usb 5-1: config 0 descriptor?? [ 628.604444][ T5920] usb 5-1: ucan: probing device on interface #0 [ 628.740896][ T5920] usb 5-1: ucan: invalid EP count (0) [ 628.746313][ T5920] usb 5-1: ucan: probe failed; try to update the device firmware [ 628.889569][T14326] overlayfs: overlapping lowerdir path [ 629.047915][T14315] fuse: Bad value for 'fd' [ 629.053240][T14315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.063016][T14315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.081175][ T29] audit: type=1400 audit(1771694270.757:1353): avc: denied { write } for pid=14313 comm="syz.4.1890" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 629.582041][ T5920] usb 5-1: USB disconnect, device number 75 [ 629.682564][ T29] audit: type=1400 audit(1771694270.767:1354): avc: denied { open } for pid=14313 comm="syz.4.1890" path="/384/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 629.803700][ T29] audit: type=1400 audit(1771694270.767:1355): avc: denied { ioctl } for pid=14313 comm="syz.4.1890" path="/384/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 629.871148][T14337] 9p: Bad value for 'rfdno' [ 630.013986][ T29] audit: type=1326 audit(1771694271.657:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.7.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721019c629 code=0x7ffc0000 [ 630.215900][T14348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14348 comm=syz.6.1896 [ 630.239566][ T29] audit: type=1326 audit(1771694271.657:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.7.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721019c629 code=0x7ffc0000 [ 630.357204][ T29] audit: type=1326 audit(1771694271.657:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.7.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f721019c629 code=0x7ffc0000 [ 630.513108][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 630.843817][T14348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14348 comm=syz.6.1896 [ 630.859409][ T29] audit: type=1400 audit(1771694271.917:1359): avc: denied { write } for pid=14346 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 631.624648][ T29] audit: type=1326 audit(1771694272.017:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.7.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721019c629 code=0x7ffc0000 [ 631.749007][ T29] audit: type=1326 audit(1771694272.017:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.7.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721019c629 code=0x7ffc0000 [ 631.809798][T14373] xt_connbytes: Forcing CT accounting to be enabled [ 631.880413][ T5817] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 632.041236][ T5817] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 633.488630][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.499251][ T5817] usb 5-1: Product: syz [ 633.503593][ T5817] usb 5-1: Manufacturer: syz [ 633.508207][ T5817] usb 5-1: SerialNumber: syz [ 633.554772][ T29] audit: type=1400 audit(1771694275.277:1362): avc: denied { append } for pid=14383 comm="syz.7.1907" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 633.579386][ T5817] usb 5-1: config 0 descriptor?? [ 633.587689][ T5817] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 634.719864][ T5817] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 634.731511][ T5817] sq905c 5-1:0.0: Get version command failed [ 634.737584][ T5817] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 634.957714][ T9783] usb 5-1: USB disconnect, device number 76 [ 637.164828][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 637.445388][ T5915] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 638.021209][ T5915] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 638.034325][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 638.147252][ T5915] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 638.179471][ T5915] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 638.221157][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.229236][ T5915] usb 8-1: Product: syz [ 638.246991][ T5915] usb 8-1: Manufacturer: syz [ 638.261019][ T5915] usb 8-1: SerialNumber: syz [ 638.373932][ T5915] usb 8-1: config 0 descriptor?? [ 638.394999][T14428] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 638.403294][T14428] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 638.415788][ T5915] usb 8-1: ucan: probing device on interface #0 [ 639.613936][ T5915] usb 8-1: ucan: could not read protocol version, ret=-110 [ 639.636704][ T5915] usb 8-1: ucan: probe failed; try to update the device firmware [ 639.673522][ T5915] usb 8-1: USB disconnect, device number 9 [ 639.725583][T14458] overlay: Unknown parameter 'hash' [ 639.744623][T14460] overlay: Unknown parameter 'hash' [ 640.431033][ T5920] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 640.601507][ T5920] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 640.612170][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.630960][ T5920] usb 6-1: config 0 has no interface number 0 [ 640.637289][ T5920] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 640.659031][ T5920] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.677534][ T5920] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 640.697838][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.707892][ T5920] usb 6-1: Product: syz [ 640.713245][ T5920] usb 6-1: Manufacturer: syz [ 640.726872][ T5920] usb 6-1: SerialNumber: syz [ 640.829495][ T5920] usb 6-1: config 0 descriptor?? [ 641.750995][ T5920] usb 6-1: USB disconnect, device number 70 [ 642.057963][ T9801] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 642.240421][ T9801] usb 7-1: Using ep0 maxpacket: 8 [ 642.353623][ T9801] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 642.902533][T14485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.980162][ T9801] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 643.013164][ T9801] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 643.039879][ T9801] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 643.099140][ T9801] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.129659][ T9801] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 643.142686][ T9801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.389619][ T9801] usb 7-1: usb_control_msg returned -32 [ 643.399430][ T9801] usbtmc 7-1:16.0: can't read capabilities [ 643.462845][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1934'. [ 643.775480][ T5920] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 643.924016][ T29] audit: type=1400 audit(1771694285.627:1363): avc: denied { shutdown } for pid=14513 comm="syz.7.1935" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 643.950935][ T5920] usb 6-1: device descriptor read/64, error -71 [ 644.039093][ T29] audit: type=1400 audit(1771694285.637:1364): avc: denied { mount } for pid=14513 comm="syz.7.1935" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 644.063534][ T29] audit: type=1400 audit(1771694285.647:1365): avc: denied { search } for pid=14513 comm="syz.7.1935" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 644.279955][T14518] netlink: 'syz.3.1937': attribute type 3 has an invalid length. [ 644.288919][ T5920] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 644.430939][ T5920] usb 6-1: device descriptor read/64, error -71 [ 644.508225][ T9103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.538538][ T9103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 644.653839][ T5920] usb usb6-port1: attempt power cycle [ 645.097867][ T5915] usb 7-1: USB disconnect, device number 14 [ 645.158045][ T9103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.194428][T14533] tmpfs: Unknown parameter 'g€quota_inode_hht' [ 645.199666][ T9103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 645.204485][T14533] xt_TCPMSS: Only works on TCP SYN packets [ 645.391064][ T5920] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 645.463991][ T5920] usb 6-1: device descriptor read/8, error -71 [ 645.477166][ T29] audit: type=1400 audit(1771694287.197:1366): avc: denied { read } for pid=14536 comm="syz.7.1943" path="socket:[50491]" dev="sockfs" ino=50491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 645.536513][ T9103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.566617][ T9103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 645.783312][ T5920] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 645.792739][ T9103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.801106][ T29] audit: type=1400 audit(1771694287.447:1367): avc: denied { write } for pid=14536 comm="syz.7.1943" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 645.803320][ T9103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 645.885558][ T5920] usb 6-1: device descriptor read/8, error -71 [ 646.031608][ T5920] usb usb6-port1: unable to enumerate USB device [ 646.146716][T14548] trusted_key: encrypted_key: insufficient parameters specified [ 646.743966][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1949'. [ 646.883722][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.911566][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.925677][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.936680][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.947298][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.051365][ T9103] bridge_slave_1: left allmulticast mode [ 647.080350][ T9103] bridge_slave_1: left promiscuous mode [ 647.102666][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.266980][ T9103] bridge_slave_0: left allmulticast mode [ 647.302411][ T9103] bridge_slave_0: left promiscuous mode [ 647.330887][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.370492][ T792] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 647.440995][ T29] audit: type=1400 audit(1771694289.157:1368): avc: denied { setopt } for pid=14582 comm="syz.3.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 647.504940][ T29] audit: type=1400 audit(1771694289.217:1369): avc: denied { getopt } for pid=14585 comm="syz.5.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 647.533246][ T9103] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 647.647396][ T792] usb 8-1: Using ep0 maxpacket: 16 [ 647.673946][ T792] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 647.707906][ T792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.743343][ T792] usb 8-1: Product: syz [ 647.762439][ T792] usb 8-1: Manufacturer: syz [ 647.787152][ T792] usb 8-1: SerialNumber: syz [ 647.828065][ T792] usb 8-1: config 0 descriptor?? [ 647.875626][ T792] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 647.922252][ T792] usb 8-1: Detected FT-X [ 647.983611][ T9103] batman_adv: batadv0: Removing interface: ip6gretap1 [ 648.067458][T14572] netlink: 'syz.7.1952': attribute type 1 has an invalid length. [ 648.273034][ T9103] bond1 (unregistering): (slave geneve3): Releasing active interface [ 648.503890][ T9103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.532129][ T9103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.993887][ T5811] Bluetooth: hci1: command tx timeout [ 649.026933][ T9103] bond0 (unregistering): Released all slaves [ 649.043681][ T9103] bond1 (unregistering): Released all slaves [ 649.064966][ T9103] bond2 (unregistering): Released all slaves [ 649.085825][ T9103] bond3 (unregistering): Released all slaves [ 649.109685][ T792] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 649.126690][ T792] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 649.136600][ T792] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 649.155214][ T792] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 649.190816][ T792] usb 8-1: USB disconnect, device number 10 [ 649.226066][ T9103] ‚#{6c: left promiscuous mode [ 649.248771][ T792] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 649.313228][ T792] ftdi_sio 8-1:0.0: device disconnected [ 649.767535][T14567] lo speed is unknown, defaulting to 1000 [ 649.989650][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.012984][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.068798][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.085219][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.230645][ T792] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 650.814545][T14592] lo speed is unknown, defaulting to 1000 [ 651.060380][T11654] Bluetooth: hci1: command tx timeout [ 651.202149][ T29] audit: type=1400 audit(1771694292.927:1370): avc: denied { listen } for pid=14651 comm="syz.6.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 651.552124][T14567] chnl_net:caif_netlink_parms(): no params data found [ 651.710877][ T5811] Bluetooth: hci3: command 0x206a tx timeout [ 652.899430][ T29] audit: type=1400 audit(1771694293.877:1371): avc: denied { setattr } for pid=14668 comm="syz.5.1965" name="NETLINK" dev="sockfs" ino=51817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 653.075803][ T9103] hsr_slave_0: left promiscuous mode [ 653.124201][ T9103] hsr_slave_1: left promiscuous mode [ 653.140989][ T5811] Bluetooth: hci1: command tx timeout [ 653.153388][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.187980][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.219156][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.233456][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.281926][ T9103] batman_adv: batadv0: Interface deactivated: macvtap1 [ 653.288902][ T9103] batman_adv: batadv0: Removing interface: macvtap1 [ 653.406697][ T9103] batadv_slave_0: left promiscuous mode [ 653.441114][ T9103] veth1_vlan: left promiscuous mode [ 653.446420][ T9103] veth0_vlan: left promiscuous mode [ 653.645999][ T9103] team0 (unregistering): Port device batadv1 removed [ 654.008807][ T9103] team0 (unregistering): Port device team_slave_1 removed [ 654.321641][ T9802] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 654.521928][ T9103] team0 (unregistering): Port device dummy0 removed [ 654.556769][ T9103] lo (unregistering): left allmulticast mode [ 654.634137][T14687] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.641531][T14687] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.679133][T14687] bridge0: entered allmulticast mode [ 654.760386][ T9802] usb 8-1: Using ep0 maxpacket: 32 [ 654.772090][T14688] bridge_slave_1: left allmulticast mode [ 654.777781][T14688] bridge_slave_1: left promiscuous mode [ 654.784199][T14688] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.821419][T14688] bridge_slave_0: left allmulticast mode [ 654.827075][T14688] bridge_slave_0: left promiscuous mode [ 654.850173][T14688] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.860134][ T9802] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.871168][ T9802] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 654.912315][ T9802] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.964706][ T9802] usb 8-1: config 0 descriptor?? [ 655.007680][ T9802] hub 8-1:0.0: USB hub found [ 655.260570][ T5811] Bluetooth: hci1: command tx timeout [ 655.531095][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.548516][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.569595][T14567] bridge_slave_0: entered allmulticast mode [ 655.594929][T14567] bridge_slave_0: entered promiscuous mode [ 655.613174][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.634406][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.654706][T14567] bridge_slave_1: entered allmulticast mode [ 655.671960][T14567] bridge_slave_1: entered promiscuous mode [ 655.719264][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1973'. [ 655.819986][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.913218][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.020372][ T9802] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 656.357337][ T9802] usbhid 8-1:0.0: can't add hid device: -71 [ 656.379735][ T9802] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 656.405025][T14567] team0: Port device team_slave_0 added [ 656.428707][ T9802] usb 8-1: USB disconnect, device number 12 [ 656.446407][T14567] team0: Port device team_slave_1 added [ 656.513268][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1974'. [ 656.589733][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.604689][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.777499][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.827223][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.834471][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.343116][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.429193][ T29] audit: type=1400 audit(1771694299.147:1372): avc: denied { accept } for pid=14733 comm="syz.3.1977" path="socket:[50869]" dev="sockfs" ino=50869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.675602][T14567] hsr_slave_0: entered promiscuous mode [ 657.715081][T14567] hsr_slave_1: entered promiscuous mode [ 657.742001][T14567] debugfs: 'hsr0' already exists in 'hsr' [ 657.755204][T14567] Cannot create hsr debugfs directory [ 657.788118][T14751] FAULT_INJECTION: forcing a failure. [ 657.788118][T14751] name failslab, interval 1, probability 0, space 0, times 0 [ 657.821689][T14751] CPU: 0 UID: 0 PID: 14751 Comm: syz.5.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.821719][T14751] Tainted: [L]=SOFTLOCKUP [ 657.821726][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.821736][T14751] Call Trace: [ 657.821744][T14751] [ 657.821751][T14751] dump_stack_lvl+0x100/0x190 [ 657.821784][T14751] should_fail_ex.cold+0x5/0xa [ 657.821807][T14751] ? tomoyo_realpath_from_path+0xb6/0x690 [ 657.821828][T14751] should_failslab+0xc2/0x120 [ 657.821856][T14751] __kmalloc_noprof+0xe0/0x850 [ 657.821884][T14751] tomoyo_realpath_from_path+0xb6/0x690 [ 657.821911][T14751] tomoyo_path_number_perm+0x23c/0x580 [ 657.821938][T14751] ? tomoyo_path_number_perm+0x22e/0x580 [ 657.821967][T14751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 657.822021][T14751] ? find_held_lock+0x2b/0x80 [ 657.822049][T14751] ? __fget_files+0x215/0x3d0 [ 657.822064][T14751] ? hook_file_ioctl_common+0x146/0x410 [ 657.822093][T14751] ? __fget_files+0x21f/0x3d0 [ 657.822114][T14751] security_file_ioctl+0xd3/0x230 [ 657.822135][T14751] __x64_sys_ioctl+0xb7/0x210 [ 657.822161][T14751] do_syscall_64+0x106/0xf80 [ 657.822179][T14751] ? clear_bhb_loop+0x40/0x90 [ 657.822201][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.822219][T14751] RIP: 0033:0x7f34eb79c629 [ 657.822236][T14751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.822253][T14751] RSP: 002b:00007f34e99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.822270][T14751] RAX: ffffffffffffffda RBX: 00007f34eba15fa0 RCX: 00007f34eb79c629 [ 657.822282][T14751] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000005 [ 657.822292][T14751] RBP: 00007f34e99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 657.822302][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.822313][T14751] R13: 00007f34eba16038 R14: 00007f34eba15fa0 R15: 00007ffe9b6bd608 [ 657.822338][T14751] [ 657.822346][T14751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 657.866191][ T29] audit: type=1400 audit(1771694299.577:1373): avc: denied { ioctl } for pid=14752 comm="syz.7.1982" path="socket:[50905]" dev="sockfs" ino=50905 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 658.210862][ T5915] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 658.386252][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 658.412942][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 658.619572][ T5915] usb 7-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 658.638776][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.654919][T14567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 658.658423][ T5915] usb 7-1: Product: syz [ 658.678806][ T5915] usb 7-1: Manufacturer: syz [ 658.711573][ T5915] usb 7-1: SerialNumber: syz [ 658.980569][T14567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 658.982003][ T5915] usb 7-1: config 0 descriptor?? [ 659.011599][T14567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 659.037510][ T5915] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected [ 659.059010][ T5915] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 659.078748][T14567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 659.253572][T14760] ufs: You didn't specify the type of your ufs filesystem [ 659.253572][T14760] [ 659.253572][T14760] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 659.253572][T14760] [ 659.253572][T14760] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 659.360706][T14760] ufs: ufstype=old is supported read-only [ 659.392878][T14567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.429867][T14760] ufs: ufs_fill_super(): bad magic number [ 659.480067][T14567] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.497020][ T5920] usb 7-1: USB disconnect, device number 15 [ 659.514572][ T5920] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 659.532494][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.539607][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.566265][ T5920] kobil_sct 7-1:0.0: device disconnected [ 659.651375][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.658630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.202953][T14567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.731016][ T5920] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 660.910887][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 660.934971][T14567] veth0_vlan: entered promiscuous mode [ 660.944556][ T5920] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 660.961382][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.969400][ T5920] usb 7-1: Product: syz [ 660.985303][T14567] veth1_vlan: entered promiscuous mode [ 661.001127][ T5920] usb 7-1: Manufacturer: syz [ 661.005844][ T5920] usb 7-1: SerialNumber: syz [ 661.041371][ T5920] usb 7-1: config 0 descriptor?? [ 661.069335][ T5920] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 661.079710][T14567] veth0_macvtap: entered promiscuous mode [ 661.099948][ T5920] usb 7-1: Detected FT232H [ 661.106496][T14567] veth1_macvtap: entered promiscuous mode [ 661.178414][T14567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.213800][T14567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.308583][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 661.310340][ T29] audit: type=1400 audit(1771694303.027:1374): avc: denied { bind } for pid=14830 comm="syz.6.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 661.340345][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.362051][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.382288][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 661.401917][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.421790][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.430961][ T29] audit: type=1400 audit(1771694303.027:1375): avc: denied { connect } for pid=14830 comm="syz.6.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 661.866958][ T5920] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 662.012456][T14857] overlayfs: failed to resolve 'metacopy=off': -2 [ 662.022241][ T29] audit: type=1400 audit(1771694303.737:1376): avc: denied { mount } for pid=14856 comm="syz.3.2003" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 662.051735][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.059536][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.069206][ T5920] usb 7-1: USB disconnect, device number 16 [ 662.090357][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.108196][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.108338][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 662.179449][ T5920] ftdi_sio 7-1:0.0: device disconnected [ 662.410806][T14865] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 663.541339][ T5811] Bluetooth: hci2: unexpected event 0x07 length: 10 < 255 [ 663.590588][ T29] audit: type=1400 audit(1771694305.317:1377): avc: denied { bind } for pid=14880 comm="syz.5.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 663.614146][T14881] netlink: 'syz.5.2008': attribute type 39 has an invalid length. [ 664.549580][T14896] misc userio: Invalid payload size [ 664.555784][T14896] misc userio: No port type given on /dev/userio [ 664.565926][T14896] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2013'. [ 664.590624][ T5811] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 664.601931][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.601974][ T5811] Tainted: [L]=SOFTLOCKUP [ 664.601982][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.601998][ T5811] Workqueue: hci1 hci_rx_work [ 664.602043][ T5811] Call Trace: [ 664.602049][ T5811] [ 664.602057][ T5811] dump_stack_lvl+0x100/0x190 [ 664.602089][ T5811] sysfs_warn_dup.cold+0x1c/0x28 [ 664.602116][ T5811] sysfs_create_dir_ns+0x24b/0x2b0 [ 664.602146][ T5811] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 664.602172][ T5811] ? find_held_lock+0x2b/0x80 [ 664.602196][ T5811] ? kobject_add_internal+0x25f/0x930 [ 664.602220][ T5811] ? kobject_add_internal+0x25f/0x930 [ 664.602245][ T5811] ? do_raw_spin_unlock+0x145/0x1e0 [ 664.602268][ T5811] kobject_add_internal+0x2c8/0x930 [ 664.602295][ T5811] kobject_add+0x16a/0x1e0 [ 664.602317][ T5811] ? __pfx_kobject_add+0x10/0x10 [ 664.602338][ T5811] ? class_to_subsys+0x10f/0x150 [ 664.602369][ T5811] ? kobject_put+0xb9/0x640 [ 664.602389][ T5811] ? _raw_spin_unlock+0x28/0x50 [ 664.602423][ T5811] device_add+0x294/0x1950 [ 664.602448][ T5811] ? __pfx_dev_set_name+0x10/0x10 [ 664.602477][ T5811] ? __pfx_device_add+0x10/0x10 [ 664.602502][ T5811] ? mgmt_send_event_skb+0x2fb/0x460 [ 664.602537][ T5811] hci_conn_add_sysfs+0x1a3/0x260 [ 664.602558][ T5811] le_conn_complete_evt+0x11cb/0x1f40 [ 664.602593][ T5811] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 664.602627][ T5811] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 664.602657][ T5811] ? skb_pull_data+0x15f/0x1e0 [ 664.602684][ T5811] hci_le_meta_evt+0x34a/0x5f0 [ 664.602713][ T5811] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 664.602744][ T5811] hci_event_packet+0x682/0x11c0 [ 664.602769][ T5811] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 664.602798][ T5811] ? __pfx_hci_event_packet+0x10/0x10 [ 664.602831][ T5811] ? kcov_remote_start+0x384/0x660 [ 664.602865][ T5811] hci_rx_work+0x451/0xfc0 [ 664.602897][ T5811] process_one_work+0x9d7/0x1920 [ 664.602928][ T5811] ? __pfx_process_one_work+0x10/0x10 [ 664.602956][ T5811] ? __pfx_hci_rx_work+0x10/0x10 [ 664.602985][ T5811] worker_thread+0x5da/0xe40 [ 664.603020][ T5811] ? kthread+0x13a/0x450 [ 664.603037][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 664.603054][ T5811] kthread+0x370/0x450 [ 664.603070][ T5811] ? __pfx_kthread+0x10/0x10 [ 664.603090][ T5811] ret_from_fork+0x754/0xd80 [ 664.603110][ T5811] ? __pfx_ret_from_fork+0x10/0x10 [ 664.603130][ T5811] ? rcu_is_watching+0x12/0xc0 [ 664.603153][ T5811] ? __switch_to+0x7b4/0x1120 [ 664.603177][ T5811] ? __pfx_kthread+0x10/0x10 [ 664.603197][ T5811] ret_from_fork_asm+0x1a/0x30 [ 664.603233][ T5811] [ 664.603440][ T5811] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 664.880985][ T5811] Bluetooth: hci1: failed to register connection device [ 665.053621][T14906] netlink: 'syz.6.2014': attribute type 10 has an invalid length. [ 665.066242][T14906] team0: Device xfrm0 is of different type [ 665.895771][T14920] syzkaller0: entered promiscuous mode [ 665.909309][T14920] syzkaller0: entered allmulticast mode [ 666.498868][ T24] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 666.734388][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 666.777442][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 666.790543][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 666.799699][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.808211][ T24] usb 6-1: Product: syz [ 666.812684][ T24] usb 6-1: Manufacturer: syz [ 666.817318][ T24] usb 6-1: SerialNumber: syz [ 666.939189][ T24] usb 6-1: config 0 descriptor?? [ 667.077117][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2022'. [ 667.334095][ T24] usb 6-1: USB disconnect, device number 75 [ 667.874053][T14940] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 667.880578][T14940] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 667.923728][T14940] vhci_hcd vhci_hcd.0: Device attached [ 667.925286][T14943] 9p: Bad value for 'rfdno' [ 667.930528][ T29] audit: type=1400 audit(1771694309.647:1378): avc: denied { open } for pid=14939 comm="syz.6.2024" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 668.016063][T14941] vhci_hcd: connection closed [ 668.017693][ T9042] vhci_hcd vhci_hcd.6: stop threads [ 668.045875][ T9042] vhci_hcd vhci_hcd.6: release socket [ 668.076269][ T9042] vhci_hcd vhci_hcd.6: disconnect device [ 668.083001][T14949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2026'. [ 668.103592][ T5920] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 668.526320][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2029'. [ 668.549590][ T29] audit: type=1400 audit(1771694310.267:1379): avc: denied { mount } for pid=14959 comm="syz.5.2029" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 668.696168][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2030'. [ 668.960941][T14838] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 669.003281][T14847] Set syz1 is full, maxelem 65536 reached [ 669.354722][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'. [ 669.401937][T14973] FAT-fs (nullb0): bogus number of reserved sectors [ 669.408910][T14973] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 669.595505][T14838] usb 6-1: Using ep0 maxpacket: 8 [ 669.706655][T14838] usb 6-1: config 0 has an invalid interface number: 155 but max is 0 [ 669.795591][T14838] usb 6-1: config 0 has no interface number 0 [ 670.345660][T14838] usb 6-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=71.30 [ 670.355825][T14838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.364689][T14838] usb 6-1: Product: syz [ 670.369117][T14838] usb 6-1: Manufacturer: syz [ 670.375843][T14838] usb 6-1: SerialNumber: syz [ 670.384967][T14838] usb 6-1: config 0 descriptor?? [ 670.407721][T14838] keyspan 6-1:0.155: Keyspan - (without firmware) converter detected [ 670.721035][ T792] usb 6-1: USB disconnect, device number 76 [ 670.771279][ T792] keyspan 6-1:0.155: device disconnected [ 670.891497][ T5817] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 671.007166][ T29] audit: type=1400 audit(1771694312.727:1380): avc: denied { setattr } for pid=14995 comm="syz.7.2038" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 671.104294][ T5817] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 671.124281][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.162944][ T5817] usb 7-1: config 0 descriptor?? [ 671.236795][T15015] overlay: Unknown parameter 'appraise' [ 671.439374][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2044'. [ 671.759589][ T5817] usb 7-1: Cannot set MAC address [ 671.777363][ T5817] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 671.866810][ T5817] usb 7-1: USB disconnect, device number 17 [ 672.134038][T15035] misc userio: Invalid payload size [ 672.139687][T15035] misc userio: No port type given on /dev/userio [ 672.151766][T15035] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2043'. [ 673.223428][ T5920] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 673.392465][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.414580][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.423852][ T29] audit: type=1400 audit(1771694315.137:1381): avc: denied { write } for pid=15080 comm="syz.8.2054" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 673.441171][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.552945][ T5920] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.564006][T15082] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 673.570528][T15082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 673.591613][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.611798][ T5920] usb 7-1: config 0 descriptor?? [ 673.909098][T15082] vhci_hcd vhci_hcd.0: Device attached [ 674.011029][T14838] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 674.152435][ T5931] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 674.319401][T14838] usb 8-1: config 0 has no interfaces? [ 674.724310][T14838] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 674.751650][T14838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.765112][T14838] usb 8-1: config 0 descriptor?? [ 675.057084][T15117] netlink: 'syz.8.2059': attribute type 10 has an invalid length. [ 675.152470][T15117] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 675.341122][ T5931] usb 47-1: device descriptor read/64, error -71 [ 675.591822][ T5931] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 675.795226][T15131] IPv6: NLM_F_REPLACE set, but no existing node found! [ 675.898288][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 675.915434][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 676.063900][ T5920] usb 7-1: USB disconnect, device number 18 [ 676.179332][T15141] o2cb: This node has not been configured. [ 676.187300][T15141] o2cb: Cluster check failed. Fix errors before retrying. [ 676.195234][T15141] (syz.8.2061,15141,0):user_dlm_register:674 ERROR: status = -22 [ 676.203983][T15141] (syz.8.2061,15141,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 676.219298][T15141] o2cb: This node has not been configured. [ 676.225808][T15141] o2cb: Cluster check failed. Fix errors before retrying. [ 676.233617][T15141] (syz.8.2061,15141,0):user_dlm_register:674 ERROR: status = -22 [ 676.241540][T15141] (syz.8.2061,15141,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 676.351686][ T29] audit: type=1400 audit(1771694317.897:1382): avc: denied { add_name } for pid=15132 comm="syz.8.2061" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 676.430055][ T29] audit: type=1400 audit(1771694317.897:1383): avc: denied { create } for pid=15132 comm="syz.8.2061" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 676.450486][ T29] audit: type=1400 audit(1771694317.897:1384): avc: denied { associate } for pid=15132 comm="syz.8.2061" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 676.472880][ T29] audit: type=1326 audit(1771694318.097:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.6.2063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27aa99c629 code=0x0 [ 676.529072][T15139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.645218][ T5817] usb 8-1: USB disconnect, device number 13 [ 676.661737][T15083] vhci_hcd: connection closed [ 676.661995][ T1334] vhci_hcd vhci_hcd.7: stop threads [ 676.679860][ T1334] vhci_hcd vhci_hcd.7: release socket [ 676.884182][ T1334] vhci_hcd vhci_hcd.7: disconnect device [ 676.907383][T15152] netlink: 'syz.7.2064': attribute type 1 has an invalid length. [ 676.995902][T15154] netlink: 'syz.7.2064': attribute type 11 has an invalid length. [ 677.026404][T15152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.074548][T15152] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2064'. [ 677.323105][T14838] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 677.434771][ T5920] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 677.587838][T14838] usb 6-1: device descriptor read/64, error -71 [ 678.062057][T11654] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 678.062215][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 678.123059][ T5920] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.138581][ T5920] usb 7-1: config 0 interface 0 has no altsetting 0 [ 678.150010][ T5920] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 678.166091][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.221015][T14838] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 678.247945][ T5920] usb 7-1: config 0 descriptor?? [ 679.225894][T14838] usb 6-1: device descriptor read/64, error -71 [ 679.804989][ T29] audit: type=1400 audit(1771694321.527:1386): avc: denied { associate } for pid=15179 comm="syz.7.2073" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 679.898283][T14838] usb usb6-port1: attempt power cycle [ 681.782421][ T5931] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 681.788964][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 681.845560][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 681.893719][T14838] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 682.154048][ T5920] usb 7-1: USB disconnect, device number 19 [ 682.331099][T14838] usb 6-1: device not accepting address 79, error -71 [ 682.471225][ T29] audit: type=1400 audit(1771694324.187:1387): avc: denied { read } for pid=15205 comm="syz.7.2082" path="socket:[54293]" dev="sockfs" ino=54293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 682.654276][T15214] overlayfs: missing 'lowerdir' [ 682.662944][ T29] audit: type=1400 audit(1771694324.187:1388): avc: denied { write } for pid=15205 comm="syz.7.2082" path="socket:[54294]" dev="sockfs" ino=54294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 686.655202][T15291] tipc: Started in network mode [ 686.671324][T15291] tipc: Node identity 4e8529e7c737, cluster identity 4711 [ 686.689794][T15291] tipc: Enabled bearer , priority 0 [ 686.703328][T15291] syzkaller0: entered promiscuous mode [ 686.708849][T15291] syzkaller0: entered allmulticast mode [ 686.741457][T15291] tipc: Resetting bearer [ 686.769844][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2101'. [ 686.782604][T15287] hsr_slave_0: left promiscuous mode [ 686.795423][T15287] hsr_slave_1: left promiscuous mode [ 687.175296][T15286] tipc: Resetting bearer [ 687.232274][T15286] tipc: Disabling bearer [ 687.263193][ T29] audit: type=1400 audit(1771694328.987:1389): avc: denied { getopt } for pid=15305 comm="syz.3.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 687.463583][ T29] audit: type=1400 audit(1771694329.187:1390): avc: denied { map } for pid=15316 comm="syz.8.2109" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 687.490204][T15317] binder: 15316:15317 ioctl c0306201 200000000c80 returned -14 [ 687.533701][T15317] binder: 15316:15317 ioctl 4c0a 200000001ac0 returned -22 [ 688.270792][ T29] audit: type=1400 audit(1771694329.967:1391): avc: denied { watch_mount } for pid=15325 comm="syz.5.2112" path="/374" dev="tmpfs" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 688.417045][T15334] fuse: Bad value for 'fd' [ 689.800165][T15358] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 690.166496][T15367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15367 comm=syz.5.2124 [ 690.389185][T15373] 9pnet_fd: Insufficient options for proto=fd [ 690.499539][T15376] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 692.613249][ T29] audit: type=1400 audit(1771694333.747:1392): avc: denied { setopt } for pid=15389 comm="syz.8.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 692.838806][T15396] 9pnet_virtio: no channels available for device syz [ 694.895354][ T29] audit: type=1400 audit(1771694336.617:1393): avc: denied { lock } for pid=15411 comm="syz.8.2137" path="socket:[54594]" dev="sockfs" ino=54594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 696.023058][T15430] misc userio: Invalid payload size [ 696.028563][T15430] misc userio: No port type given on /dev/userio [ 696.138491][T15431] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2140'. [ 696.177221][T15433] netlink: 'syz.3.2136': attribute type 18 has an invalid length. [ 696.213179][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 696.285413][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2135'. [ 696.316757][T15440] netlink: 'syz.7.2135': attribute type 16 has an invalid length. [ 696.338403][T15440] netlink: 'syz.7.2135': attribute type 17 has an invalid length. [ 696.432360][T15440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.460023][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.471650][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.511179][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.555741][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.988608][T14838] lo speed is unknown, defaulting to 1000 [ 697.677322][ T29] audit: type=1400 audit(1771694339.397:1394): avc: denied { getopt } for pid=15481 comm="syz.5.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 698.527690][T15497] sctp: [Deprecated]: syz.5.2158 (pid 15497) Use of int in max_burst socket option. [ 698.527690][T15497] Use struct sctp_assoc_value instead [ 698.656942][T15500] ================================================================== [ 698.665043][T15500] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 698.673708][T15500] Read of size 8 at addr ffff88801f2eb400 by task syz.3.2159/15500 [ 698.681581][T15500] [ 698.683896][T15500] CPU: 0 UID: 0 PID: 15500 Comm: syz.3.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.683915][T15500] Tainted: [L]=SOFTLOCKUP [ 698.683920][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.683926][T15500] Call Trace: [ 698.683932][T15500] [ 698.683938][T15500] dump_stack_lvl+0x100/0x190 [ 698.683959][T15500] print_report+0x156/0x4c9 [ 698.683976][T15500] ? __virt_addr_valid+0x81/0x620 [ 698.683992][T15500] ? __phys_addr+0xe8/0x180 [ 698.684009][T15500] ? __list_add_valid_or_report+0x105/0x130 [ 698.684022][T15500] kasan_report+0xdf/0x1e0 [ 698.684040][T15500] ? __list_add_valid_or_report+0x105/0x130 [ 698.684054][T15500] __list_add_valid_or_report+0x105/0x130 [ 698.684067][T15500] clone_mnt+0x633/0x930 [ 698.684083][T15500] copy_tree+0xfc/0xbf0 [ 698.684094][T15500] ? __pfx_down_write+0x10/0x10 [ 698.684109][T15500] copy_mnt_ns+0x2bd/0xc30 [ 698.684122][T15500] ? create_new_namespaces+0x30/0xac0 [ 698.684137][T15500] ? rcu_is_watching+0x12/0xc0 [ 698.684150][T15500] create_new_namespaces+0xd3/0xac0 [ 698.684164][T15500] ? bpf_lsm_capable+0x9/0x10 [ 698.684174][T15500] ? security_capable+0x80/0x260 [ 698.684192][T15500] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 698.684207][T15500] ksys_unshare+0x455/0xab0 [ 698.684222][T15500] ? kfree+0x2ec/0x6b0 [ 698.684233][T15500] ? rcu_is_watching+0x12/0xc0 [ 698.684245][T15500] ? __pfx_ksys_unshare+0x10/0x10 [ 698.684261][T15500] ? kcov_ioctl+0x16a/0x720 [ 698.684276][T15500] __x64_sys_unshare+0x31/0x40 [ 698.684291][T15500] do_syscall_64+0x106/0xf80 [ 698.684302][T15500] ? clear_bhb_loop+0x40/0x90 [ 698.684314][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.684326][T15500] RIP: 0033:0x7f1c06d9c629 [ 698.684336][T15500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.684347][T15500] RSP: 002b:00007f1c07c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 698.684358][T15500] RAX: ffffffffffffffda RBX: 00007f1c07015fa0 RCX: 00007f1c06d9c629 [ 698.684365][T15500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002020480 [ 698.684372][T15500] RBP: 00007f1c06e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 698.684379][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.684385][T15500] R13: 00007f1c07016038 R14: 00007f1c07015fa0 R15: 00007fffc4bf9c78 [ 698.684396][T15500] [ 698.684400][T15500] [ 698.923823][T15500] Allocated by task 14833: [ 698.928231][T15500] kasan_save_stack+0x30/0x50 [ 698.932917][T15500] kasan_save_track+0x14/0x30 [ 698.937589][T15500] __kasan_slab_alloc+0x89/0x90 [ 698.942418][T15500] kmem_cache_alloc_noprof+0x241/0x6e0 [ 698.947849][T15500] alloc_vfsmnt+0x23/0x6a0 [ 698.952241][T15500] clone_mnt+0x4b/0x930 [ 698.956369][T15500] copy_tree+0x329/0xbf0 [ 698.960579][T15500] copy_mnt_ns+0x2bd/0xc30 [ 698.964976][T15500] create_new_namespaces+0xd3/0xac0 [ 698.970147][T15500] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 698.975752][T15500] ksys_unshare+0x455/0xab0 [ 698.980239][T15500] __x64_sys_unshare+0x31/0x40 [ 698.984981][T15500] do_syscall_64+0x106/0xf80 [ 698.989545][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.995407][T15500] [ 698.997703][T15500] Freed by task 14793: [ 699.001737][T15500] kasan_save_stack+0x30/0x50 [ 699.006388][T15500] kasan_save_track+0x14/0x30 [ 699.011047][T15500] kasan_save_free_info+0x3b/0x70 [ 699.016067][T15500] __kasan_slab_free+0x5f/0x80 [ 699.020811][T15500] kmem_cache_free+0x124/0x6a0 [ 699.025565][T15500] rcu_core+0x5a2/0x10d0 [ 699.029789][T15500] handle_softirqs+0x1eb/0x9e0 [ 699.034538][T15500] __irq_exit_rcu+0xef/0x150 [ 699.039108][T15500] irq_exit_rcu+0x9/0x30 [ 699.043329][T15500] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 699.048942][T15500] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 699.054897][T15500] [ 699.057192][T15500] Last potentially related work creation: [ 699.062881][T15500] kasan_save_stack+0x30/0x50 [ 699.067536][T15500] kasan_record_aux_stack+0xa7/0xc0 [ 699.072707][T15500] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 699.078581][T15500] task_work_run+0x150/0x240 [ 699.083143][T15500] do_exit+0x829/0x2aa0 [ 699.087281][T15500] do_group_exit+0xd5/0x2a0 [ 699.091762][T15500] get_signal+0x1ec7/0x21e0 [ 699.096241][T15500] arch_do_signal_or_restart+0x91/0x7a0 [ 699.101760][T15500] irqentry_exit+0x1f8/0x670 [ 699.106324][T15500] asm_exc_page_fault+0x26/0x30 [ 699.111149][T15500] [ 699.113445][T15500] Second to last potentially related work creation: [ 699.120005][T15500] kasan_save_stack+0x30/0x50 [ 699.124662][T15500] kasan_record_aux_stack+0xa7/0xc0 [ 699.129834][T15500] task_work_add+0x28b/0x3b0 [ 699.134394][T15500] mntput_no_expire_slowpath+0x3da/0xb00 [ 699.140001][T15500] mntput_no_expire+0x1fd/0x220 [ 699.144827][T15500] namespace_unlock+0x675/0x920 [ 699.149656][T15500] put_mnt_ns+0x290/0x300 [ 699.153958][T15500] switch_task_namespaces+0x133/0x2c0 [ 699.159306][T15500] do_exit+0x824/0x2aa0 [ 699.163438][T15500] do_group_exit+0xd5/0x2a0 [ 699.167927][T15500] get_signal+0x1ec7/0x21e0 [ 699.172411][T15500] arch_do_signal_or_restart+0x91/0x7a0 [ 699.177931][T15500] irqentry_exit+0x1f8/0x670 [ 699.182502][T15500] asm_exc_page_fault+0x26/0x30 [ 699.187322][T15500] [ 699.189618][T15500] The buggy address belongs to the object at ffff88801f2eb340 [ 699.189618][T15500] which belongs to the cache mnt_cache of size 352 [ 699.203472][T15500] The buggy address is located 192 bytes inside of [ 699.203472][T15500] freed 352-byte region [ffff88801f2eb340, ffff88801f2eb4a0) [ 699.217241][T15500] [ 699.219543][T15500] The buggy address belongs to the physical page: [ 699.225923][T15500] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f2eaa80 pfn:0x1f2ea [ 699.235955][T15500] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 699.244419][T15500] memcg:ffff88802a235401 [ 699.248628][T15500] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 699.257097][T15500] page_type: f5(slab) [ 699.261054][T15500] raw: 00fff00000000240 ffff888140415140 ffffea0001dd7410 ffffea0001dea690 [ 699.269718][T15500] raw: ffff88801f2eaa80 0000000800120002 00000000f5000000 ffff88802a235401 [ 699.278272][T15500] head: 00fff00000000240 ffff888140415140 ffffea0001dd7410 ffffea0001dea690 [ 699.286923][T15500] head: ffff88801f2eaa80 0000000800120002 00000000f5000000 ffff88802a235401 [ 699.295569][T15500] head: 00fff00000000001 ffffea00007cba81 00000000ffffffff 00000000ffffffff [ 699.304213][T15500] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 699.312853][T15500] page dumped because: kasan: bad access detected [ 699.319239][T15500] page_owner tracks the page as allocated [ 699.324926][T15500] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 1942263000, free_ts 0 [ 699.344523][T15500] post_alloc_hook+0x153/0x170 [ 699.349279][T15500] get_page_from_freelist+0x111d/0x3140 [ 699.354798][T15500] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 699.360671][T15500] new_slab+0xa6/0x6d0 [ 699.364730][T15500] refill_objects+0x26b/0x400 [ 699.369382][T15500] __pcs_replace_empty_main+0x19f/0x600 [ 699.374912][T15500] kmem_cache_alloc_noprof+0x480/0x6e0 [ 699.380349][T15500] alloc_vfsmnt+0x23/0x6a0 [ 699.384737][T15500] fc_mount+0x105/0x220 [ 699.388886][T15500] vfs_kern_mount.part.0+0x10e/0x120 [ 699.394153][T15500] kern_mount+0x49/0xc0 [ 699.398315][T15500] sock_init+0x10b/0x1b0 [ 699.402544][T15500] do_one_initcall+0x11d/0x760 [ 699.407282][T15500] kernel_init_freeable+0x6e5/0x7a0 [ 699.412455][T15500] kernel_init+0x1f/0x1e0 [ 699.416766][T15500] ret_from_fork+0x754/0xd80 [ 699.421349][T15500] page_owner free stack trace missing [ 699.426684][T15500] [ 699.428980][T15500] Memory state around the buggy address: [ 699.434579][T15500] ffff88801f2eb300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 699.442616][T15500] ffff88801f2eb380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 699.450651][T15500] >ffff88801f2eb400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 699.458694][T15500] ^ [ 699.462756][T15500] ffff88801f2eb480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 699.470794][T15500] ffff88801f2eb500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 699.478827][T15500] ================================================================== [ 699.554481][ T29] audit: type=1400 audit(1771694341.257:1395): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 699.577221][ T29] audit: type=1400 audit(1771694341.257:1396): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.599542][ T29] audit: type=1400 audit(1771694341.257:1397): avc: denied { append } for pid=5159 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 699.622642][ T29] audit: type=1400 audit(1771694341.257:1398): avc: denied { open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 699.645301][ T29] audit: type=1400 audit(1771694341.257:1399): avc: denied { getattr } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 699.728754][T15503] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2156'. [ 699.933107][T15500] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 699.940345][T15500] CPU: 1 UID: 0 PID: 15500 Comm: syz.3.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.951294][T15500] Tainted: [L]=SOFTLOCKUP [ 699.955618][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.965710][T15500] Call Trace: [ 699.968990][T15500] [ 699.971919][T15500] dump_stack_lvl+0x100/0x190 [ 699.976633][T15500] vpanic+0x552/0x970 [ 699.980669][T15500] ? __pfx_vpanic+0x10/0x10 [ 699.985176][T15500] ? __list_add_valid_or_report+0x105/0x130 [ 699.991088][T15500] panic+0xd1/0xe0 [ 699.994808][T15500] ? __pfx_panic+0x10/0x10 [ 699.999225][T15500] ? __list_add_valid_or_report+0x105/0x130 [ 700.005121][T15500] ? preempt_schedule_common+0x42/0xc0 [ 700.010598][T15500] check_panic_on_warn.cold+0x19/0x34 [ 700.015978][T15500] end_report.part.0+0x3a/0x90 [ 700.020776][T15500] kasan_report.cold+0xe/0x18 [ 700.025455][T15500] ? __list_add_valid_or_report+0x105/0x130 [ 700.031336][T15500] __list_add_valid_or_report+0x105/0x130 [ 700.037029][T15500] clone_mnt+0x633/0x930 [ 700.041255][T15500] copy_tree+0xfc/0xbf0 [ 700.045407][T15500] ? __pfx_down_write+0x10/0x10 [ 700.050258][T15500] copy_mnt_ns+0x2bd/0xc30 [ 700.054672][T15500] ? create_new_namespaces+0x30/0xac0 [ 700.060056][T15500] ? rcu_is_watching+0x12/0xc0 [ 700.064818][T15500] create_new_namespaces+0xd3/0xac0 [ 700.070015][T15500] ? bpf_lsm_capable+0x9/0x10 [ 700.074687][T15500] ? security_capable+0x80/0x260 [ 700.079637][T15500] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 700.085281][T15500] ksys_unshare+0x455/0xab0 [ 700.089794][T15500] ? kfree+0x2ec/0x6b0 [ 700.093860][T15500] ? rcu_is_watching+0x12/0xc0 [ 700.098621][T15500] ? __pfx_ksys_unshare+0x10/0x10 [ 700.103652][T15500] ? kcov_ioctl+0x16a/0x720 [ 700.108166][T15500] __x64_sys_unshare+0x31/0x40 [ 700.112945][T15500] do_syscall_64+0x106/0xf80 [ 700.117538][T15500] ? clear_bhb_loop+0x40/0x90 [ 700.122217][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.128104][T15500] RIP: 0033:0x7f1c06d9c629 [ 700.132517][T15500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.152129][T15500] RSP: 002b:00007f1c07c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 700.160551][T15500] RAX: ffffffffffffffda RBX: 00007f1c07015fa0 RCX: 00007f1c06d9c629 [ 700.168526][T15500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002020480 [ 700.176504][T15500] RBP: 00007f1c06e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 700.184479][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.192452][T15500] R13: 00007f1c07016038 R14: 00007f1c07015fa0 R15: 00007fffc4bf9c78 [ 700.200435][T15500] [ 700.203836][T15500] Kernel Offset: disabled [ 700.208138][T15500] Rebooting in 86400 seconds..